Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
File: KkRyM2ydAqSIzdd1NNZfsUZewJo.mft (raw, json)
Hash identifier: K/O9p+DWHiV7sBWCrHL1D8IFD7GAywX64VCBQf1qB8g=
Subject key identifier: 73:6C:D7:5C:DA:DE:3D:8A:C7:9D:28:F4:4C:E5:69:BA:5F:B2:B7:D9
Authority key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
Certificate issuer: /CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Certificate serial: 019A503E160FE27766EB48117B34F65708CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 19:00:37 +0000
Manifest this update: Tue 04 Nov 2025 19:00:37 +0000
Manifest next update: Wed 05 Nov 2025 19:00:37 +0000
Files and hashes: 1: KkRyM2ydAqSIzdd1NNZfsUZewJo.crl (hash: aRrWwQyv9Dztmmf7dF3nxX20IB5knXo2SvDcainQdz0=)
2: NPr8_e46sz8H4JR5QlVGvECNy6k.roa (hash: z5xILP0Xt/AwC2kYkY04BjCbsF3nJbNXJ0hJj+W9BVk=)
3: _x206HZGagtA6dAvfxStsmKc3n4.roa (hash: b78aj5rvx2Xy9g+pAEN4tSwQJDBl/+csOAL8uop4FGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:16:0f:e2:77:66:eb:48:11:7b:34:f6:57:08:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Validity
Not Before: Nov 4 19:00:37 2025 GMT
Not After : Nov 5 19:00:37 2025 GMT
Subject: CN=736cd75cdade3d8ac79d28f44ce569ba5fb2b7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3d:6d:78:f5:77:ec:fd:2d:57:bb:bd:78:8e:
6b:b5:83:79:c0:82:2e:0d:af:50:f7:b6:5e:86:89:
09:8b:3a:48:bc:bd:ce:1a:1b:6e:41:4f:ad:d8:5c:
03:2f:0a:38:3a:fc:ab:8e:0c:51:fb:e0:03:87:7b:
be:8b:8f:28:7f:09:a1:21:07:a0:ee:fc:d6:2b:64:
07:a9:4b:a6:39:5e:f8:bd:64:be:3b:85:3c:39:ac:
fb:79:28:c3:5e:0b:a9:e9:a2:c3:c0:6f:47:10:e6:
bf:94:c6:1d:2a:39:a6:29:7a:e4:4a:df:80:be:07:
b0:da:24:c1:3d:97:10:e4:4b:02:35:68:43:33:51:
64:45:55:75:d5:4d:db:60:61:c6:47:2f:49:76:53:
87:52:36:77:62:f6:80:2b:80:e2:7d:dd:03:d2:ec:
a5:1f:e5:b4:47:bd:ad:bc:37:a6:9d:9d:e9:c0:a7:
a2:dc:61:2f:76:f1:5f:d5:e0:6d:d4:9e:9a:36:ec:
0b:85:27:6c:81:16:d7:f2:e3:31:16:2a:ba:a5:fb:
5d:d9:99:f7:73:be:dc:8a:e6:69:ba:44:14:de:0b:
d1:9f:d7:bd:3f:a9:f4:58:de:1c:79:89:c3:cf:09:
cb:3e:da:44:5f:74:7d:18:0e:0a:94:77:d6:8a:b4:
ef:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6C:D7:5C:DA:DE:3D:8A:C7:9D:28:F4:4C:E5:69:BA:5F:B2:B7:D9
X509v3 Authority Key Identifier:
keyid:2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:57:fa:d6:f3:cb:43:67:50:8f:6f:fa:69:5f:2a:6d:a0:6e:
