Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
File: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft (raw, json)
Hash identifier: QjlllCISN7Ldsl2ccQxRX6lAT0RkUY/H7mw1CZVWyz8=
Subject key identifier: 60:C4:FA:34:96:35:E3:F4:BD:19:FF:48:A2:07:AA:D9:F8:3E:F5:4E
Authority key identifier: 2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
Certificate issuer: /CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Certificate serial: 019A52D2C39A6DB102DA021CCA8011835A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
Manifest number: 0DA4
Signing time: Wed 05 Nov 2025 07:02:15 +0000
Manifest this update: Wed 05 Nov 2025 07:02:15 +0000
Manifest next update: Thu 06 Nov 2025 07:02:15 +0000
Files and hashes: 1: H_XRmIddIdPBZC4McGFtZFb7xLI.roa (hash: URusFpEY9p6Rr7dRogLTLrCEXbfHuzjHeSeeheoUdt4=)
2: KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl (hash: qrltcYk++NEaqdqanshthnJmQFkRf0I+CCZ8t8XV8zI=)
3: xh-we9d8ckMU7F7FFzCQ7FMsb3I.roa (hash: EaElHQr8TuQZrISDJ1FWoKtH8vNTIdcwsRa2JKICJyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:c3:9a:6d:b1:02:da:02:1c:ca:80:11:83:5a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7
Validity
Not Before: Nov 5 07:02:15 2025 GMT
Not After : Nov 6 07:02:15 2025 GMT
Subject: CN=60c4fa349635e3f4bd19ff48a207aad9f83ef54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:11:16:65:81:5f:d4:7a:09:3b:7f:1a:13:80:
0f:94:3a:c3:72:32:58:77:5f:b7:71:49:ca:01:a2:
7c:e0:c8:26:81:ef:e8:04:15:cc:2e:58:1a:08:4b:
1b:92:91:9d:0d:bb:97:4b:27:7a:80:14:16:ab:45:
d5:1b:43:a2:a7:f7:89:2b:05:b9:64:80:96:59:f2:
05:0c:70:2f:3e:04:23:41:de:fe:a8:2d:75:1a:6d:
53:d5:93:cc:92:cc:2e:c6:db:31:fb:92:f6:05:b8:
a6:bc:08:8a:8c:37:40:ab:ef:b1:6e:88:bc:5c:99:
df:74:0e:6d:b3:c0:e6:34:28:c8:27:d1:61:06:a5:
04:52:c0:74:7d:68:0c:b4:7b:33:d3:74:2a:0f:a1:
84:86:ca:e5:06:9d:96:3f:97:96:00:92:f6:ad:28:
ef:be:5e:bf:b0:ce:95:fb:44:78:ff:77:45:6d:b8:
a3:55:1c:2a:5a:0b:b9:a9:b0:1a:75:e2:cf:c2:4b:
81:d6:a2:cd:77:db:a3:7d:cb:60:81:d4:5d:b6:11:
26:fc:26:cb:c8:14:4a:5a:cb:da:30:a9:17:3b:46:
d8:17:d4:fb:a7:12:09:e4:a2:77:33:e2:c5:7c:0f:
5d:60:40:9d:da:a8:a9:77:ec:a6:1c:fc:c1:0b:21:
7e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C4:FA:34:96:35:E3:F4:BD:19:FF:48:A2:07:AA:D9:F8:3E:F5:4E
X509v3 Authority Key Identifier:
keyid:2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:32:b2:af:d5:a8:c0:3f:ef:f1:83:c8:e8:79:fe:61:5c:0f:
29:b8:3e:86:9b:17:46:d8:a2:a9:af:2b:ba:f5:ce:0e:ea:f9:
5c:99:16:94:1a:c6:d8:c7:c6:e3:65:92:e7:47:4e:63:68:8b:
14:81:7f:4b:05:f4:9d:50:2d:a1:52:db:61:d3:01:de:59:37:
60:7b:a7:82:b2:91:58:ab:de:c3:17:9d:03:2d:97:30:1a:d5:
47:aa:03:ae:a7:cb:5e:d2:f5:04:20:ef:33:62:28:d5:96:2f:
1c:45:16:aa:80:b2:ee:49:f7:fc:ab:92:c3:17:5f:67:9a:e8:
ff:01:77:8f:8b:3e:f0:2f:c8:2a:52:30:50:08:75:d3:69:d0:
36:6a:c3:8b:fa:77:55:6a:86:3b:39:b4:65:c1:d6:f5:c1:9f:
3d:54:f5:b9:aa:ed:79:9f:dd:48:14:82:3c:13:1a:eb:b0:2e:
2f:8d:bd:45:c4:b7:8f:fd:c7:b2:70:0c:1f:0f:51:01:ca:8d:
93:37:f6:36:95:e8:73:99:8a:41:be:97:ca:3c:de:60:ba:a5:
02:05:48:d4:33:9b:10:e7:7f:be:b7:e3:1c:82:96:33:1d:e9:
ae:52:f4:01:ed:e8:2f:9d:fb:c8:c8:15:91:82:cc:6b:5e:05:
c9:34:4f:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0sOabbEC2gIcyoARg1pnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYmNjNWM2NjRhNGE4MjMwNTg5MmE4YzQzM2U5NGZmZTMy
ZGFkYjcwHhcNMjUxMTA1MDcwMjE1WhcNMjUxMTA2MDcwMjE1WjAzMTEwLwYDVQQD
Eyg2MGM0ZmEzNDk2MzVlM2Y0YmQxOWZmNDhhMjA3YWFkOWY4M2VmNTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hEWZYFf1HoJO38aE4APlDrDcjJY
d1+3cUnKAaJ84Mgmge/oBBXMLlgaCEsbkpGdDbuXSyd6gBQWq0XVG0Oip/eJKwW5
ZICWWfIFDHAvPgQjQd7+qC11Gm1T1ZPMkswuxtsx+5L2BbimvAiKjDdAq++xboi8
XJnfdA5ts8DmNCjIJ9FhBqUEUsB0fWgMtHsz03QqD6GEhsrlBp2WP5eWAJL2rSjv
vl6/sM6V+0R4/3dFbbijVRwqWgu5qbAadeLPwkuB1qLNd9ujfctggdRdthEm/CbL
yBRKWsvaMKkXO0bYF9T7pxIJ5KJ3M+LFfA9dYECd2qipd+ymHPzBCyF+IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDE+jSWNeP0vRn/SKIHqtn4PvVOMB8GA1UdIwQY
MBaAFCq8xcZkpKgjBYkqjEM+lP/jLa23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3J6RnhtU2txQ01GaVNxTVF6NlVfLU10cmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kYzczNDUtNzVjYi00NDIwLWEzZjAt
NjVmYjEwYTA2ZTg5LzEvS3J6RnhtU2txQ01GaVNxTVF6NlVfLU10cmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9kYzczNDUtNzVjYi00NDIwLWEzZjAtNjVmYjEwYTA2ZTg5
LzEvS3J6RnhtU2txQ01GaVNxTVF6NlVfLU10cmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTKyr9Wo
wD/v8YPI6Hn+YVwPKbg+hpsXRtiiqa8ruvXODur5XJkWlBrG2MfG42WS50dOY2iL
FIF/SwX0nVAtoVLbYdMB3lk3YHungrKRWKvewxedAy2XMBrVR6oDrqfLXtL1BCDv
M2Io1ZYvHEUWqoCy7kn3/KuSwxdfZ5ro/wF3j4s+8C/IKlIwUAh102nQNmrDi/p3
VWqGOzm0ZcHW9cGfPVT1uarteZ/dSBSCPBMa67AuL429RcS3j/3HsnAMHw9RAcqN
kzf2NpXoc5mKQb6XyjzeYLqlAgVI1DObEOd/vrfjHIKWMx3prlL0Ae3oL537yMgV
kYLMa14FyTRPxg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:10:13 2025 by rpki-client