Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
File: KbeTgP5AdDnMLs0_rBgVfbNs92g.mft (raw, json)
Hash identifier: WzSOVKls79LjDEXn5ttxqv978oeunbnQbcRKcyBsR4g=
Subject key identifier: 97:39:D0:0F:65:13:63:94:B6:CA:1D:CC:36:44:CD:9C:A6:79:A4:4F
Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68
Certificate issuer: /CN=29b79380fe407439cc2ecd3fac18157db36cf768
Certificate serial: 019A4E1890C7C9296E47D11D8739D99BD50E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
Manifest number: 128B
Signing time: Tue 04 Nov 2025 09:00:23 +0000
Manifest this update: Tue 04 Nov 2025 09:00:23 +0000
Manifest next update: Wed 05 Nov 2025 09:00:23 +0000
Files and hashes: 1: KbeTgP5AdDnMLs0_rBgVfbNs92g.crl (hash: 5vH9uJD347joram3XDbQcRxtrHSCFKLfqiTionRTVXg=)
2: Ws1LWb_h0GdqsfQHLiAshnKaTNY.roa (hash: Uptxk6RyuEDjV95/pWCt6r7aqnAlPu42fj+GVRxV0LQ=)
3: eJ1JUPisPyGRK8rwksI89SjAgW8.roa (hash: Yc8bpcgXGDfpskRZN1u08QJJzwCYTMenRq0PHCEk9iU=)
4: foMqTIfk3NGRU1ECjEYc0FzWeHQ.roa (hash: 8/tSFYSbydeBOM5cDt+MQjefx680IbM6wdc9EqGW/uQ=)
5: qOJSirqIZF030lDaiDlLOLszAqo.roa (hash: cceSZV5tbmDVcXVgGl8UFbkLxF9VVoz+OhMvXa1/dFw=)
6: zAPwb7bovDcweikHvlN-q4fyaQM.roa (hash: B1QW0kYW/vc9myo+dQ6hlc6KwNH6CLoF8DBlRQKFt8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:90:c7:c9:29:6e:47:d1:1d:87:39:d9:9b:d5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768
Validity
Not Before: Nov 4 09:00:23 2025 GMT
Not After : Nov 5 09:00:23 2025 GMT
Subject: CN=9739d00f65136394b6ca1dcc3644cd9ca679a44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:a6:ad:cc:7d:0a:04:dc:c4:18:ca:8b:d3:
da:f5:43:0a:e7:ab:84:3e:5a:6c:35:66:5d:45:d3:
5a:f0:d7:b3:56:22:cf:d3:2f:ee:d9:05:7c:6c:b7:
df:f0:61:a9:49:eb:b1:af:88:0c:4a:e8:fc:78:fa:
f8:4f:23:a0:c2:e3:9e:f2:0d:56:79:97:60:7c:93:
0f:35:d6:90:b5:6c:50:af:1d:94:ff:ec:88:dd:22:
6a:9d:01:b7:d4:07:78:42:0a:bc:9b:4b:8b:83:de:
1e:2d:8e:eb:2e:bf:9a:48:8f:af:fa:96:8d:ce:e1:
87:46:ac:0d:1b:31:88:fb:13:4e:0b:34:dc:fc:07:
4d:a4:15:0c:60:91:b1:d8:42:ac:e1:de:67:65:93:
a0:06:db:5c:74:b5:62:96:64:e8:17:2d:9d:36:ac:
69:e6:8b:c9:a8:6a:fe:a3:6b:08:c9:90:74:49:66:
c5:d6:31:bc:30:b3:54:b9:11:bf:88:8b:2c:f1:9e:
dc:03:90:86:e1:b3:56:2f:82:cc:c2:b5:ca:c8:92:
ff:0c:b5:6e:b7:83:a0:47:f2:09:4a:0c:76:81:6f:
2d:1b:fb:d5:b3:bd:ae:95:14:0c:83:e0:14:c9:6c:
25:44:f7:04:f0:85:3c:9c:98:a8:2c:60:77:12:3e:
83:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:39:D0:0F:65:13:63:94:B6:CA:1D:CC:36:44:CD:9C:A6:79:A4:4F
