Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
File: K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft (raw, json)
Hash identifier: M5smSK663+2yulmHORnxHNdzLHim4HOi72Yr6LWaVzQ=
Subject key identifier: 5B:BC:1F:3A:26:74:BC:59:D4:9D:B1:21:1A:BB:40:9F:7A:74:B8:42
Authority key identifier: 2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
Certificate issuer: /CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Certificate serial: 0199FDDA2649B98C5A0B05893EA534FF9F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 19:02:36 +0000
Manifest this update: Sun 19 Oct 2025 19:02:36 +0000
Manifest next update: Mon 20 Oct 2025 19:02:36 +0000
Files and hashes: 1: K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl (hash: qCuocRNwFD/S7ThilB+8ZO+hrmI+i1CXgTioRs9Nf9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:26:49:b9:8c:5a:0b:05:89:3e:a5:34:ff:9f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Validity
Not Before: Oct 19 19:02:36 2025 GMT
Not After : Oct 20 19:02:36 2025 GMT
Subject: CN=5bbc1f3a2674bc59d49db1211abb409f7a74b842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:5c:50:0c:42:8d:19:7d:99:11:68:a0:70:
ee:e1:75:94:e3:fc:53:1a:94:5f:27:98:8f:1f:3a:
4a:37:39:db:3f:4f:00:14:94:af:c9:31:91:f1:6f:
44:03:2d:c2:84:a4:58:77:97:8f:fd:df:4b:c2:b9:
9f:98:ae:37:3c:52:3b:f3:0f:34:2a:28:1b:53:10:
e2:f8:7f:e5:d4:a9:fe:31:a7:45:df:e0:83:f9:6a:
e2:50:2a:30:3f:ba:8b:d8:22:8a:49:be:2a:8e:e4:
06:48:26:eb:80:c4:2e:5c:1c:d4:e8:7f:f6:df:07:
44:49:96:75:08:44:54:b2:d3:8e:bc:38:91:0a:db:
98:b4:7b:d0:10:9c:41:b3:e5:e6:10:ba:8d:9a:77:
69:d9:8f:e3:99:62:1a:26:d0:0c:49:d5:c3:b9:45:
e1:17:37:0c:fe:f7:0e:94:6e:b3:5f:d2:85:cd:b0:
42:2d:0b:e8:59:5e:3c:1e:7e:b4:43:08:3f:3f:eb:
f5:e7:c0:b4:0a:3c:4c:0c:1f:51:47:4d:13:4f:f2:
b4:f9:00:a3:fc:12:28:1d:65:af:91:38:2e:4f:1f:
41:0f:27:41:27:c6:21:6c:8d:df:e9:60:9a:73:c8:
80:12:90:1c:2c:33:ab:3e:b8:ba:61:ea:79:5d:ba:
44:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BC:1F:3A:26:74:BC:59:D4:9D:B1:21:1A:BB:40:9F:7A:74:B8:42
X509v3 Authority Key Identifier:
keyid:2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:41:01:ab:d9:21:a8:3d:3d:17:06:4f:15:49:f9:97:8e:18:
b4:9d:e7:9f:4a:1c:dd:b9:2b:64:90:a7:47:cd:7d:2d:63:f2:
33:d8:8a:9c:a4:bb:62:0e:31:2c:a0:8e:34:56:d1:bd:27:16:
a6:0a:ef:12:5b:93:45:f8:00:49:16:9d:21:a3:df:5f:0c:97:
dd:71:ad:d3:58:ab:f0:1e:25:e3:fb:68:54:1c:18:a0:ab:4e:
c8:90:a2:30:0a:93:93:1c:16:39:01:97:d9:b2:ba:ed:61:15:
d6:35:ef:d1:91:9f:a2:51:a4:f2:dd:af:bd:88:28:de:8b:36:
39:db:52:05:89:90:7a:34:dc:01:a1:e5:cd:30:87:b1:be:1b:
f7:51:a1:2f:76:13:eb:9c:9f:53:a8:fa:d0:89:a5:eb:69:7b:
a6:2c:b6:56:f9:f0:ff:4d:70:81:94:e2:ec:34:75:66:ab:07:
9f:5e:77:a1:db:dc:95:3e:a1:db:fd:54:57:9a:93:39:11:af:
a3:3a:29:7e:53:b8:c4:db:27:33:ae:55:d4:f4:3a:6b:1c:10:
5d:99:d7:47:09:d2:c7:e1:e3:bf:34:45:f9:79:05:77:e7:26:
73:7a:10:0b:62:6a:c7:bc:92:66:02:a5:c1:97:68:8c:3d:f0:
8c:b1:87:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:55 2025 by rpki-client