Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
File: K0lf5W80diAmqUA18yDwqQt6JWY.mft (raw, json)
Hash identifier: Nmi+/0nMpQH21DXAz83+z7qyuXTllKXzqv4VaE2DxlA=
Subject key identifier: 39:23:5B:2D:20:55:45:AA:41:6C:C3:4E:22:4D:2C:ED:70:19:C9:AB
Authority key identifier: 2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
Certificate issuer: /CN=2b495fe56f34762026a94035f320f0a90b7a2566
Certificate serial: 019A4C6162FBE38D8728A911C676AE3E9452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 01:00:42 +0000
Manifest this update: Tue 04 Nov 2025 01:00:42 +0000
Manifest next update: Wed 05 Nov 2025 01:00:42 +0000
Files and hashes: 1: K0lf5W80diAmqUA18yDwqQt6JWY.crl (hash: nyvWOLeAq5qFtpGH1lPksiwfo1P5xunbsSju+4T73W0=)
2: xWy_WK3zN7U168-WlDV1tLOFxms.roa (hash: 1F+oH+DvxsXdBv6L+suStKLkTpWpU6OO0n2cflrUK4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:62:fb:e3:8d:87:28:a9:11:c6:76:ae:3e:94:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b495fe56f34762026a94035f320f0a90b7a2566
Validity
Not Before: Nov 4 01:00:42 2025 GMT
Not After : Nov 5 01:00:42 2025 GMT
Subject: CN=39235b2d205545aa416cc34e224d2ced7019c9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:ef:84:8a:a2:b5:c5:1f:17:56:4e:4b:db:
3d:4e:c8:39:d2:9c:a8:0e:3f:bf:4f:d3:09:b3:54:
42:e7:e9:68:f1:21:20:c5:2e:f1:5a:f6:ca:fb:19:
17:d9:4a:f0:11:b5:a2:98:71:33:2b:aa:75:0c:e5:
5c:34:bd:45:10:ba:b3:46:23:67:27:5e:e7:db:66:
de:b1:63:d7:13:0f:78:83:cc:18:67:70:fd:99:6f:
0f:98:1f:c3:11:ae:f1:6e:ec:fa:53:ba:4b:89:74:
59:75:ab:c8:29:07:8e:4a:b6:ef:58:8b:f9:63:bd:
bd:9f:fb:80:d7:db:af:06:ef:da:ae:3b:54:06:77:
47:26:e2:25:46:a6:f3:cf:a3:69:c9:dd:65:fc:b8:
ab:09:08:dc:56:cd:6a:92:73:2b:70:9d:43:b4:b8:
ba:99:5f:80:47:42:61:4d:e1:bb:65:d0:7f:db:6b:
ed:87:9f:eb:e4:e0:69:c0:80:12:99:e5:14:c7:d1:
27:45:49:87:02:9f:a4:76:d6:82:48:a4:bc:f8:be:
69:33:78:ba:88:9c:8a:65:61:ea:c6:94:21:f7:e0:
86:ed:8f:bf:71:3b:aa:fe:ce:ee:ad:5a:7b:b0:43:
4a:f5:38:e5:f5:2c:76:af:4d:1d:3d:99:b6:c8:27:
c7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:23:5B:2D:20:55:45:AA:41:6C:C3:4E:22:4D:2C:ED:70:19:C9:AB
X509v3 Authority Key Identifier:
keyid:2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e6:dc:c5:f4:73:f3:36:4d:6f:19:16:c2:f6:9e:21:6e:9e:
66:b0:9d:e9:00:ef:2f:09:de:6b:09:10:de:f6:fe:38:ac:3e:
da:4d:03:6e:1d:93:c7:50:72:b7:87:fe:d3:0d:40:c5:a6:53:
a0:8c:1f:23:9e:ec:a8:d2:93:ac:bb:62:3f:f6:ab:69:71:94:
25:4d:7e:f5:92:43:cf:7a:2a:63:79:92:0e:19:a2:5f:ce:14:
01:71:82:6b:bc:15:18:71:8b:a2:bb:72:ca:cf:cf:02:37:d1:
e4:2d:29:4f:5d:50:ab:8f:34:d6:b8:dd:47:f3:6d:f1:2c:3d:
63:ec:9d:8c:81:4a:59:5c:83:0f:c6:77:06:b5:04:31:68:88:
da:1c:ea:c1:03:6a:4d:24:b2:b4:15:c4:20:43:80:7b:9b:ce:
92:78:2f:48:2c:00:c6:96:d9:65:96:32:72:05:14:da:af:e3:
a9:d4:8f:46:6c:53:ce:14:1c:6e:82:f9:ce:ec:36:44:98:05:
79:ff:4c:7b:9a:50:a4:2b:a1:86:06:be:27:54:f2:20:83:e3:
20:b8:59:30:bf:96:2d:e4:ab:9f:70:11:0e:3d:91:a1:1f:a1:
b9:e4:f6:8c:0f:1c:c6:33:d3:da:54:35:68:a4:b5:06:7a:2f:
37:73:c7:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMYWL7442HKKkRxnauPpRSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNDk1ZmU1NmYzNDc2MjAyNmE5NDAzNWYzMjBmMGE5MGI3
YTI1NjYwHhcNMjUxMTA0MDEwMDQyWhcNMjUxMTA1MDEwMDQyWjAzMTEwLwYDVQQD
EygzOTIzNWIyZDIwNTU0NWFhNDE2Y2MzNGUyMjRkMmNlZDcwMTljOWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslrvhIqitcUfF1ZOS9s9Tsg50pyo
Dj+/T9MJs1RC5+lo8SEgxS7xWvbK+xkX2UrwEbWimHEzK6p1DOVcNL1FELqzRiNn
J17n22besWPXEw94g8wYZ3D9mW8PmB/DEa7xbuz6U7pLiXRZdavIKQeOSrbvWIv5
Y729n/uA19uvBu/arjtUBndHJuIlRqbzz6Npyd1l/LirCQjcVs1qknMrcJ1DtLi6
mV+AR0JhTeG7ZdB/22vth5/r5OBpwIASmeUUx9EnRUmHAp+kdtaCSKS8+L5pM3i6
iJyKZWHqxpQh9+CG7Y+/cTuq/s7urVp7sENK9Tjl9Sx2r00dPZm2yCfHmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkjWy0gVUWqQWzDTiJNLO1wGcmrMB8GA1UdIwQY
MBaAFCtJX+VvNHYgJqlANfMg8KkLeiVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80ZDI0YzctNzQ3Ny00ZjdmLWE4YjQt
OWQ2Mzc5NTIxMWQzLzEvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80ZDI0YzctNzQ3Ny00ZjdmLWE4YjQtOWQ2Mzc5NTIxMWQz
LzEvSzBsZjVXODBkaUFtcVVBMTh5RHdxUXQ2SldZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+bcxfRz
8zZNbxkWwvaeIW6eZrCd6QDvLwneawkQ3vb+OKw+2k0Dbh2Tx1Byt4f+0w1AxaZT
oIwfI57sqNKTrLtiP/araXGUJU1+9ZJDz3oqY3mSDhmiX84UAXGCa7wVGHGLorty
ys/PAjfR5C0pT11Qq4801rjdR/Nt8Sw9Y+ydjIFKWVyDD8Z3BrUEMWiI2hzqwQNq
TSSytBXEIEOAe5vOkngvSCwAxpbZZZYycgUU2q/jqdSPRmxTzhQcboL5zuw2RJgF
ef9Me5pQpCuhhga+J1TyIIPjILhZML+WLeSrn3ARDj2RoR+hueT2jA8cxjPT2lQ1
aKS1BnovN3PHhw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:45 2025 by rpki-client