Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
File: k2BVYMsfU9aYunp4WwLySOoqLHs.mft (raw, json)
Hash identifier: dCybDWwbBSDXXEjYM7CF8bdaRCEbPXknJD2BT+M5cFM=
Subject key identifier: ED:7E:58:0E:1B:93:0D:4D:1B:3E:4E:72:55:FF:C2:51:07:6F:01:A4
Authority key identifier: 93:60:55:60:CB:1F:53:D6:98:BA:7A:78:5B:02:F2:48:EA:2A:2C:7B
Certificate issuer: /CN=93605560cb1f53d698ba7a785b02f248ea2a2c7b
Certificate serial: 0199FB45E7601C387F745F9141B427E8DD5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
Manifest number: 149D
Signing time: Sun 19 Oct 2025 07:01:26 +0000
Manifest this update: Sun 19 Oct 2025 07:01:26 +0000
Manifest next update: Mon 20 Oct 2025 07:01:26 +0000
Files and hashes: 1: k2BVYMsfU9aYunp4WwLySOoqLHs.crl (hash: d4PrRcgG1ki7xP1QtfJ8/zc0cn32xSYcCyEcwxcSA4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:e7:60:1c:38:7f:74:5f:91:41:b4:27:e8:dd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93605560cb1f53d698ba7a785b02f248ea2a2c7b
Validity
Not Before: Oct 19 07:01:26 2025 GMT
Not After : Oct 20 07:01:26 2025 GMT
Subject: CN=ed7e580e1b930d4d1b3e4e7255ffc251076f01a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e2:70:6f:4b:58:94:10:54:af:37:3a:ce:ff:
31:b0:99:91:4c:81:09:d3:0a:a9:d8:88:9d:65:46:
8b:a4:31:29:65:d1:0d:7e:ce:08:9c:23:b8:5e:6d:
a5:d8:7c:38:4d:eb:b9:bf:3c:6f:4a:95:55:e8:dd:
31:6e:4c:03:43:20:ca:fd:d0:26:a2:e6:38:36:12:
75:5b:27:b6:d7:15:5d:21:94:3d:1b:48:f0:e8:f6:
ec:4f:67:90:40:6d:97:91:65:91:ef:77:49:b1:26:
a4:51:b9:df:82:4d:e1:af:75:8e:df:c5:d6:e6:85:
a8:a5:b9:1d:dc:ee:03:da:c9:22:93:a0:37:f8:38:
a5:e7:95:dd:e8:f8:69:75:e7:9f:68:40:6f:e9:10:
94:0d:d1:ec:5a:00:e6:ca:3d:14:41:92:17:8f:2a:
f3:b3:85:01:7f:5c:3f:f9:06:de:6c:92:7b:c3:aa:
46:8d:03:c2:a9:7b:9a:dd:f6:e5:7d:b2:de:c7:62:
d2:ac:2f:a8:55:94:78:bd:43:70:1f:ec:26:07:0c:
bf:34:85:8c:39:03:e8:bd:10:91:98:35:82:a3:2a:
43:e8:1c:ee:b6:5e:a4:d3:00:d7:14:55:07:74:ac:
28:cc:be:26:b1:0b:9d:cc:4a:b0:af:4e:9e:77:ba:
68:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7E:58:0E:1B:93:0D:4D:1B:3E:4E:72:55:FF:C2:51:07:6F:01:A4
X509v3 Authority Key Identifier:
keyid:93:60:55:60:CB:1F:53:D6:98:BA:7A:78:5B:02:F2:48:EA:2A:2C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:89:bf:53:47:f9:a0:1f:de:c3:bc:32:f1:75:a3:ce:a2:2a:
6c:6f:a7:14:e2:83:e5:1e:4b:4e:6f:8d:c4:67:7f:88:c7:cb:
24:4b:93:7d:d1:5b:d0:6e:2a:cc:2e:ed:08:e8:de:a1:90:d1:
c4:09:5d:d2:e2:7a:19:d1:0d:ca:84:56:01:42:03:ce:04:de:
7f:c5:0b:c2:cd:78:19:ee:05:01:90:ae:45:7c:d8:12:10:f4:
bd:68:eb:30:b9:2a:f3:97:a8:93:ab:35:6d:32:5c:16:56:9d:
7c:13:83:2f:8c:88:1b:aa:b3:0c:94:36:5d:9e:bf:50:2b:80:
de:44:2a:87:87:d0:9d:c1:0d:60:57:d0:08:eb:8a:98:ac:e6:
40:91:6b:bd:b5:e4:e5:6e:01:2b:7b:13:cc:2b:39:bc:ae:57:
4c:05:f1:e9:9c:8a:4c:2c:c6:b9:2d:7f:b5:96:f9:2c:02:10:
da:b1:1d:c4:ea:85:2b:40:36:40:0b:ee:a6:e6:77:49:6b:5b:
e1:c7:19:b4:f7:03:43:64:17:f8:29:ea:5a:6b:ce:a5:39:7c:
7b:7b:50:04:55:a6:81:a8:5c:7a:be:ca:c3:27:34:97:f8:4e:
00:1f:f6:31:2a:10:34:59:6c:a4:a3:7e:1d:98:cb:91:40:56:
47:49:09:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:20 2025 by rpki-client