Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
File: K2s1AF0wIoBENtctw8nIZc-qoAM.mft (raw, json)
Hash identifier: cZwUeWdEtXXFKE9INZb+eGXgIfqzZf07t9CGbkh3oFE=
Subject key identifier: 38:B7:1E:1B:22:5D:ED:B8:DF:CA:66:86:1A:05:04:16:2B:91:81:4C
Authority key identifier: 2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03
Certificate issuer: /CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
Certificate serial: 019A003581F32E7F3F3843AEF02C70225DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
Manifest number: 0C0F
Signing time: Mon 20 Oct 2025 06:01:37 +0000
Manifest this update: Mon 20 Oct 2025 06:01:37 +0000
Manifest next update: Tue 21 Oct 2025 06:01:37 +0000
Files and hashes: 1: K2s1AF0wIoBENtctw8nIZc-qoAM.crl (hash: B+IsB8IPxUnkNB7t39c6N4H4p8W1EAYHTULVuftZp2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:81:f3:2e:7f:3f:38:43:ae:f0:2c:70:22:5d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
Validity
Not Before: Oct 20 06:01:37 2025 GMT
Not After : Oct 21 06:01:37 2025 GMT
Subject: CN=38b71e1b225dedb8dfca66861a0504162b91814c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:c8:c0:85:72:c4:ba:df:46:15:f6:66:4b:
2d:f5:0f:df:0e:90:ad:31:35:ca:39:e7:f9:1d:52:
fc:25:08:85:67:38:f3:d8:d7:9f:82:0d:d9:94:de:
32:ce:62:87:c1:01:6c:6a:f9:98:9b:cb:13:3d:d1:
86:26:66:b6:79:d3:7f:ed:c8:68:fc:a8:cc:f1:e0:
b3:17:dd:8d:89:56:b0:af:8b:4b:56:55:b0:b3:5d:
87:08:a2:0a:22:21:36:d6:37:ac:ee:23:9d:27:c5:
21:92:39:42:21:a9:f0:3f:ef:07:e6:fd:b2:11:ee:
c4:d2:b5:43:76:9c:0c:77:e5:4b:d2:89:13:7a:89:
33:6e:df:e4:2d:8b:1d:8b:8b:00:9b:6e:a4:f4:da:
74:01:5a:79:24:35:70:98:37:3c:1a:01:cf:18:c5:
0a:d2:f0:ef:7f:fb:65:25:32:f9:6b:5e:85:11:43:
cb:4d:85:c1:2d:48:c2:2f:d1:40:1d:86:88:3c:27:
b8:15:be:ef:4b:0f:9c:b7:42:5e:79:60:5b:df:e9:
15:43:c7:e2:74:a3:85:71:06:d6:c9:84:93:c0:79:
4d:b0:1a:35:73:5b:3b:cf:f8:00:8a:e5:ca:67:37:
ac:27:32:f3:1e:5b:ec:c7:23:89:aa:ef:7c:2f:9d:
e7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B7:1E:1B:22:5D:ED:B8:DF:CA:66:86:1A:05:04:16:2B:91:81:4C
X509v3 Authority Key Identifier:
keyid:2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a4:a9:9c:81:d3:89:88:88:93:8f:e5:eb:4a:ef:3e:aa:46:
ca:7e:24:60:6d:0d:c1:2a:ef:59:8d:5e:7a:4a:12:3a:d4:b2:
19:53:71:9e:7d:cf:3c:ca:0c:1e:44:b5:b0:ec:a6:f9:e6:da:
d3:46:d1:16:98:02:9d:d2:8e:17:43:aa:47:df:43:80:68:75:
7c:f5:f5:b9:7d:70:1a:8f:d2:c6:de:d7:3a:bd:2d:37:36:f8:
54:59:96:5e:97:38:a3:6c:75:4b:d0:89:49:b6:e4:0f:61:c6:
67:4a:38:b1:e6:e5:38:06:83:aa:54:73:3c:8f:a0:b2:23:00:
e8:2b:5b:d1:fc:12:5f:3e:e7:db:6a:a0:fb:1e:f2:84:5a:ce:
29:c2:0b:2a:8c:c6:19:bd:5b:4e:4d:da:5a:12:ad:3d:d1:bd:
d9:d7:a8:2c:53:4f:ef:cb:7f:3b:43:b1:31:04:84:e7:46:78:
b1:12:c4:d8:60:60:63:5c:80:66:f9:a6:e8:2f:75:d9:6a:60:
04:5f:a2:35:7f:3e:cd:28:7d:37:f7:70:79:3e:09:00:5d:56:
5c:89:4e:27:58:66:04:ae:d1:83:9a:3d:d6:a3:67:a0:9a:76:
b4:26:64:40:8f:38:d4:29:41:d8:95:ca:80:89:14:e0:0f:cb:
80:60:bf:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:10:41 2025 by rpki-client