Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
File: KZWUToTcN7pqQtaLseK5pEIehKQ.mft (raw, json)
Hash identifier: do8hXBfYMO9a4VwiI4Bf+AIJ1QPWEAIoKr7jn/LkMg0=
Subject key identifier: 0F:32:C8:20:0B:EB:6F:10:42:FE:CA:0A:06:E2:89:04:14:A7:33:C9
Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
Certificate issuer: /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Certificate serial: 019A5075280E03C905C58EDDEE814245DC58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 20:00:46 +0000
Manifest this update: Tue 04 Nov 2025 20:00:46 +0000
Manifest next update: Wed 05 Nov 2025 20:00:46 +0000
Files and hashes: 1: 5zGonyGbziYUvusSh8Q5DC8llVk.roa (hash: S1qJmZBpZMGg2baTrfrvnMFHCPji28boUDCTeMahmcM=)
2: Iy-azWAI6KWrOd6xINfWkQK0mmo.roa (hash: WW8+TBzRLpV7fj0dmKJQYyc2cjZjFlGMNCS3c3X42Q8=)
3: KZWUToTcN7pqQtaLseK5pEIehKQ.crl (hash: Ge8P69dFPPAevlGQqAhE6y2UrsHF0YGzxvY0DCBb1hI=)
4: SkUUShcqahf4Ud48xHWiKU08GtI.roa (hash: FRMGmcPu5n4tT7AA3DByB+9obpA4BvNTbGm4L5aAqOY=)
5: k-lfK2Nu0bBTBeFW46-yt6JkICk.roa (hash: muqDHPsC+eweSCrdqAGPB3SXVNwkzBd2weVA2/7oxMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:28:0e:03:c9:05:c5:8e:dd:ee:81:42:45:dc:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Validity
Not Before: Nov 4 20:00:46 2025 GMT
Not After : Nov 5 20:00:46 2025 GMT
Subject: CN=0f32c8200beb6f1042feca0a06e2890414a733c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e0:58:06:9d:a8:b4:ca:59:24:de:94:a7:61:
6f:ac:84:7c:9f:2a:9c:e6:00:6a:0b:61:93:9d:83:
ca:96:1e:3e:fa:18:8a:af:32:d4:bf:ff:01:1e:3e:
b8:dc:4a:b1:c8:13:81:66:bc:62:80:3d:81:f9:c5:
96:f8:a7:7f:9e:a2:00:c6:f1:9b:81:1a:de:fa:96:
02:cc:d6:06:3c:04:28:5d:87:fa:81:77:ac:eb:0b:
fe:ed:d4:bf:43:c3:5a:62:9c:6a:f3:61:ba:1d:81:
61:b9:7a:ce:36:b6:89:fc:32:97:3c:d1:17:81:5d:
ed:b4:c4:8f:2c:61:90:fa:f0:b7:4c:a2:bf:b8:b1:
bb:24:07:c5:3f:f8:da:79:72:16:df:6f:63:b6:ad:
48:ae:43:e9:fa:0e:c4:2a:87:43:f4:69:36:ba:81:
11:47:9d:82:aa:ce:e5:33:b5:87:1a:c7:ec:68:a8:
87:f3:af:28:22:b7:0d:e2:9e:a9:0c:9a:96:f1:07:
da:23:fe:17:b0:d7:c4:bd:ab:4a:dc:f2:05:6f:9c:
ef:c0:2e:e1:8d:e1:15:24:8e:fe:e4:74:b8:3a:fe:
c9:26:2f:29:95:81:72:25:07:fd:a9:00:46:94:dc:
1a:c5:15:fd:69:45:22:6e:31:0a:70:f5:35:bd:af:
91:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:32:C8:20:0B:EB:6F:10:42:FE:CA:0A:06:E2:89:04:14:A7:33:C9
X509v3 Authority Key Identifier:
keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:03:9b:00:f0:27:06:1e:68:00:49:e3:7b:ee:06:38:08:a3:
