Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
File: krFD19sRWVfF25r4lfTn4Vt7axc.mft (raw, json)
Hash identifier: CzTz7fxW6vbK6BI7dpLbSaRXzsyPYNwAO9zcMhU47mE=
Subject key identifier: 35:66:52:23:4F:BF:40:26:90:1F:D6:F4:32:F2:82:26:7B:7A:85:4A
Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Certificate serial: 019A5451F9C539A41D1D422CA89DD332597A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
Manifest number: 0ED8
Signing time: Wed 05 Nov 2025 14:00:49 +0000
Manifest this update: Wed 05 Nov 2025 14:00:49 +0000
Manifest next update: Thu 06 Nov 2025 14:00:49 +0000
Files and hashes: 1: krFD19sRWVfF25r4lfTn4Vt7axc.crl (hash: Qh/eNF3vasWaL4nkZ11a7quDQgVjYx9hW7QJDYINT+s=)
2: tT2MkC3bDAt-AG9rSFm6itBZmH0.roa (hash: ZIroNCPsL/l7JhsPE9mGE4anIRCcdf9s2wEC0oqqzzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:f9:c5:39:a4:1d:1d:42:2c:a8:9d:d3:32:59:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Validity
Not Before: Nov 5 14:00:49 2025 GMT
Not After : Nov 6 14:00:49 2025 GMT
Subject: CN=356652234fbf4026901fd6f432f282267b7a854a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:f2:7f:92:9f:6f:84:9c:26:5b:be:06:d7:
cd:9d:5a:cc:dc:80:70:cf:0e:ad:c4:60:2c:37:4e:
b0:8a:23:0b:3a:0c:23:cf:11:0c:ef:5d:37:5c:05:
c2:69:0e:25:cf:6b:25:c4:17:59:8f:2e:50:82:c5:
4a:c0:37:40:5d:72:71:a4:7c:67:9a:25:d1:b0:48:
97:fd:e8:be:ea:d2:5d:fd:e9:81:23:64:a8:ea:18:
14:50:04:4f:65:b3:90:ac:1b:d4:12:47:c4:fc:b4:
58:bd:13:24:af:7f:b1:ab:35:3f:21:ab:63:a8:21:
ca:cf:aa:f9:77:e0:fe:48:cf:8b:19:46:ca:18:a7:
af:ec:70:43:3b:d8:9b:87:85:d5:0b:c9:04:d0:07:
b0:a9:72:23:10:b4:13:7f:8d:d2:ed:45:26:17:32:
04:93:0d:21:80:c8:30:f0:d8:a1:e2:d4:3f:dc:ef:
b5:ed:91:a0:c7:90:94:a6:28:d7:ac:8e:67:87:2e:
5a:ef:95:98:3c:67:51:6b:7a:c3:2f:c9:92:26:45:
32:e5:96:e4:0e:58:2e:5b:c9:05:4b:58:9c:19:bc:
80:fa:fb:13:bc:1a:51:fe:45:05:83:d7:53:28:df:
0a:77:c6:02:55:1f:c3:6f:53:e1:ed:3c:3e:cf:1a:
af:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:66:52:23:4F:BF:40:26:90:1F:D6:F4:32:F2:82:26:7B:7A:85:4A
X509v3 Authority Key Identifier:
keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:97:ac:31:e3:f7:2c:9a:cc:be:a0:18:41:c3:9b:4f:9f:32:
69:33:87:d1:0b:ea:32:af:38:72:95:9c:86:47:9f:22:a4:8e:
3d:3d:c2:4d:e1:71:3b:5f:ce:65:35:22:54:cd:60:f0:a3:57:
