Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File: klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier: xW5o1xaBGmxONl0q2PBbG74gFaR1cVbzNSv3cmvyygc=
Subject key identifier: 32:9E:67:C8:05:B8:1F:BE:C1:3C:BA:34:1C:7D:EF:BD:DC:98:F3:3F
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 019A5307B14C545407054F4DA0DCCE5E69F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 08:00:04 +0000
Manifest this update: Wed 05 Nov 2025 08:00:04 +0000
Manifest next update: Thu 06 Nov 2025 08:00:04 +0000
Files and hashes: 1: 7U4mLLCZOK9jPZHgW6zPsanLT3o.roa (hash: zZ/3JaVashrdH1tPBAExwSunuDftYH55jv3g8RDnCrA=)
2: kDuhU048DTixv805ND5N0u_g9CE.roa (hash: XMPtRafhUHkyRUyzV4cxQSEk7ukN2f738Fahel2JBqI=)
3: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: c0liuZBC+BrBjrRFNv99JinCZ0zls8auEogokocnyhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:b1:4c:54:54:07:05:4f:4d:a0:dc:ce:5e:69:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Nov 5 08:00:04 2025 GMT
Not After : Nov 6 08:00:04 2025 GMT
Subject: CN=329e67c805b81fbec13cba341c7defbddc98f33f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:45:fb:0e:7e:21:d5:60:a4:01:b4:e8:0a:df:
99:be:50:3d:71:db:ba:8a:05:9d:31:0c:92:b8:20:
c5:6f:9d:47:ed:8c:fa:02:b0:66:69:99:96:f4:f6:
8b:94:65:f3:9d:d7:29:29:ed:df:7a:8d:2f:8a:c4:
71:08:ba:a3:57:c8:c7:4c:62:41:7a:41:1d:e9:0f:
da:c5:bc:f2:5c:62:b3:f6:8e:7b:10:4c:2a:ce:3f:
31:e3:73:cc:fd:c6:24:e1:2d:83:85:b4:41:5c:90:
53:b8:53:21:59:31:1f:e6:f6:bc:69:97:c9:be:98:
13:9e:bb:ff:04:ef:e3:d5:e4:67:99:2a:e1:ba:94:
fe:ff:92:c3:f9:e8:44:9e:1d:c8:10:ee:3d:ff:84:
97:e0:da:40:c6:39:1e:9b:6b:3f:ce:4e:ba:ab:de:
b2:61:cd:d7:88:fc:8f:69:42:7f:69:3d:28:9a:60:
0a:17:48:93:0c:48:c8:06:7d:b4:f4:a8:97:c9:8e:
02:ae:d6:ec:06:1f:5b:c3:46:8c:70:2a:12:e1:53:
5f:1b:88:1f:fb:5d:ce:11:1d:73:fd:f7:80:ad:31:
4f:e2:1a:34:8c:50:05:90:76:8c:cb:8a:0f:40:bb:
a0:97:cb:e4:97:bc:d5:d0:d8:76:1c:4a:e2:d8:c6:
aa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9E:67:C8:05:B8:1F:BE:C1:3C:BA:34:1C:7D:EF:BD:DC:98:F3:3F
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6c:1e:7c:37:af:9f:46:14:10:6e:1f:ad:b2:4d:b4:8d:ff:
b3:a0:dc:53:ba:cf:62:f0:27:02:9e:59:a5:10:77:19:d3:44:
20:8a:c4:15:8a:a2:28:43:cd:a1:96:ec:88:5e:af:45:a4:4d:
42:a9:08:ff:e8:c8:01:f2:de:ae:c7:fd:a0:1e:32:c9:b7:ea:
e7:7f:2a:a6:85:5c:c5:d5:34:48:06:1d:d7:f5:65:5f:fa:d1:
19:64:30:75:17:68:ca:28:44:d6:4e:db:0a:0b:73:24:5b:44:
36:ed:ab:70:4e:3c:c9:8d:19:5a:69:b3:65:68:74:41:1a:9c:
ac:10:35:1a:21:b5:bf:43:69:04:0c:25:e8:c0:25:ae:84:9e:
54:61:b7:4d:b3:c4:5a:52:8e:bf:b9:f9:46:38:ea:5e:23:36:
e3:84:09:b5:90:3f:87:79:85:37:97:37:f3:6d:a0:f4:95:c8:
e7:76:8a:13:53:b6:20:be:39:ac:da:b0:2c:c6:12:1c:f5:89:
ae:20:c2:0b:80:c5:6e:d7:ea:7e:98:2b:58:d7:89:84:c4:83:
1b:d2:5f:85:69:b9:09:04:7a:ab:b0:cd:4c:a7:20:94:0b:33:
ff:06:66:60:26:65:d7:05:68:0a:f3:59:98:23:75:7b:d4:5a:
ae:e5:97:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTB7FMVFQHBU9NoNzOXmnyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTEwYTY4NzFjMjliYzAyOTIwNjhhOWI3MmRjMzRmZjgx
YjRmYzcwHhcNMjUxMTA1MDgwMDA0WhcNMjUxMTA2MDgwMDA0WjAzMTEwLwYDVQQD
EygzMjllNjdjODA1YjgxZmJlYzEzY2JhMzQxYzdkZWZiZGRjOThmMzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0X7Dn4h1WCkAbToCt+ZvlA9cdu6
igWdMQySuCDFb51H7Yz6ArBmaZmW9PaLlGXzndcpKe3feo0visRxCLqjV8jHTGJB
ekEd6Q/axbzyXGKz9o57EEwqzj8x43PM/cYk4S2DhbRBXJBTuFMhWTEf5va8aZfJ
vpgTnrv/BO/j1eRnmSrhupT+/5LD+ehEnh3IEO49/4SX4NpAxjkem2s/zk66q96y
Yc3XiPyPaUJ/aT0ommAKF0iTDEjIBn209KiXyY4CrtbsBh9bw0aMcCoS4VNfG4gf
+13OER1z/feArTFP4ho0jFAFkHaMy4oPQLugl8vkl7zV0Nh2HEri2Maq+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKeZ8gFuB++wTy6NBx9773cmPM/MB8GA1UdIwQY
MBaAFJJRCmhxwpvAKSBoqbctw0/4G0/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xFS2FISENtOEFwSUdpcHR5M0RUX2diVDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84ZGM3MDMtMTYzMS00MGY4LTkwYzUt
MThhMzBjMzAyOTBkLzEva2xFS2FISENtOEFwSUdpcHR5M0RUX2diVDhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni84ZGM3MDMtMTYzMS00MGY4LTkwYzUtMThhMzBjMzAyOTBk
LzEva2xFS2FISENtOEFwSUdpcHR5M0RUX2diVDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiGwefDev
n0YUEG4frbJNtI3/s6DcU7rPYvAnAp5ZpRB3GdNEIIrEFYqiKEPNoZbsiF6vRaRN
QqkI/+jIAfLersf9oB4yybfq538qpoVcxdU0SAYd1/VlX/rRGWQwdRdoyihE1k7b
CgtzJFtENu2rcE48yY0ZWmmzZWh0QRqcrBA1GiG1v0NpBAwl6MAlroSeVGG3TbPE
WlKOv7n5RjjqXiM244QJtZA/h3mFN5c3822g9JXI53aKE1O2IL45rNqwLMYSHPWJ
riDCC4DFbtfqfpgrWNeJhMSDG9JfhWm5CQR6q7DNTKcglAsz/wZmYCZl1wVoCvNZ
mCN1e9RaruWXSA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:50:24 2025 by rpki-client