
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
File: K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft (raw, json)
Hash identifier: WyVGuJsZ0AiVshseEicoE/VNAzm82mDSNNh6/RzKMa8=
Subject key identifier: BE:7A:55:38:8B:4C:6E:31:5D:68:D4:9E:2D:01:BD:2E:76:6D:B0:DF
Authority key identifier: 2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
Certificate issuer: /CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Certificate serial: 0199FC2159C980A55521C5EBC356061D2CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
Manifest number: 0353
Signing time: Sun 19 Oct 2025 11:01:07 +0000
Manifest this update: Sun 19 Oct 2025 11:01:07 +0000
Manifest next update: Mon 20 Oct 2025 11:01:07 +0000
Files and hashes: 1: K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl (hash: 0hIRXp663+0pyeqn5qERWHVLMSEenF9mxyWnOa/NgHA=)
2: cRNU9mqjTuLyrs64AbQG-Q8lS_M.roa (hash: gATqx8bTowXwaPkDc2Os+EOXUJAixbB51eSVdjtnNog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:59:c9:80:a5:55:21:c5:eb:c3:56:06:1d:2c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Validity
Not Before: Oct 19 11:01:07 2025 GMT
Not After : Oct 20 11:01:07 2025 GMT
Subject: CN=be7a55388b4c6e315d68d49e2d01bd2e766db0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2b:1f:20:39:21:04:fd:28:fd:ea:fb:31:fe:
ff:07:68:70:bb:31:dd:01:d5:69:b4:ad:55:37:6b:
8e:b6:df:5b:44:51:7b:49:d7:f2:09:2e:72:b9:6d:
e1:5d:c0:7d:a7:0d:07:c0:77:90:c5:2f:9a:bf:32:
4b:1e:f1:a5:27:0f:f8:8e:8a:71:39:5e:b1:e6:49:
86:9c:78:fc:61:90:db:ab:3d:03:c8:06:67:08:28:
dc:b9:d8:4f:fb:19:71:79:a5:aa:e0:24:7a:5c:9f:
b4:e7:ca:f9:ce:22:db:45:88:f6:a9:2b:1a:b3:4d:
64:04:4b:19:45:2e:c5:72:8f:39:d3:cd:c8:e8:ab:
4a:e4:ee:01:82:55:4d:91:9c:01:02:6e:22:8a:65:
da:90:a9:32:92:b3:62:34:0b:41:fc:8e:22:68:68:
a9:9c:c2:64:cd:ba:a3:c9:f1:f7:f8:26:55:8f:8f:
6f:56:be:5f:3c:3d:c4:52:94:95:56:c3:d7:22:45:
be:c3:4a:5b:54:00:fe:d0:c2:64:1f:66:61:20:56:
be:b1:a8:ed:43:b3:6d:cd:7e:43:c9:10:8d:f4:fd:
8e:03:70:87:9a:d8:6c:67:7e:46:48:92:76:c6:b0:
ad:da:ef:1d:ab:d9:2d:08:c9:38:f4:11:79:ff:54:
c3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7A:55:38:8B:4C:6E:31:5D:68:D4:9E:2D:01:BD:2E:76:6D:B0:DF
X509v3 Authority Key Identifier:
keyid:2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:90:d4:28:8d:6c:b7:f2:3e:9a:2b:78:7e:ac:91:f3:ad:1f:
ad:38:f9:e2:e9:9f:d5:93:67:c7:42:44:89:c2:d3:cf:a2:51:
6f:dd:0a:e3:6a:a0:bc:ec:1a:4c:9f:6b:3d:6b:f0:a3:5c:cc:
fa:8b:b7:58:71:2b:47:21:02:57:44:5d:8c:74:07:a7:d6:b2:
0f:a3:ad:fa:97:dc:32:6a:f1:9b:68:eb:a8:aa:4c:74:46:d0:
17:70:db:e7:a5:a0:48:16:16:07:df:ac:79:c9:47:60:97:ca:
1a:08:85:de:df:2d:00:10:38:fe:3e:3f:a6:90:88:18:87:e3:
65:5d:4a:7b:c6:56:d2:0a:43:bf:05:27:72:8c:c2:c6:cf:f3:
8a:f6:6e:d1:bc:f6:f5:4e:0e:dd:86:68:68:2b:5a:a7:59:4d:
49:a2:24:60:c8:a9:b1:8e:f6:60:a4:0e:0b:7d:c1:b8:5a:b1:
a0:4b:8f:dc:13:09:27:72:3d:55:ee:b3:52:3b:ea:22:1f:a2:
29:24:a2:57:05:b1:4a:22:37:db:38:02:9a:ff:d8:57:be:9b:
13:19:d2:c3:3e:53:38:66:20:bb:1f:da:3b:b6:75:69:9b:06:
09:41:2c:7c:8a:da:90:74:76:34:9a:04:7b:8a:a7:b9:ce:c0:
01:ed:f2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:50 2025 by rpki-client