Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
File: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft (raw, json)
Hash identifier: Xssjnw3eiWjdAmglR/WGKM7BawKGCjVnIqBJFhT8QA4=
Subject key identifier: 2F:88:31:7E:5E:F4:5B:CC:0C:E9:EB:AF:7A:8D:53:AC:08:02:CA:DF
Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
Certificate issuer: /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Certificate serial: 019A4DAAA850D32ED29B54E1520CE77E9CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 07:00:20 +0000
Manifest this update: Tue 04 Nov 2025 07:00:20 +0000
Manifest next update: Wed 05 Nov 2025 07:00:20 +0000
Files and hashes: 1: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl (hash: jumRFFoxm8ZLmqP/JEp/uGpOsiEgWjAhWGBX+C/KOjk=)
2: Xz5fRm1rvrLEvX3nzQNpvfuqwdQ.roa (hash: 3vZNMQRQpFvLq3O7/5316ZbW91wqqPn0EJ7/sIa76eA=)
3: rIuFBAfmvp_-lxNjPhpoImYAjZk.roa (hash: UYHTUbb1Al1rBA78c79sngeNx1JvlEPhDvWJaFDSi+E=)
4: y4ueXY0ijBf4RZb4fGJVsXQLGA0.roa (hash: UvuMlXoUYXPwY2R/r9zwqG0BA2XfWQY7ClxJAXl4TJs=)
5: yoc8JMk-9f_YUHXEL_9_ZmX1Dg4.roa (hash: vHYZAYQIcTZ88hbC8SwB+Nm3QsYJxFwlJCLWjy+CEWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:a8:50:d3:2e:d2:9b:54:e1:52:0c:e7:7e:9c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Validity
Not Before: Nov 4 07:00:20 2025 GMT
Not After : Nov 5 07:00:20 2025 GMT
Subject: CN=2f88317e5ef45bcc0ce9ebaf7a8d53ac0802cadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3e:b9:ac:ae:4e:9e:73:67:7c:93:c2:3d:53:
f7:04:c7:1d:49:8e:4d:87:ad:fc:dc:9b:b0:cf:90:
fc:aa:58:a1:a6:4a:d0:a4:73:da:5d:1c:b8:c0:bf:
7a:fa:a3:c7:7d:a3:ac:cc:28:7b:e0:f7:4c:2b:09:
9a:57:ea:fc:77:95:f1:5f:7f:45:bd:18:3a:d2:36:
c5:b6:9d:0c:34:3b:8b:97:c6:f9:e0:64:57:c0:4e:
1b:91:ed:7d:49:4f:f7:e1:d6:9e:76:8e:58:43:e7:
04:7e:3b:e3:b3:d3:d9:41:5b:62:e5:97:a0:a3:7f:
e0:6a:f0:64:a7:78:a6:7f:97:6f:7d:08:cf:42:dc:
9b:71:7a:03:ce:8e:26:30:0c:01:3d:0a:66:91:a9:
79:ef:9b:53:b3:19:de:d6:a9:7e:6f:d5:36:95:7f:
2b:08:9b:a3:dd:ed:cd:7b:63:a5:37:0a:26:7a:5f:
e4:67:20:b0:dc:a0:87:29:7f:d0:9e:0d:a3:17:d4:
fe:f4:7a:ec:7d:8e:e8:c8:33:b0:88:96:87:15:52:
c9:83:12:60:3d:ac:62:71:4d:13:2a:ff:78:0b:6a:
6b:93:30:e7:76:2e:a8:f1:44:6b:e3:e1:77:d8:c9:
3a:a3:56:57:e6:fd:bc:b0:7e:3e:58:ff:87:f0:81:
c7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:88:31:7E:5E:F4:5B:CC:0C:E9:EB:AF:7A:8D:53:AC:08:02:CA:DF
X509v3 Authority Key Identifier:
keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:40:4e:f6:31:24:17:84:43:d9:7c:1d:9c:d0:95:05:9b:9a:
89:24:08:30:09:2c:c4:b7:96:01:0e:09:f5:b2:e2:ce:b4:13:
7c:1d:29:cf:8b:45:80:05:12:42:04:1a:88:d8:70:07:be:5a:
05:df:bf:d1:dc:5c:09:6e:98:5c:79:f1:17:be:05:bb:d4:7f:
fd:8d:5a:2a:04:e9:35:ee:dd:df:21:63:a5:27:51:4a:b6:eb:
8d:9f:44:f4:fd:b7:79:0d:36:66:42:aa:89:a0:2f:eb:dd:31:
fa:70:eb:04:96:68:34:25:44:75:66:fc:62:d8:a2:d7:68:85:
4e:e8:63:77:da:b4:45:f4:73:74:20:4a:82:70:86:3a:b7:f6:
d1:0b:03:28:e7:68:5f:8e:4e:86:cc:6b:5f:7f:68:5a:50:e5:
48:29:ca:aa:eb:46:0a:fd:df:ab:4a:28:9e:b0:73:7c:cd:3f:
8a:88:ab:06:b3:17:96:ed:84:2a:0e:be:9a:30:b5:28:94:37:
68:c9:9c:20:4a:2a:bc:65:bd:51:7a:79:d0:c3:5a:3f:66:49:
3c:9c:d0:0c:a3:56:68:97:61:b6:53:4e:20:a9:3f:3c:28:33:
af:81:11:ae:de:d6:41:46:99:7e:ca:6a:97:ab:dd:be:d7:ab:
7c:54:ac:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqqhQ0y7Sm1ThUgznfpzAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNmVkZjIzMjY0YjQzODIxZGFlOTdkMTBiZDM2NGNiNmJi
N2YyMzQwHhcNMjUxMTA0MDcwMDIwWhcNMjUxMTA1MDcwMDIwWjAzMTEwLwYDVQQD
EygyZjg4MzE3ZTVlZjQ1YmNjMGNlOWViYWY3YThkNTNhYzA4MDJjYWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT65rK5OnnNnfJPCPVP3BMcdSY5N
h6383Juwz5D8qlihpkrQpHPaXRy4wL96+qPHfaOszCh74PdMKwmaV+r8d5XxX39F
vRg60jbFtp0MNDuLl8b54GRXwE4bke19SU/34daedo5YQ+cEfjvjs9PZQVti5Zeg
o3/gavBkp3imf5dvfQjPQtybcXoDzo4mMAwBPQpmkal575tTsxne1ql+b9U2lX8r
CJuj3e3Ne2OlNwomel/kZyCw3KCHKX/Qng2jF9T+9HrsfY7oyDOwiJaHFVLJgxJg
PaxicU0TKv94C2prkzDndi6o8URr4+F32Mk6o1ZX5v28sH4+WP+H8IHHDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+IMX5e9FvMDOnrr3qNU6wIAsrfMB8GA1UdIwQY
MBaAFCpu3yMmS0OCHa6X0QvTZMtrt/I0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS203Zkl5WkxRNElkcnBmUkM5Tmt5MnUzOGpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS85YmI0MGQtMzYzOC00NDllLWFlMjUt
ZDQyOGYyMzQ5NjYwLzEvS203Zkl5WkxRNElkcnBmUkM5Tmt5MnUzOGpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS85YmI0MGQtMzYzOC00NDllLWFlMjUtZDQyOGYyMzQ5NjYw
LzEvS203Zkl5WkxRNElkcnBmUkM5Tmt5MnUzOGpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFkBO9jEk
F4RD2XwdnNCVBZuaiSQIMAksxLeWAQ4J9bLizrQTfB0pz4tFgAUSQgQaiNhwB75a
Bd+/0dxcCW6YXHnxF74Fu9R//Y1aKgTpNe7d3yFjpSdRSrbrjZ9E9P23eQ02ZkKq
iaAv690x+nDrBJZoNCVEdWb8Ytii12iFTuhjd9q0RfRzdCBKgnCGOrf20QsDKOdo
X45OhsxrX39oWlDlSCnKqutGCv3fq0oonrBzfM0/ioirBrMXlu2EKg6+mjC1KJQ3
aMmcIEoqvGW9UXp50MNaP2ZJPJzQDKNWaJdhtlNOIKk/PCgzr4ERrt7WQUaZfspq
l6vdvterfFSsWA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:17 2025 by rpki-client