Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
File: KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft (raw, json)
Hash identifier: z7B419Z+ZwsAJyzRhkRVvc194iAcJUYkVauzwjOfba0=
Subject key identifier: AE:A3:34:B8:14:E9:72:C9:2B:DC:E7:AB:59:9D:E6:AD:2A:C9:AF:4A
Authority key identifier: 2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
Certificate issuer: /CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Certificate serial: 019A4F994DD9EA93332B0594D37085CD62EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
Manifest number: 144A
Signing time: Tue 04 Nov 2025 16:00:38 +0000
Manifest this update: Tue 04 Nov 2025 16:00:38 +0000
Manifest next update: Wed 05 Nov 2025 16:00:38 +0000
Files and hashes: 1: KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl (hash: SvXZtT66Lx6DeEDS6FLfdAz3pbkS5URg45I/njPPKGI=)
2: jVEebkEC2-oHzNPCTqPYuC9aoqE.roa (hash: J11dJEoO4oOPIGJkgBui1oSiw1WMmsHoIDwoMRNd+jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:4d:d9:ea:93:33:2b:05:94:d3:70:85:cd:62:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Validity
Not Before: Nov 4 16:00:38 2025 GMT
Not After : Nov 5 16:00:38 2025 GMT
Subject: CN=aea334b814e972c92bdce7ab599de6ad2ac9af4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:73:eb:0d:54:7a:d0:fe:a4:c2:8a:21:1c:82:
aa:bd:fc:8b:9e:02:32:d2:76:ea:53:05:19:cd:69:
dd:ca:40:bd:c7:e3:6a:1a:cf:37:2e:9f:51:60:ac:
7e:3c:c5:c3:cf:82:17:4b:c1:08:00:c6:9d:24:43:
f9:4e:82:2c:1b:fc:6e:15:29:cf:89:4e:84:64:7a:
fa:11:04:2f:28:1f:be:d1:15:4b:36:55:09:22:77:
26:81:df:d2:f4:8c:31:ee:9d:10:6b:01:24:37:e4:
e8:30:19:06:32:c1:12:05:6e:84:ad:2b:2c:c2:90:
ad:f6:a4:39:b5:5b:ad:a4:14:eb:d7:6a:c4:a9:7a:
47:9a:4d:7c:eb:37:ea:d5:6a:fb:70:d2:11:d5:08:
73:fd:01:4c:e9:22:ec:10:b9:f3:8d:0d:3b:9e:c4:
d1:22:29:b7:51:e7:d4:a6:05:c6:65:9c:92:70:d3:
12:0b:33:34:89:03:8a:46:fb:ea:eb:e2:29:7a:57:
f2:4a:12:11:43:23:7d:44:e3:14:e3:e4:8a:55:11:
e4:c9:a8:a1:e2:85:9c:c1:e3:4b:26:b4:fa:a4:48:
db:6f:79:a4:1a:3b:9a:ed:96:0c:68:4e:6e:27:90:
f8:ec:a5:5f:ab:43:93:1d:d1:4f:d7:15:ff:a5:f8:
da:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A3:34:B8:14:E9:72:C9:2B:DC:E7:AB:59:9D:E6:AD:2A:C9:AF:4A
X509v3 Authority Key Identifier:
keyid:2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c7:11:f1:e3:24:a7:49:7f:ae:21:c8:fc:5a:01:2d:83:9c:
89:6e:45:85:41:e7:b2:81:2e:70:ae:b1:da:46:cf:d1:89:73:
b0:14:bf:ee:30:1b:cf:ca:8c:4b:76:2c:4b:d1:db:6e:3f:e7:
2d:0e:bf:f1:1c:20:65:f4:24:8b:18:67:f1:d1:bb:8b:e5:46:
fc:8f:f2:14:3e:e2:de:51:75:36:7a:11:1f:4c:95:19:31:41:
1b:46:3f:af:e5:08:56:fc:f1:60:47:ef:8a:b4:4a:91:ce:a5:
d7:81:6f:b0:15:3b:4e:f4:9a:4b:8d:08:1e:0b:6c:f4:b6:96:
7b:0a:52:1f:1d:20:2e:8b:84:d4:b9:ee:e6:34:f1:36:68:73:
69:11:ff:21:c0:1e:ff:1a:1f:b8:da:56:63:d2:1c:57:9f:5c:
11:26:28:b0:ec:66:fa:17:f4:71:82:92:4f:6d:b9:fc:f9:00:
61:ce:01:54:d8:fe:b7:da:f4:b6:61:71:cd:8e:63:41:24:ad:
94:59:de:51:51:5e:b0:e9:5f:a8:c6:d9:f8:c8:a5:54:af:96:
4c:9a:91:da:2d:c2:99:74:4c:25:22:ec:1d:79:ed:f6:18:96:
87:f0:98:30:b8:b5:ef:3c:3b:49:ba:3d:9c:63:e5:a5:ff:33:
3b:ea:57:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmU3Z6pMzKwWU03CFzWLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTEwMGExNDVkY2I3YjM3OTUzNzliYjA5MzhmZTg5YWE4
NjE5MjQwHhcNMjUxMTA0MTYwMDM4WhcNMjUxMTA1MTYwMDM4WjAzMTEwLwYDVQQD
EyhhZWEzMzRiODE0ZTk3MmM5MmJkY2U3YWI1OTlkZTZhZDJhYzlhZjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33PrDVR60P6kwoohHIKqvfyLngIy
0nbqUwUZzWndykC9x+NqGs83Lp9RYKx+PMXDz4IXS8EIAMadJEP5ToIsG/xuFSnP
iU6EZHr6EQQvKB++0RVLNlUJIncmgd/S9Iwx7p0QawEkN+ToMBkGMsESBW6ErSss
wpCt9qQ5tVutpBTr12rEqXpHmk186zfq1Wr7cNIR1Qhz/QFM6SLsELnzjQ07nsTR
Iim3UefUpgXGZZyScNMSCzM0iQOKRvvq6+IpelfyShIRQyN9ROMU4+SKVRHkyaih
4oWcweNLJrT6pEjbb3mkGjua7ZYMaE5uJ5D47KVfq0OTHdFP1xX/pfja+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6jNLgU6XLJK9znq1md5q0qya9KMB8GA1UdIwQY
MBaAFCqRAKFF3LezeVN5uwk4/omqhhkkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3BFQW9VWGN0N041VTNtN0NUai1pYXFHR1NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hMzk4ZWItYzQyOS00ODM3LThlNzct
NzkyNDZjODk0NTkxLzEvS3BFQW9VWGN0N041VTNtN0NUai1pYXFHR1NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9hMzk4ZWItYzQyOS00ODM3LThlNzctNzkyNDZjODk0NTkx
LzEvS3BFQW9VWGN0N041VTNtN0NUai1pYXFHR1NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnscR8eMk
p0l/riHI/FoBLYOciW5FhUHnsoEucK6x2kbP0YlzsBS/7jAbz8qMS3YsS9Hbbj/n
LQ6/8RwgZfQkixhn8dG7i+VG/I/yFD7i3lF1NnoRH0yVGTFBG0Y/r+UIVvzxYEfv
irRKkc6l14FvsBU7TvSaS40IHgts9LaWewpSHx0gLouE1Lnu5jTxNmhzaRH/IcAe
/xofuNpWY9IcV59cESYosOxm+hf0cYKST225/PkAYc4BVNj+t9r0tmFxzY5jQSSt
lFneUVFesOlfqMbZ+MilVK+WTJqR2i3CmXRMJSLsHXnt9hiWh/CYMLi17zw7Sbo9
nGPlpf8zO+pXBA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:15 2025 by rpki-client