a3:4d:08:5d:88:8e:8c:61:d9:e9:6e:ad:4d:0e:3b:1c:4c:de:
c7:92:c5:d0:2d:31:69:e8:c8:da:5e:8e:d8:0b:cd:9e:1b:a6:
b0:44:29:95:03:11:1d:83:1d:56:96:52:8f:fa:e4:4e:47:1a:
6c:c0:0f:bc:2e:26:27:7e:2c:df:e1:4f:b1:37:27:c5:2f:8a:
d5:6d:f7:bd:39:a4:8a:b3:4a:47:67:e9:a4:d5:73:02:ff:15:
68:23:6b:17:0d:a2:3c:bf:ef:3e:a9:07:bb:2a:76:8c:12:3f:
25:0d:76:60:cc:05:f9:53:4f:0d:9a:66:51:cd:f6:73:6b:f7:
9e:98:a0:78:cb:60:33:0c:a1:6f:ca:af:47:79:c5:21:1e:96:
d9:42:1b:f4:44:20:c8:4c:2d:b1:07:92:57:02:51:64:b7:7d:
23:cd:d1:7b:d1:29:ac:d4:97:9a:3b:db:74:10:e7:7c:02:1a:
8f:b5:cc:1f:c7:0c:66:ff:70:5e:80:af:66:8c:78:26:19:c6:
a8:23:9b:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUUfnFOaQdHUIsqJ3TMll6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYjE0M2Q3ZGIxMTU5NTdjNWRiOWFmODk1ZjRlN2UxNWI3
YjZiMTcwHhcNMjUxMTA1MTQwMDQ5WhcNMjUxMTA2MTQwMDQ5WjAzMTEwLwYDVQQD
EygzNTY2NTIyMzRmYmY0MDI2OTAxZmQ2ZjQzMmYyODIyNjdiN2E4NTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstvyf5Kfb4ScJlu+BtfNnVrM3IBw
zw6txGAsN06wiiMLOgwjzxEM7103XAXCaQ4lz2slxBdZjy5QgsVKwDdAXXJxpHxn
miXRsEiX/ei+6tJd/emBI2So6hgUUARPZbOQrBvUEkfE/LRYvRMkr3+xqzU/Iatj
qCHKz6r5d+D+SM+LGUbKGKev7HBDO9ibh4XVC8kE0AewqXIjELQTf43S7UUmFzIE
kw0hgMgw8Nih4tQ/3O+17ZGgx5CUpijXrI5nhy5a75WYPGdRa3rDL8mSJkUy5Zbk
DlguW8kFS1icGbyA+vsTvBpR/kUFg9dTKN8Kd8YCVR/Db1Ph7Tw+zxqvAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVmUiNPv0AmkB/W9DLygiZ7eoVKMB8GA1UdIwQY
MBaAFJKxQ9fbEVlXxdua+JX05+Fbe2sXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3JGRDE5c1JXVmZGMjVyNGxmVG40VnQ3YXhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kMTE0NDMtMTM3Mi00Y2ZjLThkNTct
NmQzYTg4MTUzNzY3LzEva3JGRDE5c1JXVmZGMjVyNGxmVG40VnQ3YXhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kMTE0NDMtMTM3Mi00Y2ZjLThkNTctNmQzYTg4MTUzNzY3
LzEva3JGRDE5c1JXVmZGMjVyNGxmVG40VnQ3YXhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyJesMeP3
LJrMvqAYQcObT58yaTOH0QvqMq84cpWchkefIqSOPT3CTeFxO1/OZTUiVM1g8KNX
o00IXYiOjGHZ6W6tTQ47HEzex5LF0C0xaejI2l6O2AvNnhumsEQplQMRHYMdVpZS
j/rkTkcabMAPvC4mJ34s3+FPsTcnxS+K1W33vTmkirNKR2fppNVzAv8VaCNrFw2i
PL/vPqkHuyp2jBI/JQ12YMwF+VNPDZpmUc32c2v3npigeMtgMwyhb8qvR3nFIR6W
2UIb9EQgyEwtsQeSVwJRZLd9I83Re9EprNSXmjvbdBDnfAIaj7XMH8cMZv9wXoCv
Zox4JhnGqCObyg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:51:45 2025 by rpki-client