
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
File: K8wc-LjiEGa27GR2l9SUXY-bsFs.mft (raw, json)
Hash identifier: /q/cQNdrMtNxdNz6w/Z+8kLBKbYsOzeKYcsQdnMFlQk=
Subject key identifier: 06:F1:44:7D:5B:08:98:42:8E:D3:01:2A:80:C3:0A:97:6D:C3:79:C0
Authority key identifier: 2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
Certificate issuer: /CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Certificate serial: 0199FB7CEA5DE0C07137A77EE5466B2DACC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
Manifest number: 1288
Signing time: Sun 19 Oct 2025 08:01:31 +0000
Manifest this update: Sun 19 Oct 2025 08:01:31 +0000
Manifest next update: Mon 20 Oct 2025 08:01:31 +0000
Files and hashes: 1: 1-RD7DNOHCxhrIr1TSToj6urkCEM.roa (hash: YBfKNkThqc59/HOjNrqRSuRrZh5t6Vr9bzlwHzZcB5M=)
2: K8wc-LjiEGa27GR2l9SUXY-bsFs.crl (hash: W1YnUbEinQMp/9tJfYaJCj6sGhVda1CztwmL3x8fMYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ea:5d:e0:c0:71:37:a7:7e:e5:46:6b:2d:ac:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Validity
Not Before: Oct 19 08:01:31 2025 GMT
Not After : Oct 20 08:01:31 2025 GMT
Subject: CN=06f1447d5b0898428ed3012a80c30a976dc379c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:9f:53:5e:fc:9f:1d:3c:87:3e:c9:da:d2:
19:70:cc:1e:7b:32:2a:98:0a:96:3e:52:94:3c:23:
00:59:39:0d:bc:7c:8b:a7:8a:ff:34:b2:c4:c4:7a:
ac:9e:50:da:10:3f:ae:3e:9f:93:93:bd:bf:2b:3d:
cd:3a:c3:95:81:28:82:66:c5:d6:90:6a:25:85:7d:
ea:58:ee:53:7b:b3:b5:92:76:42:0c:61:ef:5f:e8:
b7:dd:51:88:ae:0f:81:53:64:f6:b1:db:ba:0d:68:
37:66:ac:3a:7b:6f:c7:f4:54:ff:a2:07:d5:79:8d:
3d:ef:1c:46:16:67:fc:6d:85:20:83:eb:94:2f:f5:
20:f3:f4:f9:91:b5:cf:06:6f:2e:94:93:ee:73:65:
fc:5c:1c:6f:e3:8f:a6:36:ee:13:c2:38:9c:b6:21:
48:74:53:ef:d4:1d:18:fd:50:84:e4:f7:c5:a1:5e:
2c:68:c0:cd:27:82:98:98:31:19:92:02:86:15:ac:
bb:7c:91:1e:e2:16:df:15:a3:a2:f6:37:e9:8b:da:
25:1d:26:f6:b2:d1:31:c4:69:46:7c:5c:5b:85:6a:
19:5f:a3:f5:2b:eb:86:8e:42:1f:ac:47:a7:91:0a:
c8:6d:04:b0:9e:b8:a1:a2:e8:bb:ce:02:c5:bc:e1:
2f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F1:44:7D:5B:08:98:42:8E:D3:01:2A:80:C3:0A:97:6D:C3:79:C0
X509v3 Authority Key Identifier:
keyid:2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:25:05:29:ce:37:78:19:d8:32:8c:1a:31:04:ce:d5:9f:a7:
0d:90:00:80:42:6b:d1:04:bc:0c:06:79:50:dd:bd:bb:ff:25:
6c:91:5a:ab:00:53:93:2d:a3:7f:73:9f:f5:a4:94:33:b3:82:
19:98:c2:bd:02:25:5c:13:e4:be:f7:81:ce:e7:cb:88:6c:5a:
ff:1f:12:f5:6b:e6:3a:87:37:36:77:65:71:d5:2b:eb:bf:61:
27:3c:2f:51:d4:40:7d:3f:a2:75:40:70:dd:dc:b0:21:d6:2c:
6c:5f:ca:bf:4b:e4:23:98:cf:4d:df:aa:50:11:b5:00:ac:4e:
d3:eb:a7:3c:70:59:5c:e8:8e:66:41:1d:90:ba:7f:97:4b:b9:
88:b2:9c:7b:8c:d9:3d:fc:cd:6b:c8:7e:26:e1:fb:15:83:29:
54:c9:56:e1:d5:b0:75:32:19:57:2d:09:a6:77:63:36:eb:05:
68:dc:6f:0d:ca:3e:97:aa:20:01:19:c0:d3:95:2b:fd:a6:63:
fd:c1:ee:b2:7b:5e:8b:6d:25:64:02:ca:8b:b4:b5:41:fa:ed:
57:f0:f6:cc:14:8a:b3:5c:c2:ce:3b:45:22:56:8b:9c:f3:e9:
40:56:07:30:e2:d0:8b:08:dc:87:41:59:2c:ef:11:15:1d:e6:
23:c5:13:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:03 2025 by rpki-client