Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
File: kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json)
Hash identifier: pzr0tRd1cmPDG+5ysnKx68suQTsH4u6UN/4U+QY1P/A=
Subject key identifier: E0:8A:BA:1B:29:AC:4C:FE:CD:53:02:FE:E6:9C:61:CE:90:DC:09:C2
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 019A5187EBFF9F83AB242F63155043204643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
Manifest number: 1722
Signing time: Wed 05 Nov 2025 01:00:53 +0000
Manifest this update: Wed 05 Nov 2025 01:00:53 +0000
Manifest next update: Thu 06 Nov 2025 01:00:53 +0000
Files and hashes: 1: 9_JGTVW5qMW7yCkdP0E_-NpXB0s.roa (hash: WnTsDGxoDG2mHWxyzgJxMMHknGyiRAiwLMWZ5xXwktI=)
2: GEAFSRO55yyL2hanen4IQZHuURY.roa (hash: 2FshQLANrdy2nUZzMPBP36DvAVDN+Uv1owhoY0rOS8I=)
3: H8DQXyH0KVxtyAs-rlTWAJw5n0M.roa (hash: dDFoBjvjKcHyX8s6IHYrzZBS6btcUzoDxFIxBvgUAfs=)
4: Xrf2BP79heZyPUnEjdoMN247jLA.roa (hash: OhXt9BoGAkGzW+9iunvXp7qfeztquv5rM9uBpdYNu54=)
5: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: CRTi5lGvvUKDmLie2c64iaKZ9+tB2t6PALQI3Qr83+g=)
6: zlsE5y8ISkml9LwmthjQE4JtzdI.roa (hash: P7L80Xo0dmoEjCHpVucHdGzStrd3j71piAYh2Bx9HXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:eb:ff:9f:83:ab:24:2f:63:15:50:43:20:46:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: Nov 5 01:00:53 2025 GMT
Not After : Nov 6 01:00:53 2025 GMT
Subject: CN=e08aba1b29ac4cfecd5302fee69c61ce90dc09c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cf:37:1e:b0:b0:df:40:9c:0c:96:0e:92:d6:
ef:18:de:69:30:50:bb:99:af:be:35:01:e9:2f:60:
c1:32:d8:ee:98:7d:cb:d6:a7:03:8a:e4:84:46:52:
70:79:38:b7:6a:4c:8d:69:32:5e:39:79:e8:44:8e:
68:37:ea:03:5c:5d:c6:a0:24:46:cd:a5:d7:7c:f3:
f2:e9:9c:87:02:db:0a:d5:66:80:00:e1:f3:e2:e0:
5a:fe:dc:2d:49:a8:a8:15:fe:17:16:4f:a0:b3:ac:
e0:39:06:20:53:f1:d7:db:6d:f0:46:08:ef:4e:fb:
98:b2:bb:69:6c:a8:4d:05:4e:7e:f2:8e:06:15:e5:
05:87:f2:1e:b0:0e:e7:2c:87:3e:b2:32:58:28:3e:
69:f3:b0:e5:98:e8:0f:08:ca:55:fc:9c:b5:ba:c2:
51:b7:92:cc:fa:59:7f:5c:65:7b:58:56:90:88:ab:
8f:15:ef:55:b1:e9:e6:d6:3f:9a:b4:88:bf:01:40:
4b:f0:57:17:7d:ab:dc:43:dc:8a:28:08:58:6a:e9:
c5:ff:a9:84:cc:48:90:64:b9:19:5b:80:10:9d:ce:
1c:13:ca:74:6b:d1:43:d0:d1:df:f9:f1:76:dc:d4:
4d:d4:e6:ba:25:3b:ff:73:7f:cd:67:c4:9a:3a:82:
66:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8A:BA:1B:29:AC:4C:FE:CD:53:02:FE:E6:9C:61:CE:90:DC:09:C2
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:46:53:02:25:fb:39:85:6d:71:e3:ee:16:12:92:ee:f0:6b:
69:96:59:b6:d1:3c:09:ed:b5:56:8d:b5:f2:2b:05:1e:da:3f:
9f:4e:00:74:0e:6e:e5:3d:86:b7:0f:51:c4:c4:93:fb:6e:da:
69:bb:2f:2e:60:6c:99:a7:ec:d4:ea:c1:06:ec:b9:f6:eb:6a:
be:87:7c:46:58:ad:03:f6:49:6f:0d:1c:9e:67:71:53:bb:c2:
52:6a:b1:51:d6:33:c8:84:bb:70:dc:c9:74:d7:06:e3:7d:74:
4c:0a:b4:3f:30:bb:c8:cb:41:06:40:21:5e:01:4f:a0:e8:16:
06:d6:12:da:cb:79:a9:e2:81:bd:1b:d2:ea:a0:83:55:8e:45:
63:59:cd:60:80:1f:70:0e:11:26:9b:3b:1f:b9:62:01:a4:73:
33:7a:1f:9a:04:e1:25:27:e2:3b:b2:18:0c:20:db:ac:44:62:
86:22:a1:fe:3f:78:8f:5a:4b:e9:3d:f3:54:6c:d4:cc:d7:3e:
ea:55:8e:72:41:00:4f:87:11:10:89:ea:34:22:b2:59:6f:48:
98:79:e0:bb:53:ff:f2:d9:87:fd:79:e9:21:e2:26:68:30:0c:
ad:de:dd:c8:fb:65:0d:27:a2:32:e2:0c:f8:05:24:26:8b:df:
b8:dc:0c:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh+v/n4OrJC9jFVBDIEZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2
NDM3MDEwHhcNMjUxMTA1MDEwMDUzWhcNMjUxMTA2MDEwMDUzWjAzMTEwLwYDVQQD
EyhlMDhhYmExYjI5YWM0Y2ZlY2Q1MzAyZmVlNjljNjFjZTkwZGMwOWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh883HrCw30CcDJYOktbvGN5pMFC7
ma++NQHpL2DBMtjumH3L1qcDiuSERlJweTi3akyNaTJeOXnoRI5oN+oDXF3GoCRG
zaXXfPPy6ZyHAtsK1WaAAOHz4uBa/twtSaioFf4XFk+gs6zgOQYgU/HX223wRgjv
TvuYsrtpbKhNBU5+8o4GFeUFh/IesA7nLIc+sjJYKD5p87DlmOgPCMpV/Jy1usJR
t5LM+ll/XGV7WFaQiKuPFe9Vsenm1j+atIi/AUBL8FcXfavcQ9yKKAhYaunF/6mE
zEiQZLkZW4AQnc4cE8p0a9FD0NHf+fF23NRN1Oa6JTv/c3/NZ8SaOoJmAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCKuhsprEz+zVMC/uacYc6Q3AnCMB8GA1UdIwQY
MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt
M2IwYjRiOGEyOTgzLzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz
LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL0ZTAiX7
OYVtcePuFhKS7vBraZZZttE8Ce21Vo218isFHto/n04AdA5u5T2Gtw9RxMST+27a
absvLmBsmafs1OrBBuy59utqvod8RlitA/ZJbw0cnmdxU7vCUmqxUdYzyIS7cNzJ
dNcG4310TAq0PzC7yMtBBkAhXgFPoOgWBtYS2st5qeKBvRvS6qCDVY5FY1nNYIAf
cA4RJps7H7liAaRzM3ofmgThJSfiO7IYDCDbrERihiKh/j94j1pL6T3zVGzUzNc+
6lWOckEAT4cREInqNCKyWW9ImHngu1P/8tmH/XnpIeImaDAMrd7dyPtlDSeiMuIM
+AUkJovfuNwMiQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:57:22 2025 by rpki-client