X509v3 Authority Key Identifier:
keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ed:77:bd:48:12:ec:28:be:67:65:62:07:d3:83:9b:3a:43:
98:07:cc:b6:35:ae:9b:b1:87:0d:7a:35:c8:59:77:8e:59:f0:
bb:da:83:29:b5:e5:ee:5d:26:2e:d7:9b:be:47:68:d8:d0:0c:
b7:8c:0b:c4:3e:b2:9e:41:84:8c:23:34:56:3c:d7:1f:81:2f:
7c:ab:e3:f3:36:ea:a3:25:e1:59:fc:36:b8:ce:6e:52:2f:0d:
8e:0f:11:2c:c0:47:33:f3:64:07:40:de:40:68:61:04:cc:00:
a4:89:54:c9:d1:3c:62:c7:d5:58:88:40:c7:7a:a4:db:ac:f4:
a2:11:49:0c:d0:4d:18:4e:92:8b:0a:3f:f8:cc:71:99:65:50:
c6:3d:39:14:97:6a:0f:1d:13:4a:ba:78:ca:e4:ea:e8:38:61:
2d:29:8b:61:b3:ce:d3:f2:7d:6f:0f:b0:c4:dd:59:87:b2:0f:
50:d6:77:58:5f:35:98:3c:58:8b:1b:49:f6:84:35:35:81:0b:
8d:79:21:40:f5:41:6c:c4:6d:59:e1:98:9f:52:9d:28:76:cc:
91:99:9b:3c:84:3c:61:52:98:88:cb:7f:ed:6e:ff:95:71:4e:
e3:29:d6:b8:1a:27:4e:1b:1a:56:26:c7:46:e3:88:1d:be:92:
a6:e1:8e:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGJDHySluR9EdhznZm9UOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5Yjc5MzgwZmU0MDc0MzljYzJlY2QzZmFjMTgxNTdkYjM2
Y2Y3NjgwHhcNMjUxMTA0MDkwMDIzWhcNMjUxMTA1MDkwMDIzWjAzMTEwLwYDVQQD
Eyg5NzM5ZDAwZjY1MTM2Mzk0YjZjYTFkY2MzNjQ0Y2Q5Y2E2NzlhNDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWWmrcx9CgTcxBjKi9Pa9UMK56uE
PlpsNWZdRdNa8NezViLP0y/u2QV8bLff8GGpSeuxr4gMSuj8ePr4TyOgwuOe8g1W
eZdgfJMPNdaQtWxQrx2U/+yI3SJqnQG31Ad4Qgq8m0uLg94eLY7rLr+aSI+v+paN
zuGHRqwNGzGI+xNOCzTc/AdNpBUMYJGx2EKs4d5nZZOgBttcdLVilmToFy2dNqxp
5ovJqGr+o2sIyZB0SWbF1jG8MLNUuRG/iIss8Z7cA5CG4bNWL4LMwrXKyJL/DLVu
t4OgR/IJSgx2gW8tG/vVs72ulRQMg+AUyWwlRPcE8IU8nJioLGB3Ej6DkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJc50A9lE2OUtsodzDZEzZymeaRPMB8GA1UdIwQY
MBaAFCm3k4D+QHQ5zC7NP6wYFX2zbPdoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWIt
MWU4NDIxMThkYjZmLzEvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zOTM4NDItZTdlZi00ODkzLTljMWItMWU4NDIxMThkYjZm
LzEvS2JlVGdQNUFkRG5NTHMwX3JCZ1ZmYk5zOTJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOe13vUgS
7Ci+Z2ViB9ODmzpDmAfMtjWum7GHDXo1yFl3jlnwu9qDKbXl7l0mLtebvkdo2NAM
t4wLxD6ynkGEjCM0VjzXH4EvfKvj8zbqoyXhWfw2uM5uUi8Njg8RLMBHM/NkB0De
QGhhBMwApIlUydE8YsfVWIhAx3qk26z0ohFJDNBNGE6Siwo/+MxxmWVQxj05FJdq
Dx0TSrp4yuTq6DhhLSmLYbPO0/J9bw+wxN1Zh7IPUNZ3WF81mDxYixtJ9oQ1NYEL
jXkhQPVBbMRtWeGYn1KdKHbMkZmbPIQ8YVKYiMt/7W7/lXFO4ynWuBonThsaVibH
RuOIHb6SpuGO9Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:19 2025 by rpki-client