Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
File: K0bJzPf_e9zPg3dioOFXvcE1cOA.mft (raw, json)
Hash identifier: YaTRc23t53+j5GfAzp0JliNvCtvyp3xjnrofE8vzU1I=
Subject key identifier: 65:0C:88:31:E1:0A:E5:E3:99:01:3A:61:B4:16:E2:36:3D:FE:98:32
Authority key identifier: 2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
Certificate issuer: /CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Certificate serial: 019A00353AEE50DDD3606409B2BAE5D91048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
Manifest number: 06F5
Signing time: Mon 20 Oct 2025 06:01:19 +0000
Manifest this update: Mon 20 Oct 2025 06:01:19 +0000
Manifest next update: Tue 21 Oct 2025 06:01:19 +0000
Files and hashes: 1: K0bJzPf_e9zPg3dioOFXvcE1cOA.crl (hash: nmDqop28WDYj18kVf4G4T4pmi/q3aTKx7AP+us9y0n4=)
2: qLWefGaIQEsRkcA1tO3guUVq3OU.roa (hash: xslOk/6LQdIGFli9jwCBp6kVRfq8yxFvis0Kh4JP+fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:3a:ee:50:dd:d3:60:64:09:b2:ba:e5:d9:10:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Validity
Not Before: Oct 20 06:01:19 2025 GMT
Not After : Oct 21 06:01:19 2025 GMT
Subject: CN=650c8831e10ae5e399013a61b416e2363dfe9832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:19:1a:db:a3:30:72:e8:8a:08:02:28:1d:
32:ad:a7:80:9f:b4:e5:7a:d0:b1:4e:d3:83:86:a7:
4d:48:c3:e8:2f:3a:b6:6d:56:29:a8:d8:3e:40:3a:
c2:e1:dc:71:04:7a:03:9f:89:d6:7f:8a:22:5d:63:
9a:e4:71:2c:1e:20:fe:e6:c0:c1:41:55:cb:1e:bc:
c2:3d:95:e3:ce:44:ef:7f:5c:b4:de:14:f6:2d:63:
c0:b1:61:c5:93:da:21:ae:1f:46:48:75:70:ef:82:
5c:68:3c:4d:2c:a7:7b:99:d7:bf:72:88:6f:52:c4:
67:d0:26:05:84:e4:87:7b:6a:72:32:97:20:e0:b5:
c1:af:f9:6d:d9:26:bd:92:ed:a1:70:7f:fb:47:c7:
12:2b:b9:a1:16:ea:f8:74:a7:17:95:22:bf:86:a0:
3f:d5:4f:b6:47:49:04:db:06:37:e0:8e:9c:07:d1:
76:29:e1:bb:ef:2d:78:73:c8:ab:7a:cd:12:60:17:
63:68:5f:cb:69:a8:b7:4d:9c:bb:c4:11:d3:65:c0:
25:ee:0d:24:16:41:7c:f2:80:95:1d:f2:ba:11:87:
a9:dd:04:a4:1b:41:97:1b:c7:91:d3:b2:a1:d6:49:
13:10:76:cf:84:5f:68:02:8a:48:1d:ca:48:e0:b3:
f2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0C:88:31:E1:0A:E5:E3:99:01:3A:61:B4:16:E2:36:3D:FE:98:32
X509v3 Authority Key Identifier:
keyid:2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:45:9c:7c:1c:fd:7c:53:b5:b3:d4:33:f5:14:8e:fb:82:6e:
5e:88:77:69:bc:b3:b8:2f:75:a2:8b:eb:46:b1:61:af:44:59:
f6:99:ff:d6:b4:cd:e0:a1:46:6d:97:09:e9:41:23:3b:03:92:
82:45:f1:a7:b0:a9:0b:61:2a:41:dc:23:28:8c:4e:9c:0c:3e:
a8:f5:81:9b:79:6c:cb:c2:ae:22:ef:9f:84:9e:eb:f2:4c:9a:
a4:45:45:9d:00:ca:db:51:32:c2:73:ff:e9:b6:00:29:13:b8:
c6:16:11:83:87:43:b3:cf:c9:ec:71:cd:da:8f:c2:82:d0:94:
4b:3c:b2:21:6c:3a:b3:ae:ce:65:6a:ac:14:62:ea:09:82:28:
53:e7:7b:30:9d:0f:2b:91:88:d4:c8:47:24:99:74:96:90:c3:
52:45:0d:fa:87:ca:e6:0f:9a:05:ce:95:fc:df:85:21:e0:f6:
cc:be:ea:a5:d1:48:f4:56:45:fd:de:59:2a:eb:cb:44:ce:c3:
47:46:bf:52:b4:8e:f4:38:e7:d9:36:d0:30:ff:37:9e:ff:9a:
44:c9:70:fb:8a:16:9b:1b:1f:6d:02:de:6b:02:b9:0a:94:3d:
40:ff:5b:87:01:de:7e:64:d4:70:22:3f:07:de:63:4a:ff:11:
39:58:d2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:44 2025 by rpki-client