27:a9:e4:42:fc:6b:18:55:df:69:95:ad:b8:36:0c:6f:5d:0c:
91:be:86:b7:4a:06:d1:ed:f8:c5:2f:a3:7d:2a:54:ee:8f:b0:
96:41:b5:00:db:d2:5f:27:5b:4b:9f:1e:7e:2a:ff:5b:33:2b:
26:d0:15:2e:e4:ad:80:36:18:39:dd:47:6d:e6:da:56:a6:6f:
92:2f:5a:9a:67:61:ad:84:30:84:8d:2e:9a:35:2f:15:fc:90:
e1:4a:d1:15:fa:a6:0a:94:20:49:d4:72:a9:3f:4a:5e:54:a2:
63:3a:fb:cc:06:22:aa:4b:f0:30:cf:ba:d2:94:17:a6:c4:2e:
2c:bd:d6:ff:da:9f:eb:7f:80:e3:db:81:f4:40:47:44:e0:04:
e3:b3:0c:df:9c:82:2d:4f:38:ea:d2:f2:d9:d9:c8:f5:b9:9f:
9b:be:d8:16:e0:9b:cb:3c:75:10:a9:76:d2:4d:04:44:ec:22:
c8:82:65:69:8d:f3:99:6a:3d:de:f4:99:12:fe:e9:28:c8:20:
d7:32:72:6f:bd:26:d8:5b:61:a4:2f:67:69:95:16:1c:04:89:
4e:61:c6:2a:30:a2:4e:25:8c:b5:f5:4b:ed:c8:50:15:01:77:
27:08:be:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdSgOA8kFxY7d7oFCRdxYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5OTU5NDRlODRkYzM3YmE2YTQyZDY4YmIxZTJiOWE0NDIx
ZTg0YTQwHhcNMjUxMTA0MjAwMDQ2WhcNMjUxMTA1MjAwMDQ2WjAzMTEwLwYDVQQD
EygwZjMyYzgyMDBiZWI2ZjEwNDJmZWNhMGEwNmUyODkwNDE0YTczM2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eBYBp2otMpZJN6Up2FvrIR8nyqc
5gBqC2GTnYPKlh4++hiKrzLUv/8BHj643EqxyBOBZrxigD2B+cWW+Kd/nqIAxvGb
gRre+pYCzNYGPAQoXYf6gXes6wv+7dS/Q8NaYpxq82G6HYFhuXrONraJ/DKXPNEX
gV3ttMSPLGGQ+vC3TKK/uLG7JAfFP/jaeXIW329jtq1IrkPp+g7EKodD9Gk2uoER
R52Cqs7lM7WHGsfsaKiH868oIrcN4p6pDJqW8QfaI/4XsNfEvatK3PIFb5zvwC7h
jeEVJI7+5HS4Ov7JJi8plYFyJQf9qQBGlNwaxRX9aUUibjEKcPU1va+R+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8yyCAL628QQv7KCgbiiQQUpzPJMB8GA1UdIwQY
MBaAFCmVlE6E3De6akLWi7HiuaRCHoSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1pXVVRvVGNON3BxUXRhTHNlSzVwRUllaEtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hMTIwNjktYTA2MS00NDJlLTliZmIt
MzM4YmRkNDM5ZWUxLzEvS1pXVVRvVGNON3BxUXRhTHNlSzVwRUllaEtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hMTIwNjktYTA2MS00NDJlLTliZmItMzM4YmRkNDM5ZWUx
LzEvS1pXVVRvVGNON3BxUXRhTHNlSzVwRUllaEtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQObAPAn
Bh5oAEnje+4GOAijJ6nkQvxrGFXfaZWtuDYMb10Mkb6Gt0oG0e34xS+jfSpU7o+w
lkG1ANvSXydbS58efir/WzMrJtAVLuStgDYYOd1HbebaVqZvki9ammdhrYQwhI0u
mjUvFfyQ4UrRFfqmCpQgSdRyqT9KXlSiYzr7zAYiqkvwMM+60pQXpsQuLL3W/9qf
63+A49uB9EBHROAE47MM35yCLU846tLy2dnI9bmfm77YFuCbyzx1EKl20k0EROwi
yIJlaY3zmWo93vSZEv7pKMgg1zJyb70m2FthpC9naZUWHASJTmHGKjCiTiWMtfVL
7chQFQF3Jwi+yg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:42 2025 by rpki-client