Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
File: Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json)
Hash identifier: 3DTkxtfAsxq0GabnRRAy9+VvX0D27ZbgoW6D14+KyHU=
Subject key identifier: EA:69:F5:B2:AF:B0:D0:9D:80:92:71:69:36:FC:3F:F7:65:C1:DC:15
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Certificate issuer: /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial: 019A4E18DF3743301BC7C2B9A7F47A1041F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
Manifest number: 0F5A
Signing time: Tue 04 Nov 2025 09:00:44 +0000
Manifest this update: Tue 04 Nov 2025 09:00:44 +0000
Manifest next update: Wed 05 Nov 2025 09:00:44 +0000
Files and hashes: 1: BTmSI3bKDyEio_o8HAFd3DpA8rw.roa (hash: 3z5V5nlo98dCHrSvU7v+ci/JP55YJA4F6NU227fMQdg=)
2: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: xWGIr5ssKRU8Qh2WWo+2ILbxtL7n/pMxIRBTpR296+E=)
3: Vl-BUyW_4i4W1Wnxmf0KDGW6dVM.roa (hash: qrkRzr8LSzDpFIdLrS23zNSmVx5+NOPtSLZdcnXxt68=)
4: oxi_ya_EdBtJCrjY1pYIsNptA_Q.roa (hash: /Rw4xq/Rq6iapjKpArPGVtAk2zVGOyS/eMr3PI823Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:df:37:43:30:1b:c7:c2:b9:a7:f4:7a:10:41:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Validity
Not Before: Nov 4 09:00:44 2025 GMT
Not After : Nov 5 09:00:44 2025 GMT
Subject: CN=ea69f5b2afb0d09d8092716936fc3ff765c1dc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e4:56:00:46:75:b8:67:4b:e7:b5:71:49:c6:
09:88:cd:7a:b7:d3:8e:d2:db:f4:12:ff:05:cf:f5:
ab:ad:50:a7:58:e8:22:06:46:94:ae:08:ec:13:3b:
03:7f:81:ef:79:ef:a1:32:6a:fe:5b:89:60:12:11:
e6:02:6b:a6:e2:17:ee:44:dd:6a:9e:06:46:83:16:
5f:20:3d:d2:14:05:7c:82:7d:4d:19:10:c5:a8:8d:
d5:7a:40:c7:bb:b7:ce:41:de:fe:09:65:d4:c0:c1:
6a:e1:5f:70:1f:78:fd:31:8c:c1:b8:16:b2:a8:be:
09:dd:6a:6f:62:f5:fe:31:c3:ce:47:c5:4e:83:94:
e7:62:32:d3:19:e9:38:48:6d:d5:bb:da:f9:c0:18:
fc:fc:82:4b:a9:ca:4a:13:b8:ee:df:b3:e2:c0:70:
6e:5f:71:74:63:e7:8e:86:5f:34:d3:30:e0:02:fe:
49:4a:20:6d:a0:33:7a:f2:32:83:e1:bc:92:70:16:
65:0e:19:f2:4f:1d:18:3d:2c:7b:22:d9:a3:f9:63:
a1:37:e5:75:79:56:3e:d0:d7:55:56:f9:f0:32:d3:
74:b2:ee:ef:b6:57:03:72:99:eb:15:9f:ad:f5:eb:
8e:9c:10:d2:ef:4f:f1:55:a8:55:92:ee:0a:08:82:
47:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:69:F5:B2:AF:B0:D0:9D:80:92:71:69:36:FC:3F:F7:65:C1:DC:15
X509v3 Authority Key Identifier:
keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c6:e9:6b:9d:25:48:35:37:0c:76:e0:75:e7:8b:b5:28:05:
16:e7:a6:8e:f4:18:c7:ff:ce:25:c5:a8:08:d1:a6:dc:6d:43:
ac:d3:bd:88:40:5a:1b:ab:c9:3a:ca:a1:c1:1c:6a:b3:a5:65:
dd:34:23:7b:8d:95:0e:fb:49:55:d5:99:c4:0b:d8:1e:12:fd:
b3:59:17:92:ff:01:fd:1f:8d:f3:80:60:78:7f:df:bf:56:78:
13:02:d3:d7:5d:92:78:27:9e:98:6b:ec:60:4a:a7:96:84:50:
29:d1:33:7e:9b:08:38:9f:52:c3:39:ce:0a:85:0c:14:60:4b:
01:fb:75:e9:ad:a4:3e:19:ed:8c:d7:d0:75:44:4d:0c:c9:a9:
e5:49:75:e3:03:be:31:c5:30:eb:ed:7f:ce:2d:11:e7:cc:6d:
7d:99:b4:5a:8b:21:ff:73:87:d4:b2:0f:e4:c9:74:5e:97:d0:
0a:80:95:6a:a9:73:05:9e:c9:e6:dd:92:b6:ab:a8:9c:74:65:
f2:72:0d:25:23:01:23:2b:5c:6c:32:e5:73:18:5e:2f:cc:26:
81:3e:55:96:85:99:4a:e9:96:95:0a:30:a6:59:c2:e5:98:39:
53:9c:cd:bc:82:5d:7e:04:e9:d3:61:8e:fd:c3:82:02:75:9f:
73:2d:3f:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGN83QzAbx8K5p/R6EEH3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZGQ0MzhhN2NlM2NiMzc5ZjI4Y2ZhMDUxY2Y2M2Q1YWQ4
ZmUzY2EwHhcNMjUxMTA0MDkwMDQ0WhcNMjUxMTA1MDkwMDQ0WjAzMTEwLwYDVQQD
EyhlYTY5ZjViMmFmYjBkMDlkODA5MjcxNjkzNmZjM2ZmNzY1YzFkYzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uRWAEZ1uGdL57VxScYJiM16t9OO
0tv0Ev8Fz/WrrVCnWOgiBkaUrgjsEzsDf4Hvee+hMmr+W4lgEhHmAmum4hfuRN1q
ngZGgxZfID3SFAV8gn1NGRDFqI3VekDHu7fOQd7+CWXUwMFq4V9wH3j9MYzBuBay
qL4J3WpvYvX+McPOR8VOg5TnYjLTGek4SG3Vu9r5wBj8/IJLqcpKE7ju37PiwHBu
X3F0Y+eOhl800zDgAv5JSiBtoDN68jKD4byScBZlDhnyTx0YPSx7Itmj+WOhN+V1
eVY+0NdVVvnwMtN0su7vtlcDcpnrFZ+t9euOnBDS70/xVahVku4KCIJHCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpp9bKvsNCdgJJxaTb8P/dlwdwVMB8GA1UdIwQY
MBaAFCrdQ4p848s3nyjPoFHPY9Wtj+PKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUt
MjBhMGQxMzBjNDU2LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8wYjYxY2YtODBiYS00ZThlLWEyZTUtMjBhMGQxMzBjNDU2
LzEvS3QxRGluemp5emVmS00tZ1VjOWoxYTJQNDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA8bpa50l
SDU3DHbgdeeLtSgFFuemjvQYx//OJcWoCNGm3G1DrNO9iEBaG6vJOsqhwRxqs6Vl
3TQje42VDvtJVdWZxAvYHhL9s1kXkv8B/R+N84BgeH/fv1Z4EwLT112SeCeemGvs
YEqnloRQKdEzfpsIOJ9SwznOCoUMFGBLAft16a2kPhntjNfQdURNDMmp5Ul14wO+
McUw6+1/zi0R58xtfZm0Wosh/3OH1LIP5Ml0XpfQCoCVaqlzBZ7J5t2StquonHRl
8nINJSMBIytcbDLlcxheL8wmgT5VloWZSumWlQowplnC5Zg5U5zNvIJdfgTp02GO
/cOCAnWfcy0/lg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:36:17 2025 by rpki-client