Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
File: krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json)
Hash identifier: mC8Ms7Iyvb/+77Sg0R8RBoMCAtNOi41JgnibeyhIlSg=
Subject key identifier: 59:28:4C:83:1D:0F:F2:22:50:06:17:E7:54:E8:A2:CE:CC:D9:77:D9
Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
Certificate issuer: /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Certificate serial: 019A52D15529AF76B1E0D568C45801D224C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
Manifest number: 1635
Signing time: Wed 05 Nov 2025 07:00:41 +0000
Manifest this update: Wed 05 Nov 2025 07:00:41 +0000
Manifest next update: Thu 06 Nov 2025 07:00:41 +0000
Files and hashes: 1: GCdodDNbb8kK5Nk7F_0-nAXSuto.roa (hash: +rPewf2fSfxIULsaTk1i8u3POGDLVTn+S/ryNeqw1mw=)
2: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: kaE/MJvP5f+caDpysBWolOt9RHHUswZAuAJv/2TARcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:55:29:af:76:b1:e0:d5:68:c4:58:01:d2:24:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Validity
Not Before: Nov 5 07:00:41 2025 GMT
Not After : Nov 6 07:00:41 2025 GMT
Subject: CN=59284c831d0ff222500617e754e8a2ceccd977d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:be:df:4e:63:85:24:65:41:cc:69:3e:f9:3b:
63:ae:61:77:6b:4d:49:9a:26:5f:b4:cf:6a:e1:9e:
5c:31:97:d8:6d:bc:84:35:95:74:18:02:0f:c7:09:
bc:ce:59:8b:f1:3a:cf:37:2d:9d:ff:ec:46:61:d0:
e1:9e:f8:1f:11:a9:d0:d8:69:da:bf:ae:91:cd:5c:
fc:b3:29:44:be:f9:62:e6:bd:94:68:8f:6e:fb:43:
db:0d:76:c2:5d:63:e5:9b:f5:de:f0:46:c3:97:44:
0e:5e:e7:73:8a:1e:66:e1:f5:cc:0c:c3:c6:a3:59:
a7:c4:ea:dc:56:2a:2d:2d:05:27:28:71:01:6d:9e:
27:df:b3:4f:8a:ad:1d:51:65:10:59:85:4e:c4:cf:
bb:48:53:c5:44:83:5d:7b:aa:e5:30:b9:80:d0:1b:
6b:35:a7:46:62:1a:1a:39:2a:51:9b:b2:45:d6:53:
0a:36:8d:35:21:b9:61:e7:55:a2:f4:32:ad:25:9a:
23:cf:dd:d0:ea:c0:3a:ba:89:39:0b:1d:93:1e:7c:
0d:ef:e5:98:8a:0f:55:c2:bc:cf:8d:3c:d1:53:0a:
a0:8f:87:b2:76:a9:26:18:4c:d9:e5:97:11:ea:d0:
1f:9c:4c:49:c7:b5:cd:84:6f:76:ca:f0:19:6b:52:
59:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:28:4C:83:1D:0F:F2:22:50:06:17:E7:54:E8:A2:CE:CC:D9:77:D9
X509v3 Authority Key Identifier:
keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:da:32:85:51:28:f4:ac:c2:aa:0d:94:e3:6f:3e:8b:97:92:
04:4e:03:26:2b:b7:9b:7a:9b:89:dc:cc:93:12:b6:b2:44:95:
43:21:50:2e:68:6e:15:68:a6:70:6b:74:74:88:2d:3b:0f:c4:
41:65:f6:33:d3:5f:a0:aa:99:71:f0:3a:f3:94:43:02:fe:97:
ce:d7:36:6e:4e:43:e7:7a:f6:06:8f:d5:17:ef:55:fe:ef:cf:
71:f5:36:05:52:62:16:27:a2:d5:aa:19:5e:2b:47:32:10:8a:
d2:8a:b7:a0:d7:da:93:1e:93:2c:90:15:e8:86:3a:8b:82:c9:
d9:b1:8b:22:3e:e9:ba:7b:8b:92:c6:da:d0:3b:36:8e:89:93:
a8:94:b3:68:81:71:76:49:ab:dc:59:c4:fb:4d:15:0a:92:08:
b9:6d:6c:f5:0a:76:87:58:a9:c0:66:c1:f6:d3:85:2e:45:21:
f3:9f:16:e9:5c:63:12:d9:ae:03:ec:90:ad:e2:e5:fd:37:21:
96:aa:ef:b4:fb:1f:2f:fa:7b:55:ef:63:dc:bc:f1:02:9e:55:
0b:65:ca:b4:33:ee:34:0f:27:d6:1e:7b:04:5d:53:b0:b6:c0:
29:09:24:57:6a:28:8e:b4:f6:ef:0c:ef:1d:06:80:4a:46:a0:
cb:22:8f:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0VUpr3ax4NVoxFgB0iTFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYjVhYzg4ZjJjZGIxNDkzNDgzMGMxYWMwOTZhNWVmNzMw
OThmMTIwHhcNMjUxMTA1MDcwMDQxWhcNMjUxMTA2MDcwMDQxWjAzMTEwLwYDVQQD
Eyg1OTI4NGM4MzFkMGZmMjIyNTAwNjE3ZTc1NGU4YTJjZWNjZDk3N2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr7fTmOFJGVBzGk++TtjrmF3a01J
miZftM9q4Z5cMZfYbbyENZV0GAIPxwm8zlmL8TrPNy2d/+xGYdDhnvgfEanQ2Gna
v66RzVz8sylEvvli5r2UaI9u+0PbDXbCXWPlm/Xe8EbDl0QOXudzih5m4fXMDMPG
o1mnxOrcViotLQUnKHEBbZ4n37NPiq0dUWUQWYVOxM+7SFPFRINde6rlMLmA0Btr
NadGYhoaOSpRm7JF1lMKNo01Iblh51Wi9DKtJZojz93Q6sA6uok5Cx2THnwN7+WY
ig9VwrzPjTzRUwqgj4eydqkmGEzZ5ZcR6tAfnExJx7XNhG92yvAZa1JZTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkoTIMdD/IiUAYX51Toos7M2XfZMB8GA1UdIwQY
MBaAFJK1rIjyzbFJNIMMGsCWpe9zCY8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lNDE3YmQtMTRlYi00Y2E1LTgwZjct
MzZjNDZmOTBkOWE1LzEva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lNDE3YmQtMTRlYi00Y2E1LTgwZjctMzZjNDZmOTBkOWE1
LzEva3JXc2lQTE5zVWswZ3d3YXdKYWw3M01KanhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtoyhVEo
9KzCqg2U428+i5eSBE4DJiu3m3qbidzMkxK2skSVQyFQLmhuFWimcGt0dIgtOw/E
QWX2M9NfoKqZcfA685RDAv6Xztc2bk5D53r2Bo/VF+9V/u/PcfU2BVJiFiei1aoZ
XitHMhCK0oq3oNfakx6TLJAV6IY6i4LJ2bGLIj7punuLksba0Ds2jomTqJSzaIFx
dkmr3FnE+00VCpIIuW1s9Qp2h1ipwGbB9tOFLkUh858W6VxjEtmuA+yQreLl/Tch
lqrvtPsfL/p7Ve9j3LzxAp5VC2XKtDPuNA8n1h57BF1TsLbAKQkkV2oojrT27wzv
HQaASkagyyKPiw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:08:08 2025 by rpki-client