Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
File: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft (raw, json)
Hash identifier: J9JM2h0jMdeoGCYP8JVgPqeX9ee8P+F/OZEsxlolZ6M=
Subject key identifier: 5A:D0:3A:0F:BC:BE:8C:85:68:DE:26:55:65:2A:DC:62:66:E3:CE:34
Authority key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
Certificate issuer: /CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Certificate serial: 019A4D7393FAC2ED9853518B6C31FBA76519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
Manifest number: 1314
Signing time: Tue 04 Nov 2025 06:00:11 +0000
Manifest this update: Tue 04 Nov 2025 06:00:11 +0000
Manifest next update: Wed 05 Nov 2025 06:00:11 +0000
Files and hashes: 1: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl (hash: hZoOZR2ftiqQv++/HQWp3XV8Cdfxf1oen8W9IPP5snU=)
2: torroLihTDOA3iF3dz35198q-Ig.roa (hash: vvwQ1xlARrMA7/miZ5paV8AjRUiaiipi3ehp/RAKIwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:93:fa:c2:ed:98:53:51:8b:6c:31:fb:a7:65:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Validity
Not Before: Nov 4 06:00:11 2025 GMT
Not After : Nov 5 06:00:11 2025 GMT
Subject: CN=5ad03a0fbcbe8c8568de2655652adc6266e3ce34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e8:81:d4:b3:d4:08:68:49:e2:e9:5a:7f:09:
42:ed:16:4d:56:29:70:7a:0b:73:e2:ed:2e:dd:cc:
7c:59:fd:86:7c:e9:42:f3:10:79:f5:8b:38:fc:88:
ba:71:42:92:21:fd:8d:21:b8:17:d5:b0:ea:56:56:
2e:a3:69:2a:21:98:78:01:e0:91:c9:79:de:00:f5:
6d:52:72:e1:b5:86:45:4e:3c:3f:25:9d:a0:48:44:
6f:74:1f:69:69:8d:2f:91:87:58:1c:df:57:72:dc:
c6:73:74:9d:c7:90:ad:55:bc:52:0d:c4:05:a5:0a:
2e:88:f7:09:c4:e7:3a:f5:2b:21:94:5f:10:01:87:
93:e5:fc:69:38:1b:f8:e8:31:df:ec:d6:6a:6d:bb:
6f:f1:e9:b8:95:94:da:b2:15:00:33:ca:46:26:b3:
0c:47:f6:94:13:ec:05:87:c1:fe:5b:52:46:0f:4f:
15:e0:22:77:d8:0d:2d:00:29:26:28:0f:e0:40:54:
4d:e1:87:65:23:0d:ce:18:ec:b3:e8:c7:88:98:20:
5d:75:6a:93:bd:2c:ec:79:e1:e4:73:dd:de:9d:fb:
8f:a4:e6:85:ea:a4:79:9d:02:0c:73:a2:72:26:c1:
04:63:5a:3b:31:cb:53:2c:d3:6a:c0:ad:24:93:4f:
a7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D0:3A:0F:BC:BE:8C:85:68:DE:26:55:65:2A:DC:62:66:E3:CE:34
X509v3 Authority Key Identifier:
keyid:FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:0d:c5:a2:63:e1:55:50:65:06:60:38:9b:27:0b:ed:cd:9a:
f7:9d:fc:0a:7e:b5:c3:f2:a3:d7:67:47:c8:95:3b:3d:f4:fc:
