Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
File: K-zvlD00yA4KD9gUJuYTazFQj-4.mft (raw, json)
Hash identifier: yFeatFJUD8bV0rQmNmSxMlmHBj9dJWRHw+Kb5DIe0/o=
Subject key identifier: 35:DD:FF:E6:E1:FA:98:5C:E1:69:1B:54:36:A9:CF:D7:59:4A:BA:AC
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 0199FB7CBC1928ACF5F9A9F5773E9DB2DDFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
Manifest number: 1381
Signing time: Sun 19 Oct 2025 08:01:19 +0000
Manifest this update: Sun 19 Oct 2025 08:01:19 +0000
Manifest next update: Mon 20 Oct 2025 08:01:19 +0000
Files and hashes: 1: K-zvlD00yA4KD9gUJuYTazFQj-4.crl (hash: gRUJNWWSajp87k1cyZJzn8cDuMpHZqj7uA1jtezNxzA=)
2: uyTAYMzc27HPC3St2DUdxuZl0vQ.roa (hash: nhOGHiWnpfS9y1HiircEbA65FySC+R6VBPodKzedGIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:bc:19:28:ac:f5:f9:a9:f5:77:3e:9d:b2:dd:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Oct 19 08:01:19 2025 GMT
Not After : Oct 20 08:01:19 2025 GMT
Subject: CN=35ddffe6e1fa985ce1691b5436a9cfd7594abaac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f9:2c:4c:e8:96:82:a1:20:c3:50:79:a2:0a:
2c:54:29:d8:9e:12:c1:36:4a:67:a6:c3:6d:27:31:
54:f9:b2:36:f9:fd:7f:d0:49:1f:e1:87:f6:68:dc:
75:22:70:fa:08:0f:c4:ad:b3:1b:c6:2e:28:64:a5:
00:fb:63:b4:36:dd:b3:87:76:e1:39:74:0f:e6:ef:
15:99:b3:01:44:ca:2a:16:24:fc:35:23:b7:97:e5:
b8:08:88:8f:1e:43:af:72:d2:c8:d5:74:45:87:c4:
a8:ca:e4:e4:51:41:77:ce:f9:52:44:52:7b:f4:5a:
6a:c5:19:bc:28:35:a9:1f:33:02:b9:8c:6b:46:d0:
05:99:43:01:84:ce:23:da:d7:8f:f5:20:2c:25:cd:
7b:5a:89:1c:e4:11:c7:59:f4:49:c3:1f:b5:b1:28:
f1:b8:e5:ec:91:22:e2:17:43:c9:43:5f:09:0d:49:
6d:ea:cd:1b:bf:d7:09:fb:81:9a:d0:00:8d:b6:99:
0e:19:e7:aa:8f:66:e6:8b:a1:4a:1c:f8:f5:45:9f:
7e:b3:8b:86:ec:11:c7:82:ab:aa:8c:86:c3:38:37:
33:b6:f8:84:3c:f4:e4:7a:f2:11:25:6a:60:8a:38:
35:68:24:2e:3d:3a:31:5d:a7:2e:80:d4:59:d8:f3:
c5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DD:FF:E6:E1:FA:98:5C:E1:69:1B:54:36:A9:CF:D7:59:4A:BA:AC
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:69:af:9e:32:92:ce:b9:ff:0a:43:4a:70:f2:62:7d:f1:42:
7c:cd:ec:e3:ff:c9:ee:e8:96:12:4d:7b:b4:0f:ff:54:f1:19:
6b:23:5c:f2:84:83:4f:12:4c:d2:8c:10:98:96:35:16:a1:72:
88:84:6a:b0:5c:e5:b2:01:6f:f1:88:a5:8a:91:6f:88:dd:90:
72:84:ba:02:c6:25:7d:ee:ee:40:1c:e3:fd:62:7c:50:1e:64:
c2:81:5d:77:73:d7:57:a7:65:a1:d7:7d:8a:04:2e:4e:2c:a3:
ac:e1:d2:6a:55:d9:4c:43:ae:45:2e:27:26:50:4c:c1:cb:f7:
05:49:a8:ff:b7:b3:43:54:2e:61:cf:f4:1d:bc:db:e5:b6:d6:
3a:5c:73:92:54:da:3c:bb:e1:fb:09:01:6c:b9:dc:17:b1:ee:
ef:61:f3:08:e8:38:20:16:54:58:1a:36:41:bc:7b:9d:6a:45:
6c:3b:e1:0f:c4:a9:81:1d:7a:e9:0a:b5:0b:e6:9d:60:2d:0b:
76:45:df:fc:1f:4b:cf:2c:db:45:00:a7:8d:29:83:94:d1:da:
08:4c:0e:7e:7a:2c:8f:f2:42:a6:da:75:50:50:58:b2:69:53:
3c:f3:9b:f2:5b:3c:d2:d9:c9:71:64:36:ac:37:d7:67:4d:b2:
d2:11:39:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:47 2025 by rpki-client