Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json)
Hash identifier: 6I/UjZqTLf9tvsNvXRtFxmM/Q5Ox5Nq/x1KB4+5ZnL8=
Subject key identifier: 2A:BD:0A:AA:CB:53:0B:3D:9D:6F:3B:2C:FE:93:36:80:C1:C6:C5:C3
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 019A50076BBDA1AC17A729BFDA008D0BEB80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 18:00:54 +0000
Manifest this update: Tue 04 Nov 2025 18:00:54 +0000
Manifest next update: Wed 05 Nov 2025 18:00:54 +0000
Files and hashes: 1: 7KoL3jGlfNGPpyhqV9AtZAaoaI0.roa (hash: Nb/Vw+/Ylb4cSX8JKW25BkVIJgSx13SRW+VCTwm5sJ8=)
2: HL23JkhmDLszmlcMKIQLjOYgOlw.roa (hash: UcG0dWZ6JWWkmOHgvKVtqjoii96EVOB2hFdkb/AhZXs=)
3: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: bc8e7veaPyEKqHOgXPWz/Sk7/0TmgwEDn5Iyi4brFmM=)
4: _5futta0xSGb2K29XZ9-2mIIcNo.roa (hash: B+25/sqAb1n8V0UhyQrKEJ3bDb2KGluec9BcmrwzlDo=)
5: bLZSbio8bkJcYZljrUphK1wwfiI.roa (hash: 8pmPyotbXxfraqC1rKstG9Ljo1wkSagV+FMWF45wlzU=)
6: pZ6QLhb3L-zU8HaIuMWziHfarGQ.roa (hash: bAsLcg/vcZKidF7bKnaCdDmEHtuPe3QKZhFTHIqySAA=)
7: vgrDVzIHM-lfYbprXn7b8oE_EG0.roa (hash: pmw87KrkZDI/w+UgS4DgQBhIgi8uItz6U8fozdzX4sc=)
8: yIaElboDEcTWK_3VfQrVd7rO3sU.roa (hash: dRcI0G+6+49AKUKXqa7HKsOOK4Sxw6VtAfiMSWdhRnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:6b:bd:a1:ac:17:a7:29:bf:da:00:8d:0b:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Nov 4 18:00:54 2025 GMT
Not After : Nov 5 18:00:54 2025 GMT
Subject: CN=2abd0aaacb530b3d9d6f3b2cfe933680c1c6c5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d7:c1:fb:19:d9:9f:a8:d4:ee:eb:3a:f4:9f:
af:86:f6:5c:0e:c5:92:43:a6:20:6e:39:9a:62:eb:
6d:92:af:82:40:a7:c6:10:74:8f:ad:e3:08:27:92:
5c:22:3c:d1:7b:61:e0:c4:04:d5:d1:9d:83:2f:4f:
ea:af:50:e2:c2:59:1f:49:f1:97:2c:bc:ff:fd:02:
75:b3:41:87:3e:d8:ce:3e:a0:fd:b9:bf:b5:1f:f1:
38:b3:84:52:cb:5a:41:bc:cd:a3:f4:87:1c:58:ba:
32:6b:33:28:77:81:8c:55:a7:74:bd:3f:8c:3f:27:
64:6e:4e:b5:58:cf:34:f5:2e:ae:ce:33:5e:70:01:
b9:b8:f0:0b:b5:60:96:ab:10:58:a1:80:91:52:a2:
d5:6b:26:70:9c:34:44:e6:3d:d4:3e:07:6e:e1:7f:
03:5d:d0:0c:8c:56:c3:16:8d:50:17:4d:18:73:36:
8d:31:61:ae:df:b8:77:bc:82:86:52:98:e5:08:29:
36:8a:22:ac:dd:b5:12:f6:b9:1d:50:01:1c:0a:3f:
10:2a:2e:6a:c5:ef:1a:e0:1e:de:a1:3c:a7:61:b5:
98:61:a3:35:57:bb:87:29:3b:93:aa:62:05:33:30:
8a:e7:88:67:f4:c6:10:f9:0a:51:bf:16:d1:8f:da:
01:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BD:0A:AA:CB:53:0B:3D:9D:6F:3B:2C:FE:93:36:80:C1:C6:C5:C3
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e1:c9:cb:c5:97:38:19:42:c8:c9:97:5e:20:41:c2:0a:c2:
db:da:cb:c5:12:7d:e6:53:7b:32:e6:eb:db:4a:26:0b:ea:68:
7a:7f:15:6a:4e:a3:19:b0:f1:0f:ca:3e:38:4e:09:1b:1b:cf:
08:04:53:72:5b:0f:31:c1:b2:d5:ca:fe:30:24:65:aa:3e:98:
27:4e:8c:c6:be:3f:b1:c8:89:75:87:2b:e6:aa:78:8e:4a:b5:
f0:5f:6e:be:22:ab:dd:c6:40:19:6f:e3:0d:9d:c3:8e:6b:9e:
1e:dc:47:dd:5f:39:fd:a6:03:49:5a:2e:c9:39:2e:75:58:ae:
9e:03:19:81:a9:e5:16:33:7d:a8:5b:b8:c1:fb:d8:35:99:e0:
1b:f3:36:2c:61:9e:e0:c6:1f:94:ee:62:62:f6:70:f5:d7:7f:
44:e6:24:d2:97:fe:e7:d3:d2:fa:27:68:85:4d:cb:38:02:9c:
f4:1f:62:89:17:d0:47:b2:72:81:d1:36:ca:88:b2:08:6d:92:
b7:11:94:3d:9b:1d:b7:55:ee:81:3e:ed:24:3d:06:c3:a2:45:
f4:66:e8:2c:db:a8:e4:36:b4:2d:29:10:ae:97:a8:24:1e:6b:
6b:60:66:7e:fc:f5:38:b0:29:ef:31:2c:37:12:7b:4f:34:f8:
b9:eb:ab:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQB2u9oawXpym/2gCNC+uAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzY0ZGMyMWNiNWZkNGQwYmNiMDJjYzJiNDNmZDc1MWZk
OTFlMWUwHhcNMjUxMTA0MTgwMDU0WhcNMjUxMTA1MTgwMDU0WjAzMTEwLwYDVQQD
EygyYWJkMGFhYWNiNTMwYjNkOWQ2ZjNiMmNmZTkzMzY4MGMxYzZjNWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NfB+xnZn6jU7us69J+vhvZcDsWS
Q6YgbjmaYuttkq+CQKfGEHSPreMIJ5JcIjzRe2HgxATV0Z2DL0/qr1DiwlkfSfGX
LLz//QJ1s0GHPtjOPqD9ub+1H/E4s4RSy1pBvM2j9IccWLoyazMod4GMVad0vT+M
Pydkbk61WM809S6uzjNecAG5uPALtWCWqxBYoYCRUqLVayZwnDRE5j3UPgdu4X8D
XdAMjFbDFo1QF00YczaNMWGu37h3vIKGUpjlCCk2iiKs3bUS9rkdUAEcCj8QKi5q
xe8a4B7eoTynYbWYYaM1V7uHKTuTqmIFMzCK54hn9MYQ+QpRvxbRj9oBQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCq9CqrLUws9nW87LP6TNoDBxsXDMB8GA1UdIwQY
MBaAFCrGTcIctf1NC8sCzCtD/XUf2R4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAt
MDk3YzNjMWMyNTQwLzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAtMDk3YzNjMWMyNTQw
LzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOHJy8WX
OBlCyMmXXiBBwgrC29rLxRJ95lN7Mubr20omC+poen8Vak6jGbDxD8o+OE4JGxvP
CARTclsPMcGy1cr+MCRlqj6YJ06Mxr4/sciJdYcr5qp4jkq18F9uviKr3cZAGW/j
DZ3DjmueHtxH3V85/aYDSVouyTkudViungMZganlFjN9qFu4wfvYNZngG/M2LGGe
4MYflO5iYvZw9dd/ROYk0pf+59PS+idohU3LOAKc9B9iiRfQR7JygdE2yoiyCG2S
txGUPZsdt1XugT7tJD0Gw6JF9GboLNuo5Da0LSkQrpeoJB5ra2Bmfvz1OLAp7zEs
NxJ7TzT4ueurlQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:22 2025 by rpki-client