Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
File: kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft (raw, json)
Hash identifier: CKT3KYTG+H60fRCOfe/ee+xO9iP7FanEoEfBpfJBk+o=
Subject key identifier: 05:D1:4D:61:0B:46:22:E6:DE:B1:64:12:25:ED:78:70:92:8A:74:5A
Authority key identifier: 90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
Certificate issuer: /CN=9087833e025b2320f9053a103ba61de52eab2afb
Certificate serial: 019A4D7454BB0D98BA56BBD9E51CE2A0EADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
Manifest number: 06B7
Signing time: Tue 04 Nov 2025 06:01:00 +0000
Manifest this update: Tue 04 Nov 2025 06:01:00 +0000
Manifest next update: Wed 05 Nov 2025 06:01:00 +0000
Files and hashes: 1: Sl6Vo_wPwtgiIFIYMqrbSQblXKc.roa (hash: l8tp4Qke8V/squeIomyLOU/9sV5KVMqfblcX8Rj/Ujc=)
2: kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl (hash: Jrby8h4diAszDpEjZWiQx/+FRw+xPh64zOBMijDY/Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:54:bb:0d:98:ba:56:bb:d9:e5:1c:e2:a0:ea:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9087833e025b2320f9053a103ba61de52eab2afb
Validity
Not Before: Nov 4 06:01:00 2025 GMT
Not After : Nov 5 06:01:00 2025 GMT
Subject: CN=05d14d610b4622e6deb1641225ed7870928a745a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:8d:eb:ce:4a:ca:ec:31:84:20:f6:37:4b:
82:f8:b5:0d:05:31:14:53:f1:50:a0:da:58:0f:d8:
d8:76:b1:e7:15:1e:f1:71:a9:ef:53:dd:5b:68:b0:
50:fd:e6:41:cc:3d:72:33:e7:d3:ac:96:c7:5c:9f:
45:78:ff:06:6e:d6:d3:12:26:3b:cc:86:db:7c:6a:
43:4e:39:e9:e2:2b:15:66:fc:a0:b9:57:9d:48:f9:
00:d6:8d:0f:48:3b:4f:c4:68:1c:44:b6:e3:48:52:
a4:de:ed:70:40:0d:fb:8c:8e:63:10:08:f1:c6:bf:
37:b7:f4:64:e6:4a:59:3a:3c:ea:43:0f:7a:27:af:
8e:c1:e1:2c:de:28:fb:76:23:51:4f:0e:33:e1:54:
3f:8e:31:89:88:65:82:13:b8:9a:84:da:56:a1:53:
a1:2d:58:03:12:02:cc:48:73:58:ce:8d:e1:5c:ee:
d6:40:ac:28:80:23:65:1b:10:28:8d:91:fa:73:19:
58:87:45:12:d3:6e:0f:7d:3f:22:bd:84:9d:4f:06:
d2:5c:9a:23:a6:e9:48:d9:15:d5:ff:17:d8:56:0c:
16:45:49:0a:95:50:91:a0:05:87:b1:e0:61:55:85:
a0:ea:f5:58:a9:d2:57:d3:79:52:2f:f7:2a:bf:d7:
0b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D1:4D:61:0B:46:22:E6:DE:B1:64:12:25:ED:78:70:92:8A:74:5A
X509v3 Authority Key Identifier:
keyid:90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:52:0b:28:ea:aa:1f:59:c6:a2:1a:c7:eb:ec:82:2b:76:59:
e4:03:b4:0c:08:ff:c1:d1:09:c1:18:71:fb:09:89:dd:70:80:
3b:ab:06:4f:54:e0:c9:86:d6:3a:fc:bd:24:75:32:bd:0b:6f:
a9:42:7a:26:30:3e:af:bc:95:d0:37:33:08:f3:3b:55:3f:bb:
c7:c8:ec:61:73:d7:ea:f8:00:cf:9b:88:21:bc:78:53:a4:ee:
8a:ff:df:e7:86:83:c3:f4:4f:b1:03:58:3f:00:05:11:a3:21:
6b:de:0b:d7:dc:93:c0:a6:2b:3a:dc:88:f0:0f:47:56:1e:c4:
fb:d8:c2:75:4e:5c:0f:2c:79:79:c0:97:a2:81:08:fa:c2:82:
0b:83:03:57:ad:c5:42:c6:30:28:c4:c2:c5:fb:11:98:06:47:
f0:fb:5a:72:39:41:af:d4:13:52:f5:55:15:07:0d:33:f0:ad:
75:6f:ce:51:50:61:93:17:9f:23:09:46:8f:e7:a2:79:38:ca:
fa:c0:4d:49:12:83:b1:4b:b5:9a:12:e3:23:ff:de:d9:dd:c7:
bc:78:9b:a8:81:30:df:10:85:76:84:c9:06:60:af:69:d7:e7:
0b:7d:40:65:01:05:e3:2d:57:61:b8:a9:3a:6d:e1:4d:cc:34:
9d:eb:bc:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdFS7DZi6VrvZ5RzioOrcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwODc4MzNlMDI1YjIzMjBmOTA1M2ExMDNiYTYxZGU1MmVh
YjJhZmIwHhcNMjUxMTA0MDYwMTAwWhcNMjUxMTA1MDYwMTAwWjAzMTEwLwYDVQQD
EygwNWQxNGQ2MTBiNDYyMmU2ZGViMTY0MTIyNWVkNzg3MDkyOGE3NDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohmN685KyuwxhCD2N0uC+LUNBTEU
U/FQoNpYD9jYdrHnFR7xcanvU91baLBQ/eZBzD1yM+fTrJbHXJ9FeP8GbtbTEiY7
zIbbfGpDTjnp4isVZvyguVedSPkA1o0PSDtPxGgcRLbjSFKk3u1wQA37jI5jEAjx
xr83t/Rk5kpZOjzqQw96J6+OweEs3ij7diNRTw4z4VQ/jjGJiGWCE7iahNpWoVOh
LVgDEgLMSHNYzo3hXO7WQKwogCNlGxAojZH6cxlYh0US024PfT8ivYSdTwbSXJoj
pulI2RXV/xfYVgwWRUkKlVCRoAWHseBhVYWg6vVYqdJX03lSL/cqv9cLCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXRTWELRiLm3rFkEiXteHCSinRaMB8GA1UdIwQY
MBaAFJCHgz4CWyMg+QU6EDumHeUuqyr7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0llRFBnSmJJeUQ1QlRvUU82WWQ1UzZyS3ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zNzAxZjctMjBlZi00OTY2LWEyY2Qt
MTE5ZGNkMmVhOWRiLzEva0llRFBnSmJJeUQ1QlRvUU82WWQ1UzZyS3ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8zNzAxZjctMjBlZi00OTY2LWEyY2QtMTE5ZGNkMmVhOWRi
LzEva0llRFBnSmJJeUQ1QlRvUU82WWQ1UzZyS3ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1ILKOqq
H1nGohrH6+yCK3ZZ5AO0DAj/wdEJwRhx+wmJ3XCAO6sGT1TgyYbWOvy9JHUyvQtv
qUJ6JjA+r7yV0DczCPM7VT+7x8jsYXPX6vgAz5uIIbx4U6Tuiv/f54aDw/RPsQNY
PwAFEaMha94L19yTwKYrOtyI8A9HVh7E+9jCdU5cDyx5ecCXooEI+sKCC4MDV63F
QsYwKMTCxfsRmAZH8PtacjlBr9QTUvVVFQcNM/CtdW/OUVBhkxefIwlGj+eieTjK
+sBNSRKDsUu1mhLjI//e2d3HvHibqIEw3xCFdoTJBmCvadfnC31AZQEF4y1XYbip
Om3hTcw0neu8Uw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:23:33 2025 by rpki-client