Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
File: kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft (raw, json)
Hash identifier: Zkjrl4OttG2QQjVX9gBK2m0xP0wUeRC5PBDLRx8UnWw=
Subject key identifier: 86:06:09:0A:21:C5:71:BC:1F:C1:FF:41:07:D3:D4:29:8A:76:0B:07
Authority key identifier: 92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6
Certificate issuer: /CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
Certificate serial: 019A53ACB4281F0E5CB012F41DE9A432A06A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
Manifest number: 01FF
Signing time: Wed 05 Nov 2025 11:00:18 +0000
Manifest this update: Wed 05 Nov 2025 11:00:18 +0000
Manifest next update: Thu 06 Nov 2025 11:00:18 +0000
Files and hashes: 1: 1-7F7uRrzkG49KON0y5p0a13vs8Q.roa (hash: kEJxDITGpSCiq2yfNEGAfr3dH9UBq24wh61zctycgJ0=)
2: kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl (hash: F4I8P2yY5K6SpmfjXHGqtKeFILVHr4JcCXOlxbrTVf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:b4:28:1f:0e:5c:b0:12:f4:1d:e9:a4:32:a0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
Validity
Not Before: Nov 5 11:00:18 2025 GMT
Not After : Nov 6 11:00:18 2025 GMT
Subject: CN=8606090a21c571bc1fc1ff4107d3d4298a760b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ad:28:cf:04:40:9b:1c:6b:58:a8:eb:bb:cd:
25:fe:a8:5b:28:84:c1:1f:9b:c1:3a:ad:1c:f7:26:
ce:c7:57:38:3e:65:66:0a:b6:94:f8:3c:24:22:0c:
5d:14:46:5f:bf:c3:94:6e:bc:8b:d0:19:5e:bd:0f:
53:9d:37:30:08:31:d5:fb:ad:00:a8:bd:30:c1:63:
d7:fc:08:a9:ae:97:b8:9b:45:ca:d8:36:ca:25:4a:
a5:50:d5:c6:39:9d:d9:0a:c3:3c:a7:d6:4e:c5:11:
18:02:db:66:d8:f7:f3:6d:82:2a:16:96:9e:62:66:
1f:17:cd:9c:2e:91:a7:bc:52:55:07:c7:31:e8:5b:
49:b7:14:ea:1c:b3:76:ff:71:32:1b:d8:d2:bc:c5:
ba:81:43:64:a4:fd:f6:1d:cc:29:be:4e:26:bd:4c:
54:44:bb:0b:48:d5:55:d6:dd:d3:c1:25:30:ee:02:
aa:9c:fe:89:95:29:ee:05:56:e7:57:31:a1:2e:ca:
bb:0f:2c:15:ad:08:23:fa:2d:68:2b:e8:9f:bf:67:
be:c1:af:f3:01:bf:76:76:67:68:b7:01:88:f0:dc:
61:83:f9:d5:b0:75:5c:77:54:cb:48:5e:b1:8b:52:
fe:51:91:b8:d6:a5:23:b0:96:26:01:dd:f6:fb:25:
fa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:06:09:0A:21:C5:71:BC:1F:C1:FF:41:07:D3:D4:29:8A:76:0B:07
X509v3 Authority Key Identifier:
keyid:92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:cd:62:10:66:80:74:08:e6:04:4b:7f:93:1e:29:b8:8a:a4:
30:b5:7e:0f:fd:4d:74:72:00:27:b8:78:89:e7:d7:07:dd:16:
07:e9:16:7b:52:47:f4:95:63:02:02:2e:a9:21:4c:69:6f:f3:
5f:e4:d7:bc:87:1c:a8:e9:f6:8a:40:ef:10:f7:b6:f3:0e:3a:
ea:c7:e9:0c:47:a1:d6:72:21:bc:8f:d0:f7:8e:cb:dc:4f:eb:
39:ec:e2:5e:94:3d:3b:4d:b4:fb:63:8a:5b:c5:1e:c4:c1:a0:
d0:c0:b3:06:95:11:5e:17:41:0d:f9:30:9b:01:3b:ef:4c:f4:
56:25:d1:e7:7b:94:52:e8:63:c0:38:ee:c9:4c:c5:cb:d8:67:
a8:0a:47:b2:9e:3b:30:30:98:f7:30:57:dc:44:92:d2:ef:be:
b1:f7:8e:b9:69:06:25:b9:e4:3a:16:d9:4b:a4:ca:2f:61:b4:
dd:72:68:aa:4a:b2:09:c0:8f:96:d3:0c:66:66:e6:97:83:c0:
8f:db:24:66:ed:1d:fa:8a:b1:0e:57:95:35:32:75:93:bd:b8:
39:db:0a:c1:38:3c:dd:95:8b:63:fe:b0:7b:ed:c3:d4:e3:e2:
3f:27:56:d3:81:f4:9a:7a:37:08:77:0e:14:7c:dc:15:cf:8b:
3f:a8:87:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTrLQoHw5csBL0HemkMqBqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDhmMTMxYjFlMTIwN2ZiNDkwODJiMGUwNjQyZmQxYTYz
ZTFhYTYwHhcNMjUxMTA1MTEwMDE4WhcNMjUxMTA2MTEwMDE4WjAzMTEwLwYDVQQD
Eyg4NjA2MDkwYTIxYzU3MWJjMWZjMWZmNDEwN2QzZDQyOThhNzYwYjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5q0ozwRAmxxrWKjru80l/qhbKITB
H5vBOq0c9ybOx1c4PmVmCraU+DwkIgxdFEZfv8OUbryL0BlevQ9TnTcwCDHV+60A
qL0wwWPX/Aiprpe4m0XK2DbKJUqlUNXGOZ3ZCsM8p9ZOxREYAttm2PfzbYIqFpae
YmYfF82cLpGnvFJVB8cx6FtJtxTqHLN2/3EyG9jSvMW6gUNkpP32Hcwpvk4mvUxU
RLsLSNVV1t3TwSUw7gKqnP6JlSnuBVbnVzGhLsq7DywVrQgj+i1oK+ifv2e+wa/z
Ab92dmdotwGI8Nxhg/nVsHVcd1TLSF6xi1L+UZG41qUjsJYmAd32+yX6TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYGCQohxXG8H8H/QQfT1CmKdgsHMB8GA1UdIwQY
MBaAFJJI8TGx4SB/tJCCsOBkL9GmPhqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83NzUzNWYtNDczYi00M2QzLWFmNDMt
ZTQ4MTc1MWQ2ODRmLzEva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC83NzUzNWYtNDczYi00M2QzLWFmNDMtZTQ4MTc1MWQ2ODRm
LzEva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmM1iEGaA
dAjmBEt/kx4puIqkMLV+D/1NdHIAJ7h4iefXB90WB+kWe1JH9JVjAgIuqSFMaW/z
X+TXvIccqOn2ikDvEPe28w466sfpDEeh1nIhvI/Q947L3E/rOeziXpQ9O020+2OK
W8UexMGg0MCzBpURXhdBDfkwmwE770z0ViXR53uUUuhjwDjuyUzFy9hnqApHsp47
MDCY9zBX3ESS0u++sfeOuWkGJbnkOhbZS6TKL2G03XJoqkqyCcCPltMMZmbml4PA
j9skZu0d+oqxDleVNTJ1k724OdsKwTg83ZWLY/6we+3D1OPiPydW04H0mno3CHcO
FHzcFc+LP6iH7A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:50:18 2025 by rpki-client