Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
File: kfX87b24TdUvxncNfM_T_GaE-kE.mft (raw, json)
Hash identifier: f66yfaXncICMDXhIp815MvGOQs2MmqYxELCg/gxt4R8=
Subject key identifier: 58:8E:85:EF:98:F0:D7:89:D2:18:04:1B:CA:09:77:34:0C:18:94:A0
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Certificate issuer: /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial: 019A4EF44F170E3EED37F0E5D367F019DB31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 13:00:25 +0000
Manifest this update: Tue 04 Nov 2025 13:00:25 +0000
Manifest next update: Wed 05 Nov 2025 13:00:25 +0000
Files and hashes: 1: 6UpEJlRsXOn9vaGmBJWrZdfalwA.roa (hash: HSwxSSz5lFpaFRsJuAqgaQ8EsTFkTI/T+FmwfdtjYaA=)
2: 9tPvRIgWOFQGF5ALiDiBtpjalf0.roa (hash: CNi9LKlhqfclz9Oir048bs7o3/W9+fUSyftDkxngReE=)
3: JvOQdUjkCtx4pMZ63YDUDSKRif8.roa (hash: lpSKgZ5ZudI2jyQ9YWWPgdYiIoklrO/1U/orK0nz9yw=)
4: kfX87b24TdUvxncNfM_T_GaE-kE.crl (hash: ZJZwtg0wlUvhjHQAlJnvxobKx0ub0+MNPVJuTmnwruE=)
5: lKDuxfpv6g9ZDhVaa38VKaYZKKg.roa (hash: OVK0az1AcO1NBXsdKgGXvtFiE3weIknB+sCCAuqYuGw=)
6: xXN1JERl6SmTU8LGAK6YjCsE_8g.roa (hash: UJ/2eCVna1OAdfj1e6cD3/kAVB2y1kYmD/HxfsrIilw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:4f:17:0e:3e:ed:37:f0:e5:d3:67:f0:19:db:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Validity
Not Before: Nov 4 13:00:25 2025 GMT
Not After : Nov 5 13:00:25 2025 GMT
Subject: CN=588e85ef98f0d789d218041bca0977340c1894a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:fa:46:69:91:ee:ff:7d:ac:8b:dd:28:8f:
42:11:0f:0b:3c:71:11:1a:c3:86:e7:05:df:b9:7f:
eb:f5:a1:8f:9a:82:92:e0:c7:82:6a:38:fb:2c:47:
7a:83:31:cf:cb:09:47:fb:5f:7f:2b:fd:4a:5a:3f:
ff:8d:4b:f9:a4:3c:17:d5:9e:07:e1:7e:0e:75:a5:
0d:f5:6c:60:15:23:48:28:25:e0:9e:57:a9:3f:61:
08:8e:57:7d:e0:7c:23:b0:cd:2e:2f:ca:7a:3d:9b:
3a:84:44:e6:1b:6d:5a:a3:bb:a2:1e:f9:83:63:a9:
e5:e7:4e:bf:23:bb:c6:f0:0b:39:98:45:36:0a:37:
be:00:b6:98:48:a7:1e:3d:e0:40:62:e0:39:1a:3c:
dd:e6:fe:c9:93:4c:8b:8f:33:fd:96:86:c2:2f:d8:
ae:57:b9:f4:16:b4:c7:b8:1f:df:f3:a3:5a:3f:93:
5f:e2:24:08:91:9f:55:41:b3:d1:4f:8b:82:8a:ba:
77:e7:73:dc:59:22:9f:68:f8:4e:2c:2e:b8:56:f7:
a7:2b:2a:1b:4e:51:4f:2e:58:0b:ca:f3:c2:46:d2:
2d:dd:31:83:29:9a:c5:75:d8:36:e3:0a:7c:fd:52:
47:46:fd:7e:18:c2:36:6b:c6:92:05:1e:b4:4d:18:
6a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8E:85:EF:98:F0:D7:89:D2:18:04:1B:CA:09:77:34:0C:18:94:A0
