Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
File: ksWu7-nRJuw2Et_ywIITVLFbu6g.mft (raw, json)
Hash identifier: 11tcLnC1bEl6zru30C8vzr1vunhYDBT5iUYJ+IyyXos=
Subject key identifier: 90:30:C3:29:FD:7F:2A:03:CC:F5:39:39:97:DD:BC:65:85:B2:B5:5B
Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
Certificate issuer: /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Certificate serial: 019A51BEA1015CEFCAB927A6C9AF5285AD84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
Manifest number: 03E2
Signing time: Wed 05 Nov 2025 02:00:38 +0000
Manifest this update: Wed 05 Nov 2025 02:00:38 +0000
Manifest next update: Thu 06 Nov 2025 02:00:38 +0000
Files and hashes: 1: NT1QDrMKsOVILzcOXnhpnfJyMhI.roa (hash: 9+BV5zYO8wTAitnkhk1uaQv1Ka5SPfIsNZ8LLhRy68U=)
2: ksWu7-nRJuw2Et_ywIITVLFbu6g.crl (hash: Ls2OroKc8FhweGoLHlo2y0r27OoXR1cALIKMvBP6POU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:a1:01:5c:ef:ca:b9:27:a6:c9:af:52:85:ad:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Validity
Not Before: Nov 5 02:00:38 2025 GMT
Not After : Nov 6 02:00:38 2025 GMT
Subject: CN=9030c329fd7f2a03ccf5393997ddbc6585b2b55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3d:57:04:7e:23:48:03:8a:49:01:95:62:18:
ba:e3:ea:2e:7e:b0:b2:a6:a4:e3:7f:44:17:4c:27:
67:64:8a:ce:00:ff:59:d4:14:d8:b4:9f:24:b3:c4:
90:aa:12:3b:3e:4a:60:da:a7:6f:82:58:11:e1:e3:
f1:44:4e:13:17:8b:8b:39:fe:90:bf:94:ff:a2:af:
35:65:8c:c1:3c:49:0e:6d:b9:08:85:9f:53:8b:40:
fd:48:6a:36:4e:3b:45:4c:19:20:6e:ae:34:64:a1:
9f:52:d3:e4:d1:b1:18:23:eb:e6:34:f8:f4:76:61:
7d:17:28:14:9d:ac:40:9f:54:a3:4e:85:dc:c7:b1:
79:84:7c:ee:10:0b:71:54:3c:07:0b:94:80:cc:8d:
29:9d:b2:97:e3:23:5f:1c:f0:d7:5b:21:bb:70:a3:
99:90:48:88:82:0d:f7:07:6b:92:68:20:e2:01:40:
38:bc:58:98:09:8c:30:e8:bb:3c:6f:ca:ee:c6:8d:
4e:51:40:29:77:ef:a7:dc:0b:fc:c5:c8:33:e7:23:
5c:e9:76:4e:62:61:84:9e:6c:91:e4:83:80:7c:4b:
00:ce:62:4b:8f:19:bd:b7:8c:5c:ff:d5:d8:59:23:
d8:20:03:0e:fd:32:76:0b:d5:16:6b:33:41:9e:e2:
e7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:30:C3:29:FD:7F:2A:03:CC:F5:39:39:97:DD:BC:65:85:B2:B5:5B
X509v3 Authority Key Identifier:
keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d3:f0:f2:39:ab:d3:07:0b:8f:cc:f7:43:45:1c:36:0a:b4:
60:f1:49:e1:32:21:e1:0d:ab:4e:79:85:56:73:ca:61:9d:14:
e0:8f:ed:7f:45:5c:ac:1d:0b:18:e2:bd:c8:1a:0f:95:a6:52:
bc:1a:04:ad:b9:f0:93:5f:b8:4c:70:f1:83:ce:bd:f2:6e:75:
86:d9:c3:53:06:7d:e8:05:6b:b0:63:97:83:53:82:96:b4:b3:
16:fa:0d:d8:f6:79:c0:9d:de:09:82:ea:a0:f3:45:65:6b:f6:
b7:43:bd:c9:54:b3:84:5d:9a:c3:6a:a2:96:64:4f:33:1b:79:
31:d9:25:5b:37:65:30:26:a1:7a:b4:c9:ee:53:6f:7d:d5:b4:
c1:21:1b:e0:9d:18:5c:7f:1c:f7:fb:2c:07:2c:37:84:a4:04:
cb:18:3e:b7:4c:d4:7e:9f:85:89:db:98:9c:25:d3:d1:07:2a:
fd:4a:42:ff:07:57:4b:ba:6b:62:02:a7:e2:8f:dd:bd:b1:2f:
51:60:00:ce:a3:b4:5a:92:03:d4:1d:b0:ee:d9:72:0b:9b:23:
ac:0f:ba:bf:84:9c:66:5d:25:2b:c0:4c:c2:48:3a:ed:58:4c:
c8:b7:33:a3:0f:e6:f9:2a:b8:d3:61:36:21:9f:31:da:4c:e3:
b4:63:d3:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvqEBXO/KuSemya9Sha2EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYzVhZWVmZTlkMTI2ZWMzNjEyZGZmMmMwODIxMzU0YjE1
YmJiYTgwHhcNMjUxMTA1MDIwMDM4WhcNMjUxMTA2MDIwMDM4WjAzMTEwLwYDVQQD
Eyg5MDMwYzMyOWZkN2YyYTAzY2NmNTM5Mzk5N2RkYmM2NTg1YjJiNTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4T1XBH4jSAOKSQGVYhi64+oufrCy
pqTjf0QXTCdnZIrOAP9Z1BTYtJ8ks8SQqhI7Pkpg2qdvglgR4ePxRE4TF4uLOf6Q
v5T/oq81ZYzBPEkObbkIhZ9Ti0D9SGo2TjtFTBkgbq40ZKGfUtPk0bEYI+vmNPj0
dmF9FygUnaxAn1SjToXcx7F5hHzuEAtxVDwHC5SAzI0pnbKX4yNfHPDXWyG7cKOZ
kEiIgg33B2uSaCDiAUA4vFiYCYww6Ls8b8ruxo1OUUApd++n3Av8xcgz5yNc6XZO
YmGEnmyR5IOAfEsAzmJLjxm9t4xc/9XYWSPYIAMO/TJ2C9UWazNBnuLnUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAwwyn9fyoDzPU5OZfdvGWFsrVbMB8GA1UdIwQY
MBaAFJLFru/p0SbsNhLf8sCCE1SxW7uoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3NXdTctblJKdXcyRXRfeXdJSVRWTEZidTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84YzQ5ZDEtOTAxNS00ZTNhLTg1YWMt
NDlmNGY3ODkxMzViLzEva3NXdTctblJKdXcyRXRfeXdJSVRWTEZidTZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC84YzQ5ZDEtOTAxNS00ZTNhLTg1YWMtNDlmNGY3ODkxMzVi
LzEva3NXdTctblJKdXcyRXRfeXdJSVRWTEZidTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdPw8jmr
0wcLj8z3Q0UcNgq0YPFJ4TIh4Q2rTnmFVnPKYZ0U4I/tf0VcrB0LGOK9yBoPlaZS
vBoErbnwk1+4THDxg8698m51htnDUwZ96AVrsGOXg1OClrSzFvoN2PZ5wJ3eCYLq
oPNFZWv2t0O9yVSzhF2aw2qilmRPMxt5MdklWzdlMCaherTJ7lNvfdW0wSEb4J0Y
XH8c9/ssByw3hKQEyxg+t0zUfp+FiduYnCXT0Qcq/UpC/wdXS7prYgKn4o/dvbEv
UWAAzqO0WpID1B2w7tlyC5sjrA+6v4ScZl0lK8BMwkg67VhMyLczow/m+Sq402E2
IZ8x2kzjtGPTCA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:31:40 2025 by rpki-client