Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
File: K2nm32CJ1NhhNocX6mbnthbHkMk.mft (raw, json)
Hash identifier: N/pg+/Bz/YdsHs+QvS57UWZrwsMBsUX1m30ux8Q4zHc=
Subject key identifier: 04:FE:B4:1D:75:64:75:BE:4A:14:5B:56:54:92:D6:44:E3:FA:34:55
Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Certificate serial: 0199FEEB8634E05082963619B818CD2EEC8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
Manifest number: 02B3
Signing time: Mon 20 Oct 2025 00:01:12 +0000
Manifest this update: Mon 20 Oct 2025 00:01:12 +0000
Manifest next update: Tue 21 Oct 2025 00:01:12 +0000
Files and hashes: 1: K2nm32CJ1NhhNocX6mbnthbHkMk.crl (hash: lc4D8WV+6Q5gJQl0OB+Sw34PYQ7XYHxEMYTdURzzYlk=)
2: k228-bewHScQpnRNpC4KIJkr3eY.roa (hash: MBjyb6nNGhWgH6/ZgxXCpJnqP9qVdkiHuZvRP3PD2BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:86:34:e0:50:82:96:36:19:b8:18:cd:2e:ec:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Validity
Not Before: Oct 20 00:01:12 2025 GMT
Not After : Oct 21 00:01:12 2025 GMT
Subject: CN=04feb41d756475be4a145b565492d644e3fa3455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:c5:bf:4e:3d:ae:42:a8:f7:17:93:65:9e:
2d:d5:89:a7:50:6e:49:31:91:df:07:f3:19:54:f6:
e8:38:b8:df:cb:0c:5d:26:f2:86:12:bf:7c:f6:28:
66:a7:b2:90:93:22:9d:37:cf:f1:1d:cb:fd:de:fb:
08:87:03:e9:2f:7f:84:f0:96:d3:6c:88:3d:33:92:
ea:a2:96:fb:6c:ec:2c:86:9d:c4:46:eb:d9:ba:c1:
52:fa:0e:5c:48:50:7a:ce:41:37:fd:3d:a5:8d:de:
24:67:07:c3:ab:92:1b:9b:40:fc:33:92:18:9f:fd:
0c:3a:ed:b4:16:00:63:5d:dd:62:68:a5:85:be:f7:
1c:e3:92:dd:11:0a:d7:a4:38:71:24:3d:d2:85:9b:
77:5a:31:92:6a:3c:b6:ee:c4:81:f1:f5:81:c8:9f:
bc:ad:3a:96:aa:f1:a9:41:08:19:eb:e2:a6:c7:d5:
6d:ca:d0:27:80:b2:be:34:68:82:a2:3d:93:1a:bf:
5b:3d:19:e1:fa:21:58:eb:01:b4:ae:b2:45:47:a8:
f7:e3:34:4d:8f:ed:d7:4b:20:11:26:66:4c:d1:4e:
80:45:1e:a3:79:5d:af:27:4b:ee:55:53:bc:fe:7e:
b8:a6:b7:35:c6:85:d6:c7:b8:d7:f0:5f:6a:31:ce:
41:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FE:B4:1D:75:64:75:BE:4A:14:5B:56:54:92:D6:44:E3:FA:34:55
X509v3 Authority Key Identifier:
keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:30:e6:8f:0c:3e:15:b6:f6:7a:11:eb:f6:87:d7:c2:95:56:
2d:30:c7:68:e8:7c:53:91:54:a4:38:d0:ca:58:8a:d8:f6:38:
c0:e2:b3:95:ed:6d:82:9a:69:40:03:44:62:ed:9c:14:df:a8:
26:a1:08:a3:d7:9a:12:28:80:25:46:36:19:86:ec:ab:67:d4:
cb:24:87:83:83:bb:f8:c1:f4:99:52:c3:25:56:8d:ce:c8:3e:
fe:22:4a:df:52:2b:85:44:60:8d:9f:41:33:94:d4:20:62:62:
ea:d5:11:cc:2d:96:c4:35:05:f8:3a:5f:db:6d:ef:68:9e:35:
e3:c0:82:61:de:68:8b:b7:d8:dd:10:89:10:77:c6:4f:fc:4f:
b3:54:c2:e2:8f:e0:ff:51:ad:9c:00:23:97:37:92:38:3d:df:
fa:f0:71:0f:5d:3f:a8:ab:05:3c:80:c1:5b:83:4c:8b:28:3c:
fa:d8:1e:74:78:88:b1:ca:5c:f1:a3:f3:a2:1a:59:fe:2d:4b:
ad:e3:63:6c:f3:5b:5d:5a:1f:72:db:8a:64:bd:fb:cc:58:0d:
67:3b:00:f5:ba:29:80:ea:54:c2:42:b2:2e:91:fe:91:b2:c0:
56:44:7b:db:44:8a:b9:5f:3b:94:3d:2c:c2:f7:56:54:37:2d:
a8:c3:29:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:07 2025 by rpki-client