X509v3 Authority Key Identifier:
keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:56:f2:d3:9c:4b:df:5d:66:60:82:26:16:90:29:c5:7c:fe:
a0:66:a9:d5:0f:32:b0:9d:ca:e0:0b:5d:78:e5:e8:9c:8e:b9:
6b:45:73:e8:0c:5f:ce:d5:31:94:ed:06:d9:4f:45:2b:61:e0:
5f:77:81:7e:c2:61:f8:16:75:a0:09:42:6e:c4:c9:43:b8:a4:
e0:a4:15:fc:6a:b1:02:e3:f7:48:d1:93:f0:83:9a:ba:86:cc:
00:7e:e5:ba:40:82:83:c8:fd:cc:ad:fd:85:67:dd:1d:6b:82:
a8:a7:04:68:ca:29:eb:57:4c:0b:a3:b9:a4:2a:a2:a8:6b:cb:
a8:c5:a3:36:ab:ee:81:f3:cc:90:e7:af:fe:93:0b:0b:2a:4a:
20:1d:ab:7f:77:7b:cc:cc:45:19:9a:fd:ce:e6:89:13:cc:1c:
49:68:df:48:7e:a2:fa:0f:c1:e4:b8:a8:a9:1c:56:a9:40:f7:
e8:47:82:65:4c:2c:33:da:8e:be:f8:cd:17:6a:7a:9d:fd:05:
49:52:7e:39:e8:7c:6e:10:3e:69:6a:0e:56:76:50:62:91:d2:
56:a3:e4:4e:d2:3a:fc:f7:c6:76:48:95:1f:47:3b:90:b8:b5:
c6:d1:99:9e:f3:ad:13:22:c9:c7:04:2e:d3:68:0f:f6:2b:13:
2c:fc:19:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9E8XDj7tN/Dl02fwGdsxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZjVmY2VkYmRiODRkZDUyZmM2NzcwZDdjY2ZkM2ZjNjY4
NGZhNDEwHhcNMjUxMTA0MTMwMDI1WhcNMjUxMTA1MTMwMDI1WjAzMTEwLwYDVQQD
Eyg1ODhlODVlZjk4ZjBkNzg5ZDIxODA0MWJjYTA5NzczNDBjMTg5NGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSH6RmmR7v99rIvdKI9CEQ8LPHER
GsOG5wXfuX/r9aGPmoKS4MeCajj7LEd6gzHPywlH+19/K/1KWj//jUv5pDwX1Z4H
4X4OdaUN9WxgFSNIKCXgnlepP2EIjld94HwjsM0uL8p6PZs6hETmG21ao7uiHvmD
Y6nl506/I7vG8As5mEU2Cje+ALaYSKcePeBAYuA5Gjzd5v7Jk0yLjzP9lobCL9iu
V7n0FrTHuB/f86NaP5Nf4iQIkZ9VQbPRT4uCirp353PcWSKfaPhOLC64VvenKyob
TlFPLlgLyvPCRtIt3TGDKZrFddg24wp8/VJHRv1+GMI2a8aSBR60TRhqPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiOhe+Y8NeJ0hgEG8oJdzQMGJSgMB8GA1UdIwQY
MBaAFJH1/O29uE3VL8Z3DXzP0/xmhPpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMt
OGNjOTgzMzYxMWU2LzEva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMtOGNjOTgzMzYxMWU2
LzEva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1by05xL
311mYIImFpApxXz+oGap1Q8ysJ3K4AtdeOXonI65a0Vz6AxfztUxlO0G2U9FK2Hg
X3eBfsJh+BZ1oAlCbsTJQ7ik4KQV/GqxAuP3SNGT8IOauobMAH7lukCCg8j9zK39
hWfdHWuCqKcEaMop61dMC6O5pCqiqGvLqMWjNqvugfPMkOev/pMLCypKIB2rf3d7
zMxFGZr9zuaJE8wcSWjfSH6i+g/B5LioqRxWqUD36EeCZUwsM9qOvvjNF2p6nf0F
SVJ+Oeh8bhA+aWoOVnZQYpHSVqPkTtI6/PfGdkiVH0c7kLi1xtGZnvOtEyLJxwQu
02gP9isTLPwZMQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:48 2025 by rpki-client