Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
File: K-1ik1-0ivbkTLoZQm76tR8cVBA.mft (raw, json)
Hash identifier: O43vyvvu3CRv+lTZJIdEwoGyoQP655dZzOaYPR+91AA=
Subject key identifier: E4:51:59:0E:A3:9A:41:10:04:BA:E3:D1:EA:C3:4C:0E:4B:DE:9A:4D
Authority key identifier: 2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
Certificate issuer: /CN=2bed62935fb48af6e44cba19426efab51f1c5410
Certificate serial: 0199FF596744A716DBE670EA03C42190595C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
Manifest number: 0DCA
Signing time: Mon 20 Oct 2025 02:01:12 +0000
Manifest this update: Mon 20 Oct 2025 02:01:12 +0000
Manifest next update: Tue 21 Oct 2025 02:01:12 +0000
Files and hashes: 1: K-1ik1-0ivbkTLoZQm76tR8cVBA.crl (hash: i96tQIdAqAOjD0j5hpF9yIG0uK5+uFEc7U4IyDlc4Vk=)
2: jYHRdDHfT6bQOmOGT7Tls1WhRLY.roa (hash: pWv0ClQXtIskoLimOYMYx3t3am8WhnpvjCRS+V8Iqy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:67:44:a7:16:db:e6:70:ea:03:c4:21:90:59:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bed62935fb48af6e44cba19426efab51f1c5410
Validity
Not Before: Oct 20 02:01:12 2025 GMT
Not After : Oct 21 02:01:12 2025 GMT
Subject: CN=e451590ea39a411004bae3d1eac34c0e4bde9a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:75:e2:55:b5:6f:99:4b:80:0d:ed:46:85:d7:
7e:21:53:2c:dd:a3:57:0c:13:d1:c7:40:d7:91:b3:
eb:d0:85:c3:8b:c8:25:e4:42:9a:47:88:f8:1f:8f:
9a:2d:37:b0:85:1b:1b:49:2a:70:9b:88:cb:f5:5f:
4d:57:c1:b8:fc:4e:6d:99:50:5d:f3:fc:4a:0b:66:
48:ec:93:c4:70:85:96:eb:a6:9d:68:b7:d7:5a:d9:
d3:08:66:0f:ca:13:71:2a:e4:7c:a5:01:e4:e9:76:
b7:8e:95:ae:6c:41:ff:4f:3f:3c:75:07:e9:73:81:
43:7c:55:9e:85:47:b9:cd:80:4e:ee:f9:94:20:81:
09:0a:8f:47:c6:55:4b:3d:8d:d9:3d:3b:bf:0f:ee:
33:09:95:a0:cc:cf:13:cc:76:f8:f2:d2:6e:1b:2d:
42:1c:d7:98:26:43:fe:85:13:79:2f:33:b3:3d:34:
d2:5a:26:2e:8d:ad:12:2e:d5:b5:d4:37:e2:65:16:
95:e2:35:de:5b:8a:68:7c:6e:9b:77:d2:1c:e2:2a:
3b:33:78:45:c8:e8:6d:dc:a5:1e:ce:97:b5:54:0f:
8a:f3:a7:98:ea:70:7d:94:42:59:11:07:1b:40:01:
93:3f:bc:90:67:83:b4:a5:0e:c1:23:b1:1c:70:5e:
91:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:51:59:0E:A3:9A:41:10:04:BA:E3:D1:EA:C3:4C:0E:4B:DE:9A:4D
X509v3 Authority Key Identifier:
keyid:2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f4:a3:3a:cf:0c:5c:91:11:ae:e8:89:e8:e9:e6:3b:7b:1d:
c2:29:25:62:0d:a6:d1:68:51:9f:c7:14:3c:68:07:2b:7b:e1:
01:af:e1:24:26:af:22:0d:f3:d3:aa:32:a4:7e:06:af:8f:3e:
06:bd:70:32:98:60:c1:e6:ae:d2:9e:80:48:b0:6b:68:8a:56:
31:2d:03:9b:c5:fa:4c:63:77:2f:80:85:e2:56:21:9b:68:4b:
fd:d4:59:2c:83:35:0b:af:01:7e:7d:16:17:d1:10:10:7f:41:
7a:91:b7:20:83:f1:cb:d1:f5:cf:f6:7e:c6:bf:d8:b6:c0:a5:
ba:66:c3:90:3c:22:88:cb:3f:f0:c9:4b:cb:a4:cc:1c:31:82:
e3:a8:3b:70:ea:db:de:77:24:60:d0:06:80:1b:fd:e5:fe:ee:
cf:66:63:61:30:e4:68:fe:e9:98:4f:84:5c:10:c6:29:62:ae:
d4:3e:42:e5:4e:69:f7:14:44:12:2e:76:20:63:5b:98:a0:9c:
6c:6c:f0:eb:1e:9f:9e:78:83:5e:42:c0:33:a2:e8:0f:6c:ad:
bc:ea:30:94:dc:4a:33:35:e7:ed:51:f7:6c:b1:fc:56:fc:e3:
9e:12:b2:19:28:42:71:49:54:31:e0:1a:75:5a:98:32:03:16:
8a:1c:59:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:58:59 2025 by rpki-client