Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
File: KrMqUfAYgPSEFWkbYAi482mcND0.mft (raw, json)
Hash identifier: HqdHl8J0VR5RLOLpbyps/n5Cl4yomRB/HZj4MDf0Eis=
Subject key identifier: 55:93:D0:60:0D:3C:3A:8F:10:FF:49:F8:07:13:71:3C:D4:A2:2C:17
Authority key identifier: 2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D
Certificate issuer: /CN=2ab32a51f01880f48415691b6008b8f3699c343d
Certificate serial: 019A503E25F8A35E6602B0F15253F8059E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 19:00:41 +0000
Manifest this update: Tue 04 Nov 2025 19:00:41 +0000
Manifest next update: Wed 05 Nov 2025 19:00:41 +0000
Files and hashes: 1: KrMqUfAYgPSEFWkbYAi482mcND0.crl (hash: bky/VBrXUR4J+90eU57WYqtq6vaLkROHJ3E+HDHX28E=)
2: i9bRqGmLoNeEMEQG2gZoK39jq_M.roa (hash: QM3nqUsH3GUvguf6sXYPTlR1T5XaS6Z20/NPBnkA7vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:25:f8:a3:5e:66:02:b0:f1:52:53:f8:05:9e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab32a51f01880f48415691b6008b8f3699c343d
Validity
Not Before: Nov 4 19:00:41 2025 GMT
Not After : Nov 5 19:00:41 2025 GMT
Subject: CN=5593d0600d3c3a8f10ff49f80713713cd4a22c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e2:21:a7:69:5a:6d:84:84:b7:a8:26:8b:8d:
f7:d4:c2:e3:30:d0:c1:61:be:d6:56:b0:00:21:70:
ed:71:ac:6d:43:84:b5:c7:08:c6:97:6f:ca:35:72:
ac:0d:eb:34:71:ea:dc:cd:99:75:e1:89:0f:ed:65:
4f:37:30:32:0c:55:2c:e6:73:25:58:67:ea:21:3b:
ff:a0:5c:37:22:44:f6:50:0e:4a:66:d9:16:fc:28:
69:90:91:96:6f:bc:fb:fe:1b:cf:1d:c6:8b:6e:8b:
73:95:7b:24:dd:de:75:38:e0:03:99:d0:dc:67:6d:
8d:e6:b1:0f:f0:0f:b9:a1:af:12:69:51:e4:ff:94:
f6:0c:65:97:59:0c:97:50:94:6b:d9:50:99:b6:9c:
4c:cd:bb:9d:0c:1c:39:9e:f6:5f:6f:0f:4b:be:06:
ad:f4:d3:91:cb:1c:20:37:d3:80:eb:2f:a1:89:6d:
a8:88:c8:42:70:67:72:53:4f:97:70:c0:3f:74:4b:
1b:b5:e8:19:d9:6d:8b:6d:20:84:c1:9e:37:4a:e7:
c1:e6:33:c7:83:e1:39:6f:25:52:f5:2f:9c:01:bb:
86:a4:cd:c0:7f:d6:f7:7c:49:d0:7e:e9:b4:9b:50:
90:cb:45:6c:af:14:ae:fc:78:98:f8:89:84:56:37:
80:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:93:D0:60:0D:3C:3A:8F:10:FF:49:F8:07:13:71:3C:D4:A2:2C:17
X509v3 Authority Key Identifier:
keyid:2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9a:96:76:8b:3d:eb:44:df:d4:46:e9:03:e0:97:1e:f5:1a:
23:36:8a:6a:cb:4d:4e:9f:53:e7:c9:d9:43:38:5c:0f:19:9e:
fa:93:6c:44:d1:19:18:dd:ee:e6:06:87:52:60:71:53:8c:1c:
d7:05:9f:8a:e8:ff:aa:4b:c5:78:8c:df:d4:19:28:91:70:a4:
2e:ee:a8:1b:41:c8:81:9c:5a:23:e9:09:27:53:78:c0:54:c4:
c6:25:4a:40:67:27:6b:31:3b:1f:28:91:e6:43:ee:40:93:d9:
2b:27:fc:dd:ad:b6:b9:2f:c8:19:d7:01:2c:02:78:d6:0b:7a:
ef:ea:b2:b8:6b:af:52:bf:9d:f4:7d:98:92:e0:43:5b:56:4f:
62:3a:1f:f4:74:28:7d:e5:10:fc:ec:07:38:a2:de:ea:af:23:
99:7d:c3:c7:56:ce:3f:2f:c7:2e:5e:9b:fc:23:5c:6f:2c:6c:
30:78:34:3f:d7:ea:a8:2e:a2:af:09:1d:cd:4d:b9:3b:7c:93:
cf:47:1c:cf:be:aa:66:bf:90:3e:7f:7f:82:a1:7c:02:8a:6e:
c2:ab:0d:1b:ad:50:5c:dd:ad:a4:69:0a:e6:ad:32:15:25:a8:
ef:92:de:b0:f5:76:92:69:4c:cb:1f:3e:6d:13:0e:76:23:cb:
7f:10:55:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPiX4o15mArDxUlP4BZ6NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYjMyYTUxZjAxODgwZjQ4NDE1NjkxYjYwMDhiOGYzNjk5
YzM0M2QwHhcNMjUxMTA0MTkwMDQxWhcNMjUxMTA1MTkwMDQxWjAzMTEwLwYDVQQD
Eyg1NTkzZDA2MDBkM2MzYThmMTBmZjQ5ZjgwNzEzNzEzY2Q0YTIyYzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuIhp2labYSEt6gmi4331MLjMNDB
Yb7WVrAAIXDtcaxtQ4S1xwjGl2/KNXKsDes0cerczZl14YkP7WVPNzAyDFUs5nMl
WGfqITv/oFw3IkT2UA5KZtkW/ChpkJGWb7z7/hvPHcaLbotzlXsk3d51OOADmdDc
Z22N5rEP8A+5oa8SaVHk/5T2DGWXWQyXUJRr2VCZtpxMzbudDBw5nvZfbw9Lvgat
9NORyxwgN9OA6y+hiW2oiMhCcGdyU0+XcMA/dEsbtegZ2W2LbSCEwZ43SufB5jPH
g+E5byVS9S+cAbuGpM3Af9b3fEnQfum0m1CQy0VsrxSu/HiY+ImEVjeAGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWT0GANPDqPEP9J+AcTcTzUoiwXMB8GA1UdIwQY
MBaAFCqzKlHwGID0hBVpG2AIuPNpnDQ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3JNcVVmQVlnUFNFRldrYllBaTQ4Mm1jTkQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wNWFkODMtOTcxMS00NGIwLThjZDUt
ZGZkZWY2Y2FhYmRmLzEvS3JNcVVmQVlnUFNFRldrYllBaTQ4Mm1jTkQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wNWFkODMtOTcxMS00NGIwLThjZDUtZGZkZWY2Y2FhYmRm
LzEvS3JNcVVmQVlnUFNFRldrYllBaTQ4Mm1jTkQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpqWdos9
60Tf1EbpA+CXHvUaIzaKastNTp9T58nZQzhcDxme+pNsRNEZGN3u5gaHUmBxU4wc
1wWfiuj/qkvFeIzf1BkokXCkLu6oG0HIgZxaI+kJJ1N4wFTExiVKQGcnazE7HyiR
5kPuQJPZKyf83a22uS/IGdcBLAJ41gt67+qyuGuvUr+d9H2YkuBDW1ZPYjof9HQo
feUQ/OwHOKLe6q8jmX3Dx1bOPy/HLl6b/CNcbyxsMHg0P9fqqC6irwkdzU25O3yT
z0ccz76qZr+QPn9/gqF8AopuwqsNG61QXN2tpGkK5q0yFSWo75LesPV2kmlMyx8+
bRMOdiPLfxBVUw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:44:31 2025 by rpki-client