Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
File: K76x-Fza0UW9L5et3QlB0y11jec.mft (raw, json)
Hash identifier: lG+tdr2kbHF+PYVAiVRDPBBq8ggRcQ7WkM5sEM37Qmo=
Subject key identifier: 68:8F:87:B9:F9:3B:07:9E:45:F6:1A:9B:9F:0B:C1:64:A3:9D:12:04
Authority key identifier: 2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
Certificate issuer: /CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Certificate serial: 0199FFC7AC67BB8519E94155F64972FFBBFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
Manifest number: 044A
Signing time: Mon 20 Oct 2025 04:01:39 +0000
Manifest this update: Mon 20 Oct 2025 04:01:39 +0000
Manifest next update: Tue 21 Oct 2025 04:01:39 +0000
Files and hashes: 1: 8Zt8UHUusx_XQrfwEnBO0zgttVQ.roa (hash: 99GtToN6lghv1t5UehgYXJgLt9TbyulNLZ07g/FzqO4=)
2: K76x-Fza0UW9L5et3QlB0y11jec.crl (hash: 5EdNjxgtBw4qznpW3F2icR9tgP4tZvCKmfuiYEJUCpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:ac:67:bb:85:19:e9:41:55:f6:49:72:ff:bb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Validity
Not Before: Oct 20 04:01:39 2025 GMT
Not After : Oct 21 04:01:39 2025 GMT
Subject: CN=688f87b9f93b079e45f61a9b9f0bc164a39d1204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:87:f2:ee:5f:d9:8c:36:26:07:b8:1a:be:
7e:d7:ec:74:38:38:0f:a4:fc:23:d4:4e:6e:16:33:
25:61:ed:b0:ef:61:02:e5:9d:47:16:ca:ea:ea:ba:
62:f6:e6:1a:3a:36:b7:33:54:76:e1:f8:9c:10:86:
81:69:6c:81:04:60:b9:6e:90:05:6b:b0:56:f8:5b:
ec:b6:67:7b:62:e1:49:1c:9b:e0:5f:c3:e4:a8:f4:
83:19:75:04:a2:e9:89:70:70:05:cf:3e:46:55:44:
b5:43:53:4b:bb:b5:7f:8b:3e:15:de:68:ec:c5:93:
46:d2:04:0c:2d:0c:0a:7e:46:ac:a0:d0:4b:e4:2e:
09:25:3c:ca:95:e6:f8:53:99:26:c1:16:54:2b:0e:
fc:f7:b1:8c:73:f3:d5:36:b2:ac:30:76:40:59:72:
cc:79:de:18:96:3e:e6:ed:92:ea:ba:8c:7d:4a:15:
e9:4d:bf:67:2d:34:d1:f6:43:08:79:95:69:af:bc:
ad:5b:ff:90:d4:a0:e4:6d:0f:c4:88:55:fb:3d:9f:
b8:20:74:4d:26:48:c0:04:88:7e:80:31:49:48:67:
4f:4c:99:4f:4c:13:f5:bc:62:f9:95:a8:04:36:62:
41:14:20:a2:16:53:dc:83:65:25:2f:db:be:17:58:
c2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8F:87:B9:F9:3B:07:9E:45:F6:1A:9B:9F:0B:C1:64:A3:9D:12:04
X509v3 Authority Key Identifier:
keyid:2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b1:f5:fc:f4:27:db:25:78:73:40:0b:ac:3d:cb:64:f1:b6:
a5:c0:a3:af:e6:91:74:02:7a:a7:d1:bb:01:98:9d:72:59:cd:
f8:a3:a0:1b:16:11:c4:a1:3c:05:ec:3b:56:b5:1d:84:ca:c8:
05:77:3a:73:3c:48:23:68:f2:0d:e7:1d:52:5d:93:3c:ba:e8:
e7:2b:70:7e:ee:aa:d8:df:5c:d8:4c:3e:c1:94:9d:a6:de:a8:
35:fa:76:60:e7:b2:9d:7c:56:78:7b:eb:ca:71:fb:47:40:8d:
54:9f:7c:d1:fc:c4:02:89:c0:c7:00:49:9a:9f:d2:07:e9:46:
9b:bb:8e:10:19:b6:d4:f0:94:92:bd:b1:9f:56:a5:92:21:dc:
6e:3a:2d:c2:ee:cf:15:6b:a4:79:73:48:37:93:fe:f3:70:29:
30:47:2e:54:a6:63:ea:d9:4e:eb:f3:75:e8:43:8d:44:6e:9e:
95:4a:9f:de:43:61:38:47:43:7f:75:fd:10:15:96:26:e2:69:
28:7a:de:4d:d6:66:06:eb:7d:7e:e3:fa:f5:22:09:e9:ea:01:
2d:ab:07:75:89:07:7f:43:b6:25:94:c4:98:09:4b:0b:fb:ea:
98:79:19:41:49:56:9e:07:78:d2:1f:21:11:a2:f3:ef:82:83:
88:51:f9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:15:44 2025 by rpki-client