Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
File: K87k2VI_FSkcV2df0m3JUKfNVVA.mft (raw, json)
Hash identifier: dU7TdDAQblLap00Hy1cYJXZVRrbfgS5sljuyP4Hn07M=
Subject key identifier: D3:33:1F:86:E8:D2:79:50:90:31:F6:24:75:80:B6:CB:AF:3B:9A:4A
Authority key identifier: 2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50
Certificate issuer: /CN=2bcee4d9523f15291c57675fd26dc950a7cd5550
Certificate serial: 0199FCFDA6478953E8CC62240EF9F5E7B3A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 15:01:45 +0000
Manifest this update: Sun 19 Oct 2025 15:01:45 +0000
Manifest next update: Mon 20 Oct 2025 15:01:45 +0000
Files and hashes: 1: K87k2VI_FSkcV2df0m3JUKfNVVA.crl (hash: scmJ452v2sxKdRUMc+FCNQObbQs4cT4wvIjmMN7bcKc=)
2: pxqHr4sai6w4MscZayNHP7SOQ7U.roa (hash: ixQj9fChzVhStwA3xD3Awi6hHSqhUCeXJMrkMLmnies=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a6:47:89:53:e8:cc:62:24:0e:f9:f5:e7:b3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bcee4d9523f15291c57675fd26dc950a7cd5550
Validity
Not Before: Oct 19 15:01:45 2025 GMT
Not After : Oct 20 15:01:45 2025 GMT
Subject: CN=d3331f86e8d279509031f6247580b6cbaf3b9a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:60:06:1e:50:c1:1f:f7:fa:d2:26:05:d9:
60:5e:b6:45:eb:06:73:54:9e:f4:80:6c:55:52:e1:
48:4a:f3:58:6f:f6:bb:86:18:0e:df:ca:11:df:89:
0f:f8:3a:c1:fd:c3:2b:ec:f0:7e:ae:15:e7:e1:4f:
4d:60:77:eb:5c:da:b9:ab:7f:9b:ae:76:a1:96:1c:
0c:19:ab:7a:a0:4d:78:d1:97:62:f0:c7:32:85:d8:
81:9b:a2:c7:b9:bd:f6:19:07:94:cb:34:18:44:ec:
54:2f:e6:94:e6:0f:fd:1f:65:7b:38:32:e6:0b:ad:
fe:71:f9:36:09:e1:93:44:e2:f1:32:70:01:19:9d:
a4:32:2c:f9:13:65:f2:aa:a2:81:b8:a7:16:fc:59:
b4:71:53:ae:40:4c:d3:c7:8a:4f:e8:1f:d1:46:0e:
73:4a:25:a5:dc:33:ab:f2:bb:5a:de:a6:4a:55:44:
75:6c:44:94:aa:4a:27:70:c2:2b:e8:07:54:1a:ad:
3b:0f:55:27:03:7d:7f:0e:d1:e5:d8:b7:21:df:4d:
e8:6f:54:cd:cf:77:98:6b:31:d3:7d:9e:61:70:d4:
ae:25:27:22:92:e4:23:49:1c:af:c9:84:bd:96:9d:
d8:b6:3e:32:51:64:83:f7:f8:80:c9:ed:38:69:e2:
3b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:33:1F:86:E8:D2:79:50:90:31:F6:24:75:80:B6:CB:AF:3B:9A:4A
X509v3 Authority Key Identifier:
keyid:2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c4:88:c8:17:e8:ef:03:58:43:c3:ad:33:13:67:28:0c:c1:
6c:60:30:e4:60:f9:8a:be:9c:80:f3:fa:22:9a:c3:d4:86:6e:
b6:9c:e7:0a:f2:ff:3f:eb:34:e0:b5:30:55:46:8f:38:44:de:
57:0f:a2:06:e7:61:f4:f4:02:32:dd:03:30:f7:6f:d1:67:de:
d9:65:ab:35:ce:eb:51:f4:1d:d4:a5:d6:1d:50:07:08:24:24:
5e:21:b2:e5:93:a4:9b:54:aa:4e:10:a6:4a:de:0c:3b:8c:8d:
28:07:04:e9:06:7c:ac:bb:dd:61:41:bf:c3:94:84:23:62:1c:
17:3a:56:76:2e:25:37:0e:2a:c4:2a:b1:77:77:f0:15:17:9d:
9b:d9:66:4d:1d:3e:b9:c6:c3:51:85:61:00:3f:41:07:29:4c:
18:69:fb:c2:63:4e:b1:b5:79:82:1e:ca:e5:c1:20:bf:00:1b:
3b:3d:d1:0b:ce:5c:c8:e0:47:94:79:26:3f:58:f8:ee:25:10:
0e:0c:ee:69:7e:c4:57:23:74:9d:0a:35:8a:d4:50:53:ed:be:
5a:4a:20:02:9b:e3:2d:38:81:8a:ef:b3:50:6e:19:ed:d3:d6:
f1:dd:8f:b9:82:01:48:44:ab:4d:45:45:da:c5:16:0d:7a:f6:
81:4d:39:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:16 2025 by rpki-client