Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
File: KUoc22jxVM-VQYowjILY2lB3UQk.mft (raw, json)
Hash identifier: xImiBqYFfKNsO719O0UMxT2EcIcXEO6jxqwgy73Uoqc=
Subject key identifier: A7:C2:86:E3:97:73:48:69:75:A4:94:21:9F:15:97:3B:02:55:F7:F7
Authority key identifier: 29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
Certificate issuer: /CN=294a1cdb68f154cf95418a308c82d8da50775109
Certificate serial: 019A4E18DFE4FB28AD75BB2A442FBFA8AE25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
Manifest number: 13A2
Signing time: Tue 04 Nov 2025 09:00:44 +0000
Manifest this update: Tue 04 Nov 2025 09:00:44 +0000
Manifest next update: Wed 05 Nov 2025 09:00:44 +0000
Files and hashes: 1: KUoc22jxVM-VQYowjILY2lB3UQk.crl (hash: +eRYgaEf893YTFXlaMBKe9MBetzQEc30ozm3DAkw+tI=)
2: KZGod_BqVRdmwfNvBiSAHniE4gQ.roa (hash: 6XoOJiv494XxgxSZpKNQsumj729QUswWc6xs9n2QuB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:df:e4:fb:28:ad:75:bb:2a:44:2f:bf:a8:ae:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294a1cdb68f154cf95418a308c82d8da50775109
Validity
Not Before: Nov 4 09:00:44 2025 GMT
Not After : Nov 5 09:00:44 2025 GMT
Subject: CN=a7c286e39773486975a494219f15973b0255f7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:07:7d:04:66:90:10:b0:8d:2b:a9:0d:5e:53:
d4:9c:ab:fd:74:ee:72:5f:2e:23:e9:9f:c6:13:a9:
a0:b9:1b:bd:cc:2a:d7:10:5e:3d:f3:81:04:f5:e9:
ac:6f:cf:b7:6a:1d:f8:dd:a4:d6:fc:ac:cc:f0:85:
8d:c3:40:f3:e4:17:45:60:46:cc:7a:66:b3:e6:1b:
05:b2:2a:89:39:f7:fe:f2:55:44:ed:5b:0c:b0:21:
fb:98:77:9a:9d:86:95:86:b2:d3:f9:dc:f4:c5:b5:
2f:a9:d1:54:43:aa:ac:c0:c5:e6:34:76:f2:d0:22:
e5:b5:4d:ba:aa:f2:64:b8:41:29:45:7f:43:54:e2:
82:01:59:20:99:55:1f:a6:05:af:96:1e:a5:34:4f:
1b:77:d2:db:96:07:26:f6:66:ed:5a:ad:20:5c:2a:
4e:bf:1d:a2:1e:82:92:b6:7a:63:a4:ca:09:6b:31:
91:90:22:f3:20:75:78:00:eb:f9:db:16:8b:32:24:
b0:e4:9c:11:fc:af:c8:11:86:8e:dd:97:a5:99:74:
d7:eb:94:ea:5c:90:59:2a:12:b8:c0:79:dc:ca:3d:
9a:7b:2d:8e:ce:ea:11:a2:f7:ae:43:c6:2a:89:2b:
0a:3d:01:43:7d:03:a8:4c:a2:a3:31:6a:72:ca:4d:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C2:86:E3:97:73:48:69:75:A4:94:21:9F:15:97:3B:02:55:F7:F7
X509v3 Authority Key Identifier:
keyid:29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d8:8c:a8:19:26:5e:a8:c5:02:ff:18:dd:95:8c:ef:37:35:
