Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
File: K-1ik1-0ivbkTLoZQm76tR8cVBA.mft (raw, json)
Hash identifier: SRTO4h/BWFfb7X25IB5ADmjzUiIH81hpM49zZT3wL5Y=
Subject key identifier: 61:CA:61:28:6D:C3:2A:63:E3:AF:C7:47:67:A5:2D:EA:69:57:86:B4
Authority key identifier: 2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
Certificate issuer: /CN=2bed62935fb48af6e44cba19426efab51f1c5410
Certificate serial: 0199FD6B08AD0A6C858FCDF82D5D8B569857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
Manifest number: 0DC9
Signing time: Sun 19 Oct 2025 17:01:14 +0000
Manifest this update: Sun 19 Oct 2025 17:01:14 +0000
Manifest next update: Mon 20 Oct 2025 17:01:14 +0000
Files and hashes: 1: K-1ik1-0ivbkTLoZQm76tR8cVBA.crl (hash: iX628EbKeUUcPDaaHwfSz+YJnUpiVfeL6yQAgNeIQ9E=)
2: jYHRdDHfT6bQOmOGT7Tls1WhRLY.roa (hash: pWv0ClQXtIskoLimOYMYx3t3am8WhnpvjCRS+V8Iqy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:08:ad:0a:6c:85:8f:cd:f8:2d:5d:8b:56:98:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bed62935fb48af6e44cba19426efab51f1c5410
Validity
Not Before: Oct 19 17:01:14 2025 GMT
Not After : Oct 20 17:01:14 2025 GMT
Subject: CN=61ca61286dc32a63e3afc74767a52dea695786b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:26:a4:04:72:da:4d:72:e5:fd:88:83:00:
6e:77:75:d6:1b:e6:d8:6a:74:c4:f2:cf:b7:e7:ba:
f0:1f:5e:f8:30:05:3f:3d:4f:b0:a0:2d:b4:f9:0d:
6a:dc:9f:20:8d:90:93:ca:50:ba:ef:4d:c5:2c:2d:
9a:83:50:97:fa:35:7f:b8:6e:89:94:21:dc:5a:78:
db:6e:c0:29:81:07:dd:ce:ee:c9:07:90:5d:d2:9f:
09:f5:07:c1:8a:e9:09:2b:b6:db:e4:6e:d7:42:7b:
5f:9e:e9:e0:fb:62:a9:5f:40:7b:13:b5:b4:86:66:
02:29:f6:43:8d:8e:58:82:31:f9:fe:12:32:e7:98:
bc:9b:79:03:4f:a1:87:2f:e5:cd:4a:22:78:95:a5:
ca:ab:21:ac:e9:31:13:0a:a4:e5:ff:18:e8:9c:6b:
28:d5:3b:1a:d9:df:de:3c:d0:c8:57:94:e7:1a:5a:
4a:b4:0a:8c:b0:14:6b:0a:cd:33:ed:24:fa:e3:84:
37:65:86:90:0b:5e:21:c9:e2:4c:c9:8d:e0:07:9b:
64:af:f8:fd:3b:04:00:28:bc:e0:48:3a:a5:b7:15:
8f:2d:50:d4:6d:29:c0:ae:dd:13:86:27:be:8b:af:
1a:ea:59:6d:0c:55:f6:bd:98:c2:c0:a8:76:d0:86:
4a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CA:61:28:6D:C3:2A:63:E3:AF:C7:47:67:A5:2D:EA:69:57:86:B4
X509v3 Authority Key Identifier:
keyid:2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:4e:48:f2:af:48:9b:71:4e:0a:ae:27:fc:ac:97:0e:82:d8:
db:c1:1f:5d:7d:d5:5e:1e:39:77:d7:e3:b3:8d:20:43:2b:58:
ce:a5:c1:51:b7:1f:14:4f:b4:fe:37:cb:74:15:e7:8b:51:3f:
63:43:5f:37:f4:e0:61:38:ea:3c:7e:22:f1:2b:0b:4f:59:5c:
73:4f:62:9b:0b:8b:21:9d:ad:07:f5:84:ad:b1:b3:4b:3f:a4:
50:ed:c3:f4:07:11:f1:92:7b:b2:4b:1d:92:8e:99:d0:72:bb:
68:29:7a:74:27:be:68:04:a4:96:a3:3d:b2:b9:d9:6b:91:08:
45:f8:87:84:27:b4:6c:53:f2:c3:de:02:65:43:51:c7:aa:86:
9c:e9:7a:c3:21:73:9b:59:bd:35:55:a6:f7:0e:83:9e:e7:89:
dc:6a:e6:3e:5a:24:09:1f:e0:b6:37:f6:f4:a7:35:83:6e:0d:
26:ff:63:89:24:14:0b:ff:f8:13:c2:b0:20:d7:d0:9b:50:b7:
17:41:26:9b:c0:6b:c0:54:15:74:aa:a4:c9:80:91:47:dc:d9:
5b:34:7f:b9:cf:0a:8a:d0:35:56:e4:45:b0:9d:4d:1d:5a:ad:
5b:8d:3b:51:9c:65:06:06:42:2e:17:ec:e7:8d:18:d5:bc:bf:
ac:aa:af:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9awitCmyFj834LV2LVphXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZWQ2MjkzNWZiNDhhZjZlNDRjYmExOTQyNmVmYWI1MWYx
YzU0MTAwHhcNMjUxMDE5MTcwMTE0WhcNMjUxMDIwMTcwMTE0WjAzMTEwLwYDVQQD
Eyg2MWNhNjEyODZkYzMyYTYzZTNhZmM3NDc2N2E1MmRlYTY5NTc4NmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTAmpARy2k1y5f2IgwBud3XWG+bY
anTE8s+357rwH174MAU/PU+woC20+Q1q3J8gjZCTylC6703FLC2ag1CX+jV/uG6J
lCHcWnjbbsApgQfdzu7JB5Bd0p8J9QfBiukJK7bb5G7XQntfnung+2KpX0B7E7W0
hmYCKfZDjY5YgjH5/hIy55i8m3kDT6GHL+XNSiJ4laXKqyGs6TETCqTl/xjonGso
1Tsa2d/ePNDIV5TnGlpKtAqMsBRrCs0z7ST644Q3ZYaQC14hyeJMyY3gB5tkr/j9
OwQAKLzgSDqltxWPLVDUbSnArt0Thie+i68a6lltDFX2vZjCwKh20IZKiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHKYShtwypj46/HR2elLeppV4a0MB8GA1UdIwQY
MBaAFCvtYpNftIr25Ey6GUJu+rUfHFQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85YjgxYzgtNzMyYy00M2YyLWI2YWIt
NDg0MDE0YTRkOTRlLzEvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85YjgxYzgtNzMyYy00M2YyLWI2YWItNDg0MDE0YTRkOTRl
LzEvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQk5I8q9I
m3FOCq4n/KyXDoLY28EfXX3VXh45d9fjs40gQytYzqXBUbcfFE+0/jfLdBXni1E/
Y0NfN/TgYTjqPH4i8SsLT1lcc09imwuLIZ2tB/WErbGzSz+kUO3D9AcR8ZJ7sksd
ko6Z0HK7aCl6dCe+aASklqM9srnZa5EIRfiHhCe0bFPyw94CZUNRx6qGnOl6wyFz
m1m9NVWm9w6DnueJ3GrmPlokCR/gtjf29Kc1g24NJv9jiSQUC//4E8KwINfQm1C3
F0Emm8BrwFQVdKqkyYCRR9zZWzR/uc8KitA1VuRFsJ1NHVqtW407UZxlBgZCLhfs
540Y1by/rKqvSg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:28:53 2025 by rpki-client