Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: 5224FM9rQVWXD4Ebp7P+yUyp5PnVCL10X8JgmpE+wq8=
Subject key identifier: 84:11:BA:AE:DA:6A:CE:D1:79:EE:AC:82:B0:A0:00:0C:D5:EC:C5:20
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 019A4E4F5D8F42D8BEBF11926D4D47C1972C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 10:00:15 +0000
Manifest this update: Tue 04 Nov 2025 10:00:15 +0000
Manifest next update: Wed 05 Nov 2025 10:00:15 +0000
Files and hashes: 1: GLETZPGAzgEdqr3_Ju2Hw5dfeCc.roa (hash: 1ZSMTZbayji0IpT4/tlfR8iOgQX8cgSQ3hZYI5R5pYA=)
2: JVzuM8B6ofXxJRTwKSOh4uQnHZ8.roa (hash: 6kzBk5+13Ftt6UqtqHrn3x6NbCUjc2KzWe2+5j/AkQM=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: cuVnggE4jTK0/0SogyXAxbEhYAmul6kEOptwd63yAbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:5d:8f:42:d8:be:bf:11:92:6d:4d:47:c1:97:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Nov 4 10:00:15 2025 GMT
Not After : Nov 5 10:00:15 2025 GMT
Subject: CN=8411baaeda6aced179eeac82b0a0000cd5ecc520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:68:14:ca:97:a1:21:6c:1f:03:5a:2c:b0:7f:
c6:52:92:15:26:88:7b:23:66:fe:61:27:fd:a6:35:
f6:e5:0f:31:04:85:6b:93:53:91:f0:74:46:0e:d7:
47:aa:ec:91:75:86:bc:95:e2:30:a9:09:63:1d:79:
3b:5d:39:8e:d1:6e:aa:53:c4:0b:9b:8f:4a:92:c2:
13:e7:ee:4e:fd:5f:a2:c3:b6:58:23:30:f5:27:10:
18:c5:57:1b:1e:61:cd:c7:9d:5b:4b:12:3c:1d:9d:
20:e8:52:7a:40:7d:63:05:ed:f7:ab:84:c0:ab:56:
26:2b:6d:18:40:9d:92:a9:59:cf:0c:75:c2:5d:dc:
9a:8e:a4:17:d2:d1:fe:c4:3c:56:3b:ea:c2:43:b9:
cb:16:cb:37:44:bd:89:72:67:f9:39:4d:20:e2:3b:
b9:25:d4:f6:89:a8:f5:64:e3:8f:57:cb:15:6e:8e:
34:86:17:8b:8a:d8:9d:81:72:c9:eb:af:51:53:6e:
a5:20:da:c0:6e:11:80:22:dd:2a:5d:16:ab:de:ed:
79:c0:73:ab:ea:ab:0f:a6:bb:16:3d:f4:39:4b:81:
49:af:6e:5c:eb:63:d2:57:e9:df:06:e5:02:a9:27:
f1:7e:65:3d:b9:55:4b:94:8e:5b:1d:d1:7e:fc:62:
e4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:11:BA:AE:DA:6A:CE:D1:79:EE:AC:82:B0:A0:00:0C:D5:EC:C5:20
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d8:17:0b:a0:f9:de:eb:fc:86:0b:db:c8:76:d3:0d:99:45:
1c:da:bf:63:42:e1:25:64:d1:c5:84:eb:a8:a8:54:da:ac:60:
0e:00:a7:13:53:90:53:b7:b2:fe:cf:a0:64:91:fc:21:bb:90:
50:08:6a:2a:c2:68:c3:3f:5c:00:93:1f:34:74:86:19:09:7b:
ce:41:7e:47:ea:b0:7e:9c:3c:1f:c7:f9:2f:39:38:58:21:b6:
d2:10:fd:eb:59:18:08:a6:67:b7:50:3b:20:9e:8d:ca:1a:01:
24:ee:af:90:59:3d:88:e6:cf:b1:2c:9a:08:75:11:65:bc:59:
7e:6a:e7:5b:f0:fe:5a:58:6e:e5:d8:76:fd:94:b4:0f:c2:d9:
8c:49:7a:6d:0a:d3:21:7a:40:2b:86:3c:39:b7:6d:5e:d7:e1:
54:07:02:ed:05:0c:28:57:15:6e:a4:42:ec:41:b1:8e:83:3f:
21:ce:08:07:08:b3:dd:28:45:4a:8c:1a:d0:96:9e:ac:c3:bb:
0a:07:43:7a:a5:f9:80:15:40:51:1e:16:6c:63:99:47:c5:30:
05:2f:36:ff:d7:ec:fb:5c:35:02:fa:e5:6d:7b:6b:9a:9a:7d:
99:fd:f8:3e:ee:bf:78:40:75:34:e9:9d:c9:24:45:06:75:58:
ce:3f:c0:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT12PQti+vxGSbU1HwZcsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NTU3OWY1YjY3M2RiZTJlYmJhMzQ4Y2ZiMGY1NjEyNGNk
ZTcwNDgwHhcNMjUxMTA0MTAwMDE1WhcNMjUxMTA1MTAwMDE1WjAzMTEwLwYDVQQD
Eyg4NDExYmFhZWRhNmFjZWQxNzllZWFjODJiMGEwMDAwY2Q1ZWNjNTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mgUypehIWwfA1ossH/GUpIVJoh7
I2b+YSf9pjX25Q8xBIVrk1OR8HRGDtdHquyRdYa8leIwqQljHXk7XTmO0W6qU8QL
m49KksIT5+5O/V+iw7ZYIzD1JxAYxVcbHmHNx51bSxI8HZ0g6FJ6QH1jBe33q4TA
q1YmK20YQJ2SqVnPDHXCXdyajqQX0tH+xDxWO+rCQ7nLFss3RL2Jcmf5OU0g4ju5
JdT2iaj1ZOOPV8sVbo40hheLitidgXLJ669RU26lINrAbhGAIt0qXRar3u15wHOr
6qsPprsWPfQ5S4FJr25c62PSV+nfBuUCqSfxfmU9uVVLlI5bHdF+/GLkIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQRuq7aas7Ree6sgrCgAAzV7MUgMB8GA1UdIwQY
MBaAFClVefW2c9vi67o0jPsPVhJM3nBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8xNTc0YzktMDFkNS00OGZkLTk4MGYt
MzQzYzRkMjRjMjNiLzEvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8xNTc0YzktMDFkNS00OGZkLTk4MGYtMzQzYzRkMjRjMjNi
LzEvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9gXC6D5
3uv8hgvbyHbTDZlFHNq/Y0LhJWTRxYTrqKhU2qxgDgCnE1OQU7ey/s+gZJH8IbuQ
UAhqKsJowz9cAJMfNHSGGQl7zkF+R+qwfpw8H8f5Lzk4WCG20hD961kYCKZnt1A7
IJ6NyhoBJO6vkFk9iObPsSyaCHURZbxZfmrnW/D+Wlhu5dh2/ZS0D8LZjEl6bQrT
IXpAK4Y8ObdtXtfhVAcC7QUMKFcVbqRC7EGxjoM/Ic4IBwiz3ShFSowa0JaerMO7
CgdDeqX5gBVAUR4WbGOZR8UwBS82/9fs+1w1AvrlbXtrmpp9mf34Pu6/eEB1NOmd
ySRFBnVYzj/Ahg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:09 2025 by rpki-client