Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
File: kLW7gP7vNEZQqadz9h8LLPv3zow.mft (raw, json)
Hash identifier: tBPbXakrc7fXEkWkbVWVQUelKaMZzu4py+lJsYWweus=
Subject key identifier: 9A:F2:20:DB:3C:8A:D6:89:3F:38:99:A9:72:AC:7A:A8:4B:39:66:89
Authority key identifier: 90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
Certificate issuer: /CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Certificate serial: 019A4F62511F2006F6CC7EE0D4ABBE0137EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 15:00:34 +0000
Manifest this update: Tue 04 Nov 2025 15:00:34 +0000
Manifest next update: Wed 05 Nov 2025 15:00:34 +0000
Files and hashes: 1: FGJLDNwIe5pLjXrqbymC0a0gPJo.roa (hash: kQgzQHprcEB53dC9DqKWQUqd46ovamQ0wepPNfm8eyk=)
2: kLW7gP7vNEZQqadz9h8LLPv3zow.crl (hash: vmTf/3cskEWAjo8FyBgklTAWl91RQc4oKFgb/AO/bd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:51:1f:20:06:f6:cc:7e:e0:d4:ab:be:01:37:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Validity
Not Before: Nov 4 15:00:34 2025 GMT
Not After : Nov 5 15:00:34 2025 GMT
Subject: CN=9af220db3c8ad6893f3899a972ac7aa84b396689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2e:aa:cf:84:08:58:fe:9e:05:ca:a6:79:c9:
71:f0:1d:51:3e:43:68:5f:47:0c:65:49:2b:d9:89:
dc:54:63:e2:bf:ac:13:76:1a:54:bf:7a:5c:7d:0a:
1e:02:bd:a3:75:9a:d3:d7:5c:18:e2:4f:ef:40:13:
6c:0c:e7:58:6a:35:3b:ca:58:39:5c:c1:99:b7:c9:
40:00:f4:07:b3:1c:b4:a8:f2:91:b2:86:ac:93:96:
1f:36:eb:9f:cd:a6:1d:99:51:91:8b:4d:c3:7e:be:
3b:d1:2b:a9:04:5b:48:81:c5:3f:38:e0:39:05:6a:
cc:7f:5b:61:ce:18:09:ad:0f:60:bf:bf:30:fc:f8:
ee:ae:99:de:6e:36:2e:8e:34:09:3a:03:83:d4:a7:
91:25:75:a4:30:84:44:bc:53:3e:6d:96:55:0a:d6:
79:ab:b5:27:75:27:e3:ca:70:00:29:a8:f4:9a:fe:
04:e4:9a:ec:57:90:47:55:55:25:6a:7d:c7:19:03:
39:86:d6:65:f3:18:42:06:b4:0a:c4:8e:8f:40:6a:
0a:cd:74:1a:4f:a3:c0:bd:15:b7:44:81:d5:6d:c5:
c7:41:98:72:3f:7c:58:ee:64:c2:28:c0:76:6f:93:
81:01:cd:bb:b2:f7:64:bc:bf:12:e8:d3:4c:89:d4:
fa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F2:20:DB:3C:8A:D6:89:3F:38:99:A9:72:AC:7A:A8:4B:39:66:89
X509v3 Authority Key Identifier:
keyid:90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:fd:32:1b:be:95:cc:4f:60:53:fd:9f:03:ed:2e:39:b9:29:
57:61:92:b1:7d:ee:6b:52:3c:7f:30:d5:b9:4e:fc:af:bb:77:
67:14:99:ea:07:ad:ae:5b:1f:28:7c:b0:d8:a5:f8:a7:18:1e:
7c:0b:a9:b3:a1:f4:00:96:2f:d1:06:64:11:d6:c3:f8:04:15:
c6:e5:aa:25:37:0a:45:7f:a6:52:b7:13:04:cf:34:50:3e:ad:
93:b1:69:1d:61:a8:24:b1:1d:f0:aa:fb:71:36:65:62:a4:44:
43:a9:89:e2:51:72:ad:e5:e8:03:ec:ef:38:7b:e9:06:1b:31:
aa:57:97:19:7c:35:41:37:58:d7:11:96:d4:44:76:26:3d:f6:
db:1b:b5:ad:00:84:a2:14:70:0d:f8:8a:40:7c:f7:e6:c9:7d:
c7:ae:c8:a9:4a:eb:4c:68:49:f0:09:d1:c7:0f:66:a8:bd:7f:
82:01:07:c5:78:d5:1f:97:27:44:da:89:54:b1:98:17:2a:09:
40:2d:3a:25:65:c9:a3:00:21:98:76:f0:a5:2a:a9:1a:19:8a:
0c:db:67:89:f2:da:44:d4:9f:d9:b9:2a:26:a7:d0:e8:d0:72:
e7:ef:0b:67:15:48:1e:8b:fe:04:3a:a0:ae:00:4d:67:d0:8a:
4d:f1:06:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYlEfIAb2zH7g1Ku+ATfvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYjViYjgwZmVlZjM0NDY1MGE5YTc3M2Y2MWYwYjJjZmJm
N2NlOGMwHhcNMjUxMTA0MTUwMDM0WhcNMjUxMTA1MTUwMDM0WjAzMTEwLwYDVQQD
Eyg5YWYyMjBkYjNjOGFkNjg5M2YzODk5YTk3MmFjN2FhODRiMzk2Njg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC6qz4QIWP6eBcqmeclx8B1RPkNo
X0cMZUkr2YncVGPiv6wTdhpUv3pcfQoeAr2jdZrT11wY4k/vQBNsDOdYajU7ylg5
XMGZt8lAAPQHsxy0qPKRsoask5YfNuufzaYdmVGRi03Dfr470SupBFtIgcU/OOA5
BWrMf1thzhgJrQ9gv78w/PjurpnebjYujjQJOgOD1KeRJXWkMIREvFM+bZZVCtZ5
q7UndSfjynAAKaj0mv4E5JrsV5BHVVUlan3HGQM5htZl8xhCBrQKxI6PQGoKzXQa
T6PAvRW3RIHVbcXHQZhyP3xY7mTCKMB2b5OBAc27svdkvL8S6NNMidT6MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJryINs8itaJPziZqXKseqhLOWaJMB8GA1UdIwQY
MBaAFJC1u4D+7zRGUKmnc/YfCyz7986MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0xXN2dQN3ZORVpRcWFkejloOExMUHYzem93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wNTIxMTgtYzQ2Yi00OGI0LTg3ZGMt
NWVkNTI3MGVkZjIzLzEva0xXN2dQN3ZORVpRcWFkejloOExMUHYzem93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8wNTIxMTgtYzQ2Yi00OGI0LTg3ZGMtNWVkNTI3MGVkZjIz
LzEva0xXN2dQN3ZORVpRcWFkejloOExMUHYzem93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJf0yG76V
zE9gU/2fA+0uObkpV2GSsX3ua1I8fzDVuU78r7t3ZxSZ6getrlsfKHyw2KX4pxge
fAups6H0AJYv0QZkEdbD+AQVxuWqJTcKRX+mUrcTBM80UD6tk7FpHWGoJLEd8Kr7
cTZlYqREQ6mJ4lFyreXoA+zvOHvpBhsxqleXGXw1QTdY1xGW1ER2Jj322xu1rQCE
ohRwDfiKQHz35sl9x67IqUrrTGhJ8AnRxw9mqL1/ggEHxXjVH5cnRNqJVLGYFyoJ
QC06JWXJowAhmHbwpSqpGhmKDNtnifLaRNSf2bkqJqfQ6NBy5+8LZxVIHov+BDqg
rgBNZ9CKTfEG3Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:28 2025 by rpki-client