Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
File: khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft (raw, json)
Hash identifier: 3Q4jPwzRn55ySmPyXupKJb45ixZZ4l6blAhYiOXe+zc=
Subject key identifier: 7B:7F:C1:71:8A:B7:1F:FC:64:69:9C:06:1C:6F:61:1A:A3:08:4D:0F
Authority key identifier: 92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
Certificate issuer: /CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Certificate serial: 019A503DF074C2BBCEF651B1F910568FEA73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
Manifest number: 053C
Signing time: Tue 04 Nov 2025 19:00:27 +0000
Manifest this update: Tue 04 Nov 2025 19:00:27 +0000
Manifest next update: Wed 05 Nov 2025 19:00:27 +0000
Files and hashes: 1: khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl (hash: Uick3A5Z99rTUbFhJczQb6yjqVBhoXwqb4c6mZ5O1Tc=)
2: zXilNDKWsxIaUq_LEMDiwJqBNJI.roa (hash: Eo6IWAeJUaI2CdPXL2mpqljbcAx/G9eShos6ic97+nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:f0:74:c2:bb:ce:f6:51:b1:f9:10:56:8f:ea:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Validity
Not Before: Nov 4 19:00:27 2025 GMT
Not After : Nov 5 19:00:27 2025 GMT
Subject: CN=7b7fc1718ab71ffc64699c061c6f611aa3084d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d8:f4:04:e6:bf:50:9d:25:db:13:01:0c:0a:
01:43:26:39:d4:f3:0c:74:07:f8:2f:3a:f0:19:5a:
6f:da:28:c8:06:d0:60:0d:3c:43:7f:e7:ee:6d:6c:
d3:67:e9:47:f1:5c:30:71:95:6f:e8:a6:da:0e:9d:
ad:d9:01:e2:59:1d:7d:6a:86:da:6a:4f:1c:23:1c:
82:e1:19:d7:6d:e9:1f:2c:a0:9b:b8:5d:84:e7:7f:
58:f0:dc:15:49:bf:fd:b7:18:37:ef:e6:cb:9f:7d:
5e:8c:91:7f:8e:49:2a:19:5f:a0:34:ad:f4:50:dc:
32:9e:78:82:89:ae:2b:ea:de:c1:6d:25:24:9f:ca:
93:ff:77:90:b3:e7:48:2e:d6:66:fb:b4:9b:c4:ec:
29:fa:5f:18:f6:2d:f2:3a:f7:f7:8e:54:36:83:34:
91:78:30:b0:7e:da:d9:58:2a:22:6a:91:7d:aa:42:
72:d8:23:0f:24:94:22:e0:66:98:4a:7f:02:7b:1a:
2f:7e:64:8e:92:8c:75:c6:9a:4f:c9:9b:72:c3:55:
a2:88:de:02:6c:a9:da:8c:33:d1:b5:8c:ec:3f:81:
24:47:21:08:d6:c6:dc:ef:11:51:35:23:e2:df:af:
c7:1c:e6:2d:59:e1:d4:79:5d:45:21:f8:a1:72:36:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7F:C1:71:8A:B7:1F:FC:64:69:9C:06:1C:6F:61:1A:A3:08:4D:0F
X509v3 Authority Key Identifier:
keyid:92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:97:ba:c8:36:c8:92:1c:4b:d4:58:5e:bf:2e:d8:3d:7e:d4:
26:2c:a3:3c:e5:c5:6e:00:e5:cc:9b:99:f3:6c:44:74:23:b2:
