Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
File: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft (raw, json)
Hash identifier: xGDrp1TWn2x4XpVdckQfdRGGnaOgnyFU9mCTXYAPDwE=
Subject key identifier: CD:1F:84:EA:8C:9C:B8:40:8F:68:07:A6:47:43:F9:F3:62:FC:30:0B
Authority key identifier: 2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
Certificate issuer: /CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Certificate serial: 0199FC586EAE05E6546F1BD2551E9BE89700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
Manifest number: 071A
Signing time: Sun 19 Oct 2025 12:01:17 +0000
Manifest this update: Sun 19 Oct 2025 12:01:17 +0000
Manifest next update: Mon 20 Oct 2025 12:01:17 +0000
Files and hashes: 1: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl (hash: RuKjoDEULT3bczyhf2qKwr1PC8wW6F7VkdZDspXkz1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6e:ae:05:e6:54:6f:1b:d2:55:1e:9b:e8:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Validity
Not Before: Oct 19 12:01:17 2025 GMT
Not After : Oct 20 12:01:17 2025 GMT
Subject: CN=cd1f84ea8c9cb8408f6807a64743f9f362fc300b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5b:3f:95:63:10:04:8a:3c:0f:0e:fa:b5:a8:
04:7c:e3:16:69:b0:8f:ba:34:a4:16:ed:56:d0:b4:
96:65:fd:a1:5e:cc:43:1f:15:77:5f:72:8a:05:89:
d7:49:3a:2b:a9:d3:d4:d3:bf:37:b3:85:89:86:98:
d0:08:ee:76:06:3f:dc:3e:de:4d:6b:eb:85:82:98:
77:3c:cd:65:16:73:04:46:db:ff:56:40:37:1f:0f:
64:6c:6d:92:bb:f6:1c:2d:1b:d9:ef:9b:27:9e:8f:
85:e5:91:75:32:93:f4:fd:f2:de:a0:5e:d9:a4:59:
cc:e3:bc:fd:9f:d2:77:e9:bf:f5:00:fe:69:c7:3d:
55:4f:5f:5e:7e:56:79:01:3e:77:37:b5:d0:ec:b7:
90:7d:e7:11:cb:bd:f6:9f:d5:f9:cd:b3:e2:b5:b6:
d6:b9:42:0d:5a:6a:9f:9f:dd:31:20:31:c4:c9:ca:
df:e4:71:ce:5c:5c:11:cf:cd:b4:15:af:b1:e0:5c:
60:ec:bb:cc:5f:5c:60:d0:a4:98:8e:89:d6:d3:0e:
bc:f3:e5:04:5e:9e:0a:38:fa:b6:85:a3:cb:85:a6:
5d:5e:40:96:37:b1:59:b3:c3:5f:6b:08:c5:5b:ed:
76:31:82:64:fa:51:3d:74:e4:7f:0d:32:6e:f9:7e:
a7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1F:84:EA:8C:9C:B8:40:8F:68:07:A6:47:43:F9:F3:62:FC:30:0B
X509v3 Authority Key Identifier:
keyid:2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:81:29:02:c9:a4:0d:6f:2b:60:f1:91:c3:ef:ba:50:c8:29:
04:71:a1:08:81:33:4b:17:60:45:64:11:27:e0:06:d4:e1:b4:
b8:73:0a:35:e8:0e:74:03:36:1c:b6:cc:ae:10:93:70:61:48:
06:9b:4f:52:f1:56:df:ef:62:ad:69:f7:72:4d:08:a8:7f:2b:
99:ed:e3:65:0e:d9:b7:cc:e0:35:ad:82:43:5a:56:60:3e:0c:
b0:72:41:27:e0:af:7b:e1:95:84:ec:0f:6b:7b:2d:09:fe:e6:
a6:94:01:8b:9d:55:8f:5e:9f:26:66:35:3a:17:1d:b2:51:05:
77:8e:e0:a0:72:96:85:78:50:a9:b2:fb:39:9e:b2:4d:8b:bd:
df:58:26:68:4f:58:b8:ae:eb:51:f7:85:27:8d:71:6d:f4:32:
17:52:c8:96:23:8d:e7:f3:5e:b6:b6:7c:dc:ca:82:20:f2:cc:
7c:7c:d7:fd:5d:26:0a:59:c6:27:5b:27:fc:90:d7:f1:88:52:
6b:b1:0b:01:53:61:cb:52:a6:e5:f3:5b:f0:af:d3:23:1a:c5:
bb:d9:9c:ce:b5:80:23:d3:78:36:b5:d7:dd:20:99:87:73:90:
89:ff:8d:f7:5f:11:9b:64:3b:ec:7c:d6:a4:d2:87:bc:79:95:
af:c7:30:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:24 2025 by rpki-client