a8:9f:54:c2:93:73:a3:97:25:92:b7:0e:79:4a:3a:46:1e:33:
5e:51:88:0e:69:cb:e3:00:ed:32:9a:a7:a6:24:18:cb:e1:ca:
94:1d:7e:18:37:a3:a4:bd:e9:bf:ee:e5:57:2a:8a:37:ed:52:
12:46:23:d3:4e:c3:40:05:cf:78:89:dc:1e:a6:3e:9c:14:89:
ec:b4:a0:5e:8a:e0:2f:ea:b6:b1:f7:7d:2e:57:f1:03:89:84:
b0:fd:7b:91:c9:9d:67:2c:06:ee:fd:7a:eb:50:1b:d5:01:61:
41:5a:94:18:2d:a3:72:c0:ba:db:23:60:bb:3d:db:b3:31:68:
2f:83:78:ed:f9:a7:79:b9:52:25:8f:79:4e:6d:33:ff:68:6c:
30:41:9a:4f:26:da:83:7a:86:83:c4:98:78:19:4e:a6:a8:5c:
bd:73:30:ad:3a:1d:b0:db:81:9d:5a:a0:0c:a2:4b:54:95:92:
8b:3a:76:b6:0b:32:50:8e:43:ff:90:b5:48:78:85:69:ab:2c:
f4:1e:2d:0f:ae:65:c9:84:95:bc:75:38:bf:98:63:a2:a5:fb:
62:94:63:bb:c0:d3:f0:6d:71:a5:2f:f7:fa:f4:96:70:65:13:
b9:9a:49:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPhYP4ndm60gRezT2VwjNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNDQ3MjMzNmM5ZDAyYTQ4OGNkZDc3NTM0ZDY1ZmIxNDY1
ZWMwOWEwHhcNMjUxMTA0MTkwMDM3WhcNMjUxMTA1MTkwMDM3WjAzMTEwLwYDVQQD
Eyg3MzZjZDc1Y2RhZGUzZDhhYzc5ZDI4ZjQ0Y2U1NjliYTVmYjJiN2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0z1tePV37P0tV7u9eI5rtYN5wIIu
Da9Q97ZehokJizpIvL3OGhtuQU+t2FwDLwo4OvyrjgxR++ADh3u+i48ofwmhIQeg
7vzWK2QHqUumOV74vWS+O4U8Oaz7eSjDXgup6aLDwG9HEOa/lMYdKjmmKXrkSt+A
vgew2iTBPZcQ5EsCNWhDM1FkRVV11U3bYGHGRy9JdlOHUjZ3YvaAK4Difd0D0uyl
H+W0R72tvDemnZ3pwKei3GEvdvFf1eBt1J6aNuwLhSdsgRbX8uMxFiq6pftd2Zn3
c77ciuZpukQU3gvRn9e9P6n0WN4ceYnDzwnLPtpEX3R9GA4KlHfWirTvlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNs11za3j2Kx50o9EzlabpfsrfZMB8GA1UdIwQY
MBaAFCpEcjNsnQKkiM3XdTTWX7FGXsCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wMWRiODItNDE3Mi00NDA1LWFiNTUt
MDA4NmQwMjM4NWQ2LzEvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wMWRiODItNDE3Mi00NDA1LWFiNTUtMDA4NmQwMjM4NWQ2
LzEvS2tSeU0yeWRBcVNJemRkMU5OWmZzVVpld0pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1f61vPL
Q2dQj2/6aV8qbaBuqJ9UwpNzo5clkrcOeUo6Rh4zXlGIDmnL4wDtMpqnpiQYy+HK
lB1+GDejpL3pv+7lVyqKN+1SEkYj007DQAXPeIncHqY+nBSJ7LSgXorgL+q2sfd9
LlfxA4mEsP17kcmdZywG7v1661Ab1QFhQVqUGC2jcsC62yNguz3bszFoL4N47fmn
eblSJY95Tm0z/2hsMEGaTybag3qGg8SYeBlOpqhcvXMwrTodsNuBnVqgDKJLVJWS
izp2tgsyUI5D/5C1SHiFaass9B4tD65lyYSVvHU4v5hjoqX7YpRju8DT8G1xpS/3
+vSWcGUTuZpJJA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:18:12 2025 by rpki-client