0c:b0:37:55:41:31:cc:0f:45:4a:2c:dc:89:a1:f0:95:88:96:
aa:20:74:e0:36:e1:20:00:bd:2d:84:c8:ba:75:3a:5b:6c:63:
f5:e4:9e:f4:58:88:4e:93:d2:95:48:f2:85:af:0d:11:4d:fd:
25:10:15:8e:02:05:47:16:06:2d:ea:4f:80:26:62:4c:24:0b:
d1:d0:39:54:19:72:6f:a9:98:d4:35:0b:c9:5f:ff:8d:bf:0c:
67:80:d6:76:44:75:0a:0a:46:10:f2:b9:ef:57:67:18:a8:eb:
03:f8:1a:20:54:89:79:58:af:f6:8c:bf:e7:14:03:2e:f2:5c:
8f:49:67:25:b4:36:2c:37:92:cd:ea:61:d7:76:a1:b5:25:63:
b3:9b:d0:4d:fa:d6:a2:ac:b6:57:00:b2:fc:fd:53:f8:26:ff:
0e:9d:3d:7a:82:cd:a2:13:c7:78:be:17:2e:82:13:41:e7:0b:
69:91:06:80:bc:f2:8e:5f:f3:95:57:47:14:f9:74:14:4e:03:
97:d9:24:61:dd:02:ec:f3:a0:15:8c:a5:05:3b:4e:a4:48:cf:
3c:bd:b0:f5:7a:4e:cf:55:e1:db:7d:32:fc:02:86:2a:ca:db:
2e:b0:ee:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGN/k+yitdbsqRC+/qK4lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NGExY2RiNjhmMTU0Y2Y5NTQxOGEzMDhjODJkOGRhNTA3
NzUxMDkwHhcNMjUxMTA0MDkwMDQ0WhcNMjUxMTA1MDkwMDQ0WjAzMTEwLwYDVQQD
EyhhN2MyODZlMzk3NzM0ODY5NzVhNDk0MjE5ZjE1OTczYjAyNTVmN2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gd9BGaQELCNK6kNXlPUnKv9dO5y
Xy4j6Z/GE6mguRu9zCrXEF4984EE9emsb8+3ah343aTW/KzM8IWNw0Dz5BdFYEbM
emaz5hsFsiqJOff+8lVE7VsMsCH7mHeanYaVhrLT+dz0xbUvqdFUQ6qswMXmNHby
0CLltU26qvJkuEEpRX9DVOKCAVkgmVUfpgWvlh6lNE8bd9Lblgcm9mbtWq0gXCpO
vx2iHoKStnpjpMoJazGRkCLzIHV4AOv52xaLMiSw5JwR/K/IEYaO3ZelmXTX65Tq
XJBZKhK4wHncyj2aey2OzuoRoveuQ8YqiSsKPQFDfQOoTKKjMWpyyk0GYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfChuOXc0hpdaSUIZ8VlzsCVff3MB8GA1UdIwQY
MBaAFClKHNto8VTPlUGKMIyC2NpQd1EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wNGY0NzQtZTNiNS00NTk1LWEwNDQt
NjU3ZTQxYzYzY2E5LzEvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wNGY0NzQtZTNiNS00NTk1LWEwNDQtNjU3ZTQxYzYzY2E5
LzEvS1VvYzIyanhWTS1WUVlvd2pJTFkybEIzVVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdiMqBkm
XqjFAv8Y3ZWM7zc1DLA3VUExzA9FSizciaHwlYiWqiB04DbhIAC9LYTIunU6W2xj
9eSe9FiITpPSlUjyha8NEU39JRAVjgIFRxYGLepPgCZiTCQL0dA5VBlyb6mY1DUL
yV//jb8MZ4DWdkR1CgpGEPK571dnGKjrA/gaIFSJeViv9oy/5xQDLvJcj0lnJbQ2
LDeSzeph13ahtSVjs5vQTfrWoqy2VwCy/P1T+Cb/Dp09eoLNohPHeL4XLoITQecL
aZEGgLzyjl/zlVdHFPl0FE4Dl9kkYd0C7POgFYylBTtOpEjPPL2w9XpOz1Xh230y
/AKGKsrbLrDuxg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:25 2025 by rpki-client