Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
File: kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft (raw, json)
Hash identifier: mcn3kG4yb+LvgDDS2GiyXu4Py5lq7XWPZrWbHtAHKtU=
Subject key identifier: B6:3C:26:C0:DF:8E:88:74:0C:39:43:41:14:69:58:51:B3:5A:4C:EA
Authority key identifier: 92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
Certificate issuer: /CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Certificate serial: 019A51F5446DA76284634B9FCAC47364EEB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
Manifest number: 0606
Signing time: Wed 05 Nov 2025 03:00:19 +0000
Manifest this update: Wed 05 Nov 2025 03:00:19 +0000
Manifest next update: Thu 06 Nov 2025 03:00:19 +0000
Files and hashes: 1: kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl (hash: taV5I9qddkBbi/p7ivNhpGAStfJu43R4kssNpUjZ/yk=)
2: sddBokvX4KqNLpoep4FgR7zwiWk.roa (hash: lI+iTMWX9Cf+aooth8J1xMcv+CYd4i145U8SqXcpH68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:44:6d:a7:62:84:63:4b:9f:ca:c4:73:64:ee:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Validity
Not Before: Nov 5 03:00:19 2025 GMT
Not After : Nov 6 03:00:19 2025 GMT
Subject: CN=b63c26c0df8e88740c39434114695851b35a4cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ac:b5:85:32:31:93:67:a8:1a:3e:6b:47:dd:
40:18:1b:9d:33:fe:51:f6:85:48:d6:f0:df:fe:cc:
c9:e8:17:3f:48:25:16:4f:64:75:8d:28:b6:fa:8a:
1a:3c:b4:a8:78:ef:1d:14:89:16:ee:e5:a9:81:5f:
38:49:60:a1:17:7d:2e:5b:15:6f:dc:4a:65:c1:5e:
42:cf:0a:b3:de:c2:f2:63:8a:cb:e6:07:ac:c2:8a:
0b:31:6a:79:71:c5:7d:6c:ab:2e:ee:fc:6b:36:9d:
67:1e:70:74:72:53:5f:6a:be:a1:2a:8b:ee:e4:60:
c1:43:23:20:79:c9:4c:74:e0:80:73:a4:ea:72:2d:
32:73:61:c5:2c:c7:e2:40:0d:fb:c9:c0:1c:f7:90:
46:9a:e7:df:73:be:f9:aa:03:0a:17:01:8a:7c:8b:
e9:ad:a3:3d:c6:79:96:58:71:ae:fc:02:df:d8:f7:
eb:c2:5e:d2:9e:bc:e1:6e:d1:c8:34:5e:bf:fa:ba:
f1:68:a8:59:b1:15:04:08:df:f1:e0:d2:c5:38:a4:
6e:07:84:4b:cf:3c:da:42:2c:c0:40:90:d3:54:b6:
21:43:a5:71:c5:44:fb:d6:1c:a9:25:61:d6:01:f7:
52:20:ca:bf:54:6f:28:9b:a2:8b:bb:97:cf:e5:2e:
3f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3C:26:C0:DF:8E:88:74:0C:39:43:41:14:69:58:51:B3:5A:4C:EA
X509v3 Authority Key Identifier:
keyid:92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3a:8c:ad:0a:3d:af:7c:bb:62:0a:82:d2:be:ed:ee:dc:77:
11:67:d6:b6:6f:90:1a:f3:41:01:13:c1:f9:4e:34:79:6a:11:
f2:7a:ec:af:3a:60:b4:35:8d:71:57:bf:15:9c:09:d9:09:c9:
b2:58:af:d8:14:76:a7:02:05:52:66:ec:57:42:ac:86:33:75:
00:d0:f2:97:1d:50:dc:f3:4b:84:d2:26:64:97:30:a8:6d:1a:
e3:6b:34:0a:3b:ae:23:89:cc:4e:13:aa:20:b5:fc:f5:d5:b9:
dc:0c:17:6e:ce:c8:1e:2d:98:04:42:fe:ba:2b:f5:50:1f:9f:
71:a4:87:6e:a0:29:67:ba:1c:78:7a:3c:95:c6:ee:53:8b:8b:
8a:b3:d2:0e:ae:be:65:be:d8:99:8c:11:f7:87:71:dd:d1:5d:
37:8a:7c:e6:4f:fc:c5:5f:35:57:76:0c:1d:a0:6b:26:cb:2d:
4c:0c:e8:99:09:cb:81:7e:1f:5c:1c:14:fb:37:f0:dc:8f:f0:
c1:b7:af:24:63:0e:9b:f8:48:a4:be:a5:eb:9b:1b:50:70:47:
f3:4d:62:34:83:83:34:6b:77:5d:e1:a1:1f:13:62:84:ad:55:
e4:3a:08:80:c5:95:f7:2e:a1:fa:66:f5:05:80:2c:ef:d3:c4:
89:f5:b6:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9URtp2KEY0ufysRzZO63MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNjU4N2E3YzQyYzI2MWZhMjU0YjBiODJlN2JjMDcxOWNj
NjQ4MTIwHhcNMjUxMTA1MDMwMDE5WhcNMjUxMTA2MDMwMDE5WjAzMTEwLwYDVQQD
EyhiNjNjMjZjMGRmOGU4ODc0MGMzOTQzNDExNDY5NTg1MWIzNWE0Y2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86y1hTIxk2eoGj5rR91AGBudM/5R
9oVI1vDf/szJ6Bc/SCUWT2R1jSi2+ooaPLSoeO8dFIkW7uWpgV84SWChF30uWxVv
3EplwV5Czwqz3sLyY4rL5geswooLMWp5ccV9bKsu7vxrNp1nHnB0clNfar6hKovu
5GDBQyMgeclMdOCAc6Tqci0yc2HFLMfiQA37ycAc95BGmuffc775qgMKFwGKfIvp
raM9xnmWWHGu/ALf2Pfrwl7SnrzhbtHINF6/+rrxaKhZsRUECN/x4NLFOKRuB4RL
zzzaQizAQJDTVLYhQ6VxxUT71hypJWHWAfdSIMq/VG8om6KLu5fP5S4/8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLY8JsDfjoh0DDlDQRRpWFGzWkzqMB8GA1UdIwQY
MBaAFJJlh6fELCYfolSwuC57wHGcxkgSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iZDIwMDUtZmI3Yi00MDUyLWIzZjIt
ODhmYTNiNmViMDA2LzEva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9iZDIwMDUtZmI3Yi00MDUyLWIzZjItODhmYTNiNmViMDA2
LzEva21XSHA4UXNKaC1pVkxDNExudkFjWnpHU0JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezqMrQo9
r3y7YgqC0r7t7tx3EWfWtm+QGvNBARPB+U40eWoR8nrsrzpgtDWNcVe/FZwJ2QnJ
sliv2BR2pwIFUmbsV0KshjN1ANDylx1Q3PNLhNImZJcwqG0a42s0CjuuI4nMThOq
ILX89dW53AwXbs7IHi2YBEL+uiv1UB+fcaSHbqApZ7oceHo8lcbuU4uLirPSDq6+
Zb7YmYwR94dx3dFdN4p85k/8xV81V3YMHaBrJsstTAzomQnLgX4fXBwU+zfw3I/w
wbevJGMOm/hIpL6l65sbUHBH801iNIODNGt3XeGhHxNihK1V5DoIgMWV9y6h+mb1
BYAs79PEifW2eA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:46:48 2025 by rpki-client