Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
File: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft (raw, json)
Hash identifier: edUXYKc444fq5kdaJ+0i1qeDBPhXpURN6Z0Ua6NgMMQ=
Subject key identifier: CC:D6:66:48:CF:FE:B5:42:8D:38:6A:05:81:96:78:CD:A6:E5:44:6F
Authority key identifier: 2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
Certificate issuer: /CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Certificate serial: 019A4EF47FCC263A5559F17AE8F6D4DB022E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
Manifest number: 0DA2
Signing time: Tue 04 Nov 2025 13:00:37 +0000
Manifest this update: Tue 04 Nov 2025 13:00:37 +0000
Manifest next update: Wed 05 Nov 2025 13:00:37 +0000
Files and hashes: 1: H_XRmIddIdPBZC4McGFtZFb7xLI.roa (hash: URusFpEY9p6Rr7dRogLTLrCEXbfHuzjHeSeeheoUdt4=)
2: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl (hash: +kmxnuyHkWemgMpMSr9RhOF0iF5Mm6a9LV4Uu7HixZA=)
3: xh-we9d8ckMU7F7FFzCQ7FMsb3I.roa (hash: EaElHQr8TuQZrISDJ1FWoKtH8vNTIdcwsRa2JKICJyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:7f:cc:26:3a:55:59:f1:7a:e8:f6:d4:db:02:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Validity
Not Before: Nov 4 13:00:37 2025 GMT
Not After : Nov 5 13:00:37 2025 GMT
Subject: CN=ccd66648cffeb5428d386a05819678cda6e5446f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:5d:dd:5c:7d:ce:e4:83:58:d7:d1:68:3c:
bf:10:25:e9:18:1a:f4:f2:5c:0a:fb:3b:49:cd:d6:
f4:2d:42:55:98:fc:9c:64:99:a7:7b:78:fe:d8:5a:
e8:26:56:10:90:d5:b7:c5:2e:4d:62:78:68:cc:af:
56:3a:db:9b:30:ff:af:b1:33:f9:79:ea:ec:95:3c:
f3:19:55:d9:e8:85:9e:c1:b5:de:15:da:7d:00:30:
ab:ba:29:c5:aa:3b:5b:b2:dd:6d:49:cc:93:be:21:
08:b3:9f:75:75:13:35:0f:ee:a1:22:53:8d:10:7c:
24:ba:28:a5:23:f3:9b:ca:87:e8:b0:4a:94:45:86:
15:1f:db:62:9b:4a:7f:0c:9a:5f:a4:87:99:1b:08:
73:b0:ce:f3:58:05:7f:b5:88:cd:93:bf:1b:c0:e7:
4b:77:bd:50:8d:fc:bf:0d:df:aa:aa:c4:e6:c6:bd:
15:20:39:3b:2b:8d:3f:2a:e9:36:51:84:fa:0b:ac:
1e:45:30:8c:8c:c6:2d:76:5e:99:be:58:eb:15:4e:
1a:b9:ea:bf:b7:6e:6c:df:d7:db:8e:81:15:61:1d:
b9:7e:3f:95:53:31:50:04:88:4e:2b:fc:52:42:82:
4d:45:92:b3:df:c1:7b:de:d3:62:33:4b:51:c2:d7:
39:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D6:66:48:CF:FE:B5:42:8D:38:6A:05:81:96:78:CD:A6:E5:44:6F
X509v3 Authority Key Identifier:
keyid:2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d7:75:91:c2:89:e6:ff:03:e6:73:7b:de:6e:30:68:a3:11:
