Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
File: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft (raw, json)
Hash identifier: 0x4eoHHvoDVV6TjBw7ZZQgAxHqfLCEqpW0VYnnVpna0=
Subject key identifier: 78:01:EB:03:09:03:C5:4D:F1:C3:89:0C:CB:DF:24:18:54:8E:3B:34
Authority key identifier: 2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
Certificate issuer: /CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Certificate serial: 019A4D73A295BB63AB43BECDB34B509C9E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
Manifest number: 16BB
Signing time: Tue 04 Nov 2025 06:00:15 +0000
Manifest this update: Tue 04 Nov 2025 06:00:15 +0000
Manifest next update: Wed 05 Nov 2025 06:00:15 +0000
Files and hashes: 1: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl (hash: 2atZM03Ti/xf9nKw+2YMtotfK//5zJtA6m6seCyz08Y=)
2: iKZxL2ITs2UEzwBih25U8l0JZY4.roa (hash: vWT6oURLAcf2YPbSqMzxuY7JjVV7uzKdKfyzAxVTuCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:a2:95:bb:63:ab:43:be:cd:b3:4b:50:9c:9e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Validity
Not Before: Nov 4 06:00:15 2025 GMT
Not After : Nov 5 06:00:15 2025 GMT
Subject: CN=7801eb030903c54df1c3890ccbdf2418548e3b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:29:71:69:cd:b9:54:05:70:da:76:8a:77:
85:ac:bb:6b:ef:df:d9:41:d9:59:70:ac:7c:c5:cd:
7b:ee:2f:8c:5d:5a:03:4d:7f:73:cc:2c:68:6f:21:
6c:8a:10:10:a1:b5:1d:63:c0:24:72:65:71:a0:f8:
3b:b5:ff:b0:aa:78:11:87:92:35:e5:05:88:0d:87:
eb:01:0d:69:a4:29:94:e1:e8:e5:b6:f2:4f:cc:87:
9a:d4:7f:47:17:9d:d1:a6:4b:b8:86:04:af:9a:e7:
8f:f0:38:1b:1e:b6:61:dc:e3:f7:20:23:44:f7:00:
58:80:15:e7:69:88:b2:6a:84:3c:75:05:d3:90:a8:
2f:8b:ea:28:0b:11:67:38:ee:d4:80:c7:04:7b:d0:
ff:ad:86:6d:bc:be:fc:2f:0b:04:e2:0c:89:f8:3c:
bc:0a:11:7e:ef:a1:6a:55:b7:79:61:9c:55:50:d9:
a1:70:96:ad:db:1a:ad:94:d1:54:58:78:e7:52:77:
76:5f:53:ec:7e:01:26:25:aa:5d:c4:06:7a:d5:86:
a5:c1:f4:63:6f:71:89:98:6b:a6:14:14:db:58:6f:
92:62:0a:d2:b8:b6:1d:05:d4:31:4b:e3:65:ce:52:
88:5b:c9:c2:e2:98:6b:84:06:90:a1:8e:52:a7:e3:
52:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:01:EB:03:09:03:C5:4D:F1:C3:89:0C:CB:DF:24:18:54:8E:3B:34
X509v3 Authority Key Identifier:
keyid:2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1a:ef:1b:97:f6:7a:b7:a4:78:4d:53:17:e3:68:b0:46:42:
87:58:a6:a0:4d:dd:93:71:6a:7a:4f:2c:6b:5e:bc:b1:71:f0:
b7:9b:2f:88:b7:30:68:66:3c:32:34:ab:0b:73:7d:18:f6:39:
81:bb:81:7c:f4:a8:cb:b4:aa:9f:28:3f:3f:dd:99:62:89:22:
52:10:ef:a0:d8:c8:2f:bb:b2:62:81:94:1d:de:e3:6f:b4:b1:
04:a6:ae:9c:f8:64:c4:6a:95:87:f6:88:7f:be:25:05:4c:c4:
a5:8d:fa:f5:d9:74:e1:17:e2:de:73:7c:52:67:e1:85:27:e1:
e4:8a:86:f1:46:e8:ff:0f:89:79:86:18:24:11:9f:72:4f:a1:
93:b7:08:40:95:be:59:5d:58:2a:7c:d7:3a:85:2a:bc:e5:a4:
8a:d4:43:e6:64:e2:e2:91:91:db:31:c3:fd:65:33:fe:68:5e:
a5:59:91:b5:ea:7c:9e:e3:01:03:ab:65:f1:23:14:13:96:51:
fe:5d:ff:f6:2c:fb:21:2c:b0:61:a0:63:f1:b1:ce:85:ad:b1:
7a:9f:0a:1b:f2:40:ee:b1:93:14:eb:50:86:f8:e0:0e:8f:ec:
e6:78:f7:f8:62:7e:65:b8:f2:6e:60:d6:dd:64:d4:2c:00:fc:
e6:e6:a2:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc6KVu2OrQ77Ns0tQnJ4FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhY2Q4ZDE2ODJlNjYyMmMxYzA5MjM3YmM0MWFhNTE2NjY5
NjcyYjcwHhcNMjUxMTA0MDYwMDE1WhcNMjUxMTA1MDYwMDE1WjAzMTEwLwYDVQQD
Eyg3ODAxZWIwMzA5MDNjNTRkZjFjMzg5MGNjYmRmMjQxODU0OGUzYjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWgpcWnNuVQFcNp2ineFrLtr79/Z
QdlZcKx8xc177i+MXVoDTX9zzCxobyFsihAQobUdY8AkcmVxoPg7tf+wqngRh5I1
5QWIDYfrAQ1ppCmU4ejltvJPzIea1H9HF53Rpku4hgSvmueP8DgbHrZh3OP3ICNE
9wBYgBXnaYiyaoQ8dQXTkKgvi+ooCxFnOO7UgMcEe9D/rYZtvL78LwsE4gyJ+Dy8
ChF+76FqVbd5YZxVUNmhcJat2xqtlNFUWHjnUnd2X1PsfgEmJapdxAZ61YalwfRj
b3GJmGumFBTbWG+SYgrSuLYdBdQxS+NlzlKIW8nC4phrhAaQoY5Sp+NS9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgB6wMJA8VN8cOJDMvfJBhUjjs0MB8GA1UdIwQY
MBaAFCrNjRaC5mIsHAkje8QapRZmlnK3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85NWRiY2UtZDRlOS00MWYxLTgyZGMt
ZTg0Y2IxZGEyMWJkLzEvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85NWRiY2UtZDRlOS00MWYxLTgyZGMtZTg0Y2IxZGEyMWJk
LzEvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRrvG5f2
erekeE1TF+NosEZCh1imoE3dk3Fqek8sa168sXHwt5sviLcwaGY8MjSrC3N9GPY5
gbuBfPSoy7Sqnyg/P92ZYokiUhDvoNjIL7uyYoGUHd7jb7SxBKaunPhkxGqVh/aI
f74lBUzEpY369dl04Rfi3nN8UmfhhSfh5IqG8Ubo/w+JeYYYJBGfck+hk7cIQJW+
WV1YKnzXOoUqvOWkitRD5mTi4pGR2zHD/WUz/mhepVmRtep8nuMBA6tl8SMUE5ZR
/l3/9iz7ISywYaBj8bHOha2xep8KG/JA7rGTFOtQhvjgDo/s5nj3+GJ+ZbjybmDW
3WTULAD85uaiHQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:10 2025 by rpki-client