Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
File: K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft (raw, json)
Hash identifier: V1+itDVcxEVm1V85z3LWoYZUu4gy1PA6vaJFMYRG3m0=
Subject key identifier: FA:E9:B1:16:58:7C:C7:35:D7:83:10:2D:4E:40:F5:5A:D2:E3:55:58
Authority key identifier: 2B:73:FE:15:C1:57:F0:6F:E9:AB:21:95:DC:C3:BD:7B:D0:71:68:A0
Certificate issuer: /CN=2b73fe15c157f06fe9ab2195dcc3bd7bd07168a0
Certificate serial: 0199FC8FBCD2C8E46BC00CED01742EEDF8B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
Manifest number: 068D
Signing time: Sun 19 Oct 2025 13:01:42 +0000
Manifest this update: Sun 19 Oct 2025 13:01:42 +0000
Manifest next update: Mon 20 Oct 2025 13:01:42 +0000
Files and hashes: 1: K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl (hash: xcAak0wtf2YYBA6qncfFKWsziGKtVdCD8gTCNCuuDyY=)
2: WGdEQE91EliXk0v4x3jIiAr2OTM.roa (hash: gEyRBLqxqp6b0VNBQfdpnj0lqDeqco4Wbi4LrUK1SDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:bc:d2:c8:e4:6b:c0:0c:ed:01:74:2e:ed:f8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b73fe15c157f06fe9ab2195dcc3bd7bd07168a0
Validity
Not Before: Oct 19 13:01:42 2025 GMT
Not After : Oct 20 13:01:42 2025 GMT
Subject: CN=fae9b116587cc735d783102d4e40f55ad2e35558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:bd:d0:87:b8:e3:13:c0:b2:64:27:25:a5:
58:83:a0:e0:c9:8f:3d:12:d7:33:f2:9b:9b:81:6e:
8f:9d:d0:b6:a4:d0:51:3f:e7:cd:a5:86:7c:4e:7f:
e4:55:70:f8:3d:88:00:7f:7d:1b:70:da:e8:57:b1:
c9:ce:02:28:ac:21:fa:6b:0a:fe:3e:88:dd:2b:e6:
b9:3c:61:b7:77:b9:e2:9e:6b:6f:14:56:49:b0:02:
4a:69:27:be:4d:ae:1e:06:8e:d1:77:67:e8:d4:71:
d6:78:06:88:98:c4:d7:44:be:59:c6:1e:0d:d9:76:
f5:95:fe:32:35:7c:ac:a9:a8:cf:5f:60:cb:57:92:
e9:b1:81:6f:89:b1:f9:7f:a5:ab:bd:98:68:9c:37:
4e:8b:94:36:de:e4:00:4b:5a:ae:bb:12:bd:5e:1e:
85:53:e3:4c:ae:a0:f0:97:86:69:75:6a:dc:e4:67:
0c:9b:fe:32:0a:cb:20:6d:3c:f4:d7:17:6f:78:00:
41:11:15:d2:b2:99:e7:15:a1:2d:a4:ce:50:9a:36:
f1:cf:3d:ce:40:84:99:f2:66:ac:50:3a:93:40:1e:
9f:c7:e6:42:d0:06:13:45:6e:e4:78:2a:13:98:45:
e3:85:b3:5f:0b:27:0c:93:3d:4a:20:9e:c0:b4:51:
20:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E9:B1:16:58:7C:C7:35:D7:83:10:2D:4E:40:F5:5A:D2:E3:55:58
X509v3 Authority Key Identifier:
keyid:2B:73:FE:15:C1:57:F0:6F:E9:AB:21:95:DC:C3:BD:7B:D0:71:68:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1f:ef:87:e0:5d:4c:c0:05:48:93:21:ac:43:dd:49:82:48:
65:8f:4a:10:33:6c:83:af:15:3a:7c:e7:3b:09:e4:9d:ea:b1:
af:c0:95:94:e5:25:b2:b8:e0:2b:1d:43:f4:aa:fc:17:f0:5b:
f4:ec:a3:2d:92:28:46:c2:ba:ee:b0:a0:53:73:8e:eb:3b:ac:
a7:9f:29:79:36:c9:27:c4:1f:c7:04:78:e2:f3:e4:f4:76:f6:
85:4f:08:c8:7c:a2:07:a4:e1:bf:db:d4:8b:55:1f:89:c8:9a:
cc:90:2c:05:e5:b1:34:5a:fc:ea:92:a6:f6:9f:02:7a:c1:03:
26:bd:20:e2:a5:bb:e7:21:40:4c:fe:54:f7:81:43:27:50:58:
87:e0:04:00:1f:e4:d1:96:47:a0:4f:aa:28:03:3d:7b:5e:bf:
67:1c:54:76:98:a0:6d:dc:73:75:ad:a2:0a:ee:17:92:67:cc:
cb:d6:8f:a2:56:53:d1:63:f8:b4:5e:fa:c3:8a:5c:94:5f:84:
be:3b:3e:58:07:89:7a:e1:3a:89:f8:90:1f:b8:d8:ec:28:7b:
f8:0a:2e:bd:51:d9:ac:0a:c2:13:4d:ed:d5:93:85:c8:85:ba:
5f:fc:bf:f4:3d:f5:e6:1e:73:53:ab:71:3d:51:46:13:a8:73:
63:24:b3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:06 2025 by rpki-client