e6:cc:0c:7e:fb:a5:65:34:63:d4:88:10:33:b3:cb:51:aa:b8:
44:20:7b:40:bd:07:c3:12:c3:47:81:95:17:ce:8a:76:7b:60:
45:ca:90:e9:92:59:a0:c1:62:d4:63:86:60:c4:ee:85:ea:29:
e6:f4:b9:fa:dd:23:a8:9e:d4:9c:d1:27:9a:30:96:42:fc:c7:
57:a9:bb:bd:8d:ac:43:6d:95:fb:d6:e2:3c:1b:f9:f8:50:e0:
83:9e:bd:ce:4e:c8:4f:5e:53:37:3d:61:e6:e2:a2:28:de:06:
90:84:52:24:cd:3e:0b:aa:0e:81:47:2e:90:26:28:10:b9:5a:
6c:09:67:85:b5:bb:7d:1f:80:3c:5e:19:48:cd:bf:a3:de:cc:
3c:08:6b:58:5c:ba:31:a9:60:d0:f2:83:d1:91:86:78:03:56:
77:ee:b5:f9:ee:12:7b:d0:55:12:3d:c9:01:9a:5b:98:4e:6f:
13:82:fb:88:80:71:97:07:9f:c4:0a:f8:d4:ce:b1:85:7f:97:
a1:b1:6e:a6:da:0c:ff:06:24:65:e9:6d:d5:ae:0e:d0:d2:f2:
f1:d3:c9:18
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpNc5P6wu2YU1GLbDH7p2UZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNjkyZmRhMDE5Njg3ZDU4ZDcxYmYzMmMwOTA4ZDEyZTQ2
YjRjYTUwHhcNMjUxMTA0MDYwMDExWhcNMjUxMTA1MDYwMDExWjAzMTEwLwYDVQQD
Eyg1YWQwM2EwZmJjYmU4Yzg1NjhkZTI2NTU2NTJhZGM2MjY2ZTNjZTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeiB1LPUCGhJ4ulafwlC7RZNVilw
egtz4u0u3cx8Wf2GfOlC8xB59Ys4/Ii6cUKSIf2NIbgX1bDqVlYuo2kqIZh4AeCR
yXneAPVtUnLhtYZFTjw/JZ2gSERvdB9paY0vkYdYHN9XctzGc3Sdx5CtVbxSDcQF
pQouiPcJxOc69SshlF8QAYeT5fxpOBv46DHf7NZqbbtv8em4lZTashUAM8pGJrMM
R/aUE+wFh8H+W1JGD08V4CJ32A0tACkmKA/gQFRN4YdlIw3OGOyz6MeImCBddWqT
vSzseeHkc93enfuPpOaF6qR5nQIMc6JyJsEEY1o7MctTLNNqwK0kk0+nNQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFrQOg+8voyFaN4mVWUq3GJm4840MB8GA1UdIwQY
MBaAFPppL9oBlofVjXG/MsCQjRLka0ylMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ta3YyZ0dXaDlXTmNiOHl3SkNORXVSclRLVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvOGJmZWM0LWJkNmYtNDY1MC1hNGQ4
LWFkMWMzMGMxMWU1YS8xLzEtbWt2MmdHV2g5V05jYjh5d0pDTkV1UnJUS1UubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzExLzhiZmVjNC1iZDZmLTQ2NTAtYTRkOC1hZDFjMzBjMTFl
NWEvMS8xLW1rdjJnR1doOVdOY2I4eXdKQ05FdVJyVEtVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYg3F
omPhVVBlBmA4mycL7c2a9538Cn61w/Kj12dHyJU7PfT85swMfvulZTRj1IgQM7PL
Uaq4RCB7QL0HwxLDR4GVF86KdntgRcqQ6ZJZoMFi1GOGYMTuheop5vS5+t0jqJ7U
nNEnmjCWQvzHV6m7vY2sQ22V+9biPBv5+FDgg569zk7IT15TNz1h5uKiKN4GkIRS
JM0+C6oOgUcukCYoELlabAlnhbW7fR+APF4ZSM2/o97MPAhrWFy6Malg0PKD0ZGG
eANWd+61+e4Se9BVEj3JAZpbmE5vE4L7iIBxlwefxAr41M6xhX+XobFuptoM/wYk
Zelt1a4O0NLy8dPJGA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:21 2025 by rpki-client