33:3d:cb:8d:3a:88:d5:ef:69:b1:80:81:7a:74:03:60:42:2f:
02:a9:bb:78:99:a0:5e:5b:53:18:e1:11:c2:55:bb:99:64:70:
a2:f8:29:da:8c:cd:d7:c3:bd:a8:e5:fa:fa:e9:15:e8:8a:7a:
7c:ae:da:e7:ea:61:d5:fa:4f:34:13:32:9d:8d:ac:8b:b3:7d:
94:20:a2:3f:cd:3c:31:fb:08:91:39:e6:68:00:c3:9c:bd:b4:
22:c4:9a:66:94:69:5d:da:85:35:19:1f:02:49:9a:91:47:c8:
10:bd:fb:72:79:93:a5:f0:1a:2a:a4:6e:c4:d4:d1:f9:af:89:
29:c8:fc:4b:da:80:8c:d6:3c:8c:12:72:c8:d2:b2:a8:df:8c:
d5:96:a1:10:ab:e3:cc:10:9e:61:5c:4d:c9:9f:8a:3f:75:3c:
48:b9:bc:16:59:23:57:3f:f3:95:00:4f:1d:c4:76:af:f1:52:
68:f0:88:23:26:6f:9a:d3:87:c4:19:b8:50:0d:20:f7:0c:a8:
aa:65:a4:b4:06:05:0b:be:a8:0d:e7:b2:42:24:a8:52:0c:7f:
de:29:77:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPfB0wrvO9lGx+RBWj+pzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMTNmOTBhYTRkOGU0N2VhYmIzNDg1OTAxNTdmNDg3OGJm
NzQ2ZjgwHhcNMjUxMTA0MTkwMDI3WhcNMjUxMTA1MTkwMDI3WjAzMTEwLwYDVQQD
Eyg3YjdmYzE3MThhYjcxZmZjNjQ2OTljMDYxYzZmNjExYWEzMDg0ZDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9j0BOa/UJ0l2xMBDAoBQyY51PMM
dAf4LzrwGVpv2ijIBtBgDTxDf+fubWzTZ+lH8VwwcZVv6KbaDp2t2QHiWR19aoba
ak8cIxyC4RnXbekfLKCbuF2E539Y8NwVSb/9txg37+bLn31ejJF/jkkqGV+gNK30
UNwynniCia4r6t7BbSUkn8qT/3eQs+dILtZm+7SbxOwp+l8Y9i3yOvf3jlQ2gzSR
eDCwftrZWCoiapF9qkJy2CMPJJQi4GaYSn8CexovfmSOkox1xppPyZtyw1WiiN4C
bKnajDPRtYzsP4EkRyEI1sbc7xFRNSPi36/HHOYtWeHUeV1FIfihcjbuPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHt/wXGKtx/8ZGmcBhxvYRqjCE0PMB8GA1UdIwQY
MBaAFJIT+Qqk2OR+q7NIWQFX9IeL90b4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2hQNUNxVFk1SDZyczBoWkFWZjBoNHYzUnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iZGZhY2UtMTkzYy00OWM4LWI0NWQt
ZGIzZmNjZmI3ZGIxLzEva2hQNUNxVFk1SDZyczBoWkFWZjBoNHYzUnZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iZGZhY2UtMTkzYy00OWM4LWI0NWQtZGIzZmNjZmI3ZGIx
LzEva2hQNUNxVFk1SDZyczBoWkFWZjBoNHYzUnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJe6yDbI
khxL1Fhevy7YPX7UJiyjPOXFbgDlzJuZ82xEdCOyMz3LjTqI1e9psYCBenQDYEIv
Aqm7eJmgXltTGOERwlW7mWRwovgp2ozN18O9qOX6+ukV6Ip6fK7a5+ph1fpPNBMy
nY2si7N9lCCiP808MfsIkTnmaADDnL20IsSaZpRpXdqFNRkfAkmakUfIEL37cnmT
pfAaKqRuxNTR+a+JKcj8S9qAjNY8jBJyyNKyqN+M1ZahEKvjzBCeYVxNyZ+KP3U8
SLm8FlkjVz/zlQBPHcR2r/FSaPCIIyZvmtOHxBm4UA0g9wyoqmWktAYFC76oDeey
QiSoUgx/3il3AQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:32 2025 by rpki-client