4d:82:62:2f:0b:a4:b8:28:f9:66:3d:4e:7d:c7:6d:dc:1a:0e:
4e:2f:24:3e:02:a0:a0:6e:24:a5:6c:ba:27:92:29:9e:d0:55:
d7:7a:56:20:4f:b0:97:d7:81:ca:86:b3:8f:39:b6:5a:f1:1f:
a6:dd:03:79:39:0b:68:69:bd:a7:e8:45:bf:6e:8e:e8:9d:60:
27:1a:93:5d:35:9b:5d:e0:74:1e:5f:58:6f:a4:fd:55:9a:cb:
66:b4:0f:a9:d5:94:cd:cf:f5:aa:4c:c0:56:19:39:d1:7a:c9:
c9:f4:05:72:01:2e:5b:45:34:b5:58:fc:60:5b:95:6c:80:1c:
5e:9d:62:a7:37:da:90:b7:59:5d:24:91:00:5e:79:31:a4:ca:
72:ff:70:25:30:a6:65:8e:c7:de:2d:2c:f5:5d:18:01:82:1e:
82:65:04:11:dd:4f:ca:95:2b:1b:1b:9e:e9:c1:b9:bb:c9:0b:
6f:07:e2:54:42:1d:99:5f:b1:7f:ce:17:48:58:23:41:9a:24:
65:c5:86:1e:3c:ee:fc:bc:3a:ab:a7:52:99:de:2a:8f:3a:86:
b1:d0:cf:5b:15:3a:d4:3f:7b:c7:85:12:af:26:86:a0:53:31:
f4:d3:cc:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9H/MJjpVWfF66PbU2wIuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYmNjNWM2NjRhNGE4MjMwNTg5MmE4YzQzM2U5NGZmZTMy
ZGFkYjcwHhcNMjUxMTA0MTMwMDM3WhcNMjUxMTA1MTMwMDM3WjAzMTEwLwYDVQQD
EyhjY2Q2NjY0OGNmZmViNTQyOGQzODZhMDU4MTk2NzhjZGE2ZTU0NDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkdd3Vx9zuSDWNfRaDy/ECXpGBr0
8lwK+ztJzdb0LUJVmPycZJmne3j+2FroJlYQkNW3xS5NYnhozK9WOtubMP+vsTP5
eerslTzzGVXZ6IWewbXeFdp9ADCruinFqjtbst1tScyTviEIs591dRM1D+6hIlON
EHwkuiilI/ObyofosEqURYYVH9tim0p/DJpfpIeZGwhzsM7zWAV/tYjNk78bwOdL
d71Qjfy/Dd+qqsTmxr0VIDk7K40/Kuk2UYT6C6weRTCMjMYtdl6ZvljrFU4aueq/
t25s39fbjoEVYR25fj+VUzFQBIhOK/xSQoJNRZKz38F73tNiM0tRwtc59wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzWZkjP/rVCjThqBYGWeM2m5URvMB8GA1UdIwQY
MBaAFCq8xcZkpKgjBYkqjEM+lP/jLa23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3J6RnhtU2txQ01GaVNxTVF6NlVfLU10cmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kYzczNDUtNzVjYi00NDIwLWEzZjAt
NjVmYjEwYTA2ZTg5LzEvS3J6RnhtU2txQ01GaVNxTVF6NlVfLU10cmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9kYzczNDUtNzVjYi00NDIwLWEzZjAtNjVmYjEwYTA2ZTg5
LzEvS3J6RnhtU2txQ01GaVNxTVF6NlVfLU10cmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtd1kcKJ
5v8D5nN73m4waKMRTYJiLwukuCj5Zj1Ofcdt3BoOTi8kPgKgoG4kpWy6J5IpntBV
13pWIE+wl9eByoazjzm2WvEfpt0DeTkLaGm9p+hFv26O6J1gJxqTXTWbXeB0Hl9Y
b6T9VZrLZrQPqdWUzc/1qkzAVhk50XrJyfQFcgEuW0U0tVj8YFuVbIAcXp1ipzfa
kLdZXSSRAF55MaTKcv9wJTCmZY7H3i0s9V0YAYIegmUEEd1PypUrGxue6cG5u8kL
bwfiVEIdmV+xf84XSFgjQZokZcWGHjzu/Lw6q6dSmd4qjzqGsdDPWxU61D97x4US
ryaGoFMx9NPMUw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:32 2025 by rpki-client