Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
File: k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft (raw, json)
Hash identifier: Jo+9/ZEZKHGeJWEsN5nH4FNofNy6c8qrg4L+nbmvykQ=
Subject key identifier: 1F:58:65:A8:8D:3F:D3:33:F6:88:4B:72:8E:83:70:F3:5C:F8:8C:72
Authority key identifier: 93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
Certificate issuer: /CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Certificate serial: 0199FCFD39E712AA5F1966734E4BDE896BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
Manifest number: 0E7F
Signing time: Sun 19 Oct 2025 15:01:17 +0000
Manifest this update: Sun 19 Oct 2025 15:01:17 +0000
Manifest next update: Mon 20 Oct 2025 15:01:17 +0000
Files and hashes: 1: 2yeHS0iIkuHn83Pc5-EplLHcCYQ.roa (hash: kf8JlgWiWlnh6iS3QRDgrcCIPaCediQ682Z+VnmyMJ0=)
2: k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl (hash: nz1FyXvl7r4yOrYABJdrCHPP2mQzcDrauGSdh3WpAdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:39:e7:12:aa:5f:19:66:73:4e:4b:de:89:6b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Validity
Not Before: Oct 19 15:01:17 2025 GMT
Not After : Oct 20 15:01:17 2025 GMT
Subject: CN=1f5865a88d3fd333f6884b728e8370f35cf88c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:52:84:c5:e9:5c:9e:37:aa:68:dc:94:a4:88:
98:eb:f8:4f:b0:47:72:68:53:d8:d2:9a:9e:a3:66:
8a:28:6f:f2:a2:53:05:66:f1:03:49:f7:cd:92:ea:
b2:ee:db:8f:d0:0c:da:12:38:96:df:79:f6:d9:8a:
9d:34:9c:da:f9:75:b7:db:03:a1:ec:c6:20:e2:c5:
57:22:a9:1d:ff:f7:fe:ee:5e:09:72:2d:15:47:6a:
c1:65:d0:96:5a:1e:4e:bb:a8:cb:84:4d:0e:5f:49:
bd:6c:52:94:30:cb:28:3d:43:05:33:b5:bc:46:fc:
ed:ef:2e:5b:8e:6d:9d:3a:66:cb:bf:f1:cb:f9:03:
8e:79:18:48:d5:cf:fd:46:46:7b:77:62:cb:e9:db:
8f:d0:87:97:2c:af:42:2c:79:12:72:8f:c3:d0:bc:
34:eb:20:fc:f5:e9:24:63:b9:4b:03:70:ae:80:8b:
33:77:a7:e7:82:66:06:55:b4:2e:f9:f3:80:63:28:
5d:e9:b9:91:6c:b2:6a:c3:98:d6:88:e1:e1:f1:99:
80:7a:d3:6c:0f:19:a2:68:21:f0:5b:63:60:74:72:
78:70:12:c0:6a:83:7f:85:e7:92:17:d4:4b:d1:9d:
55:9d:fd:b2:8e:87:94:ca:ec:aa:f9:20:6b:55:fd:
ab:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:58:65:A8:8D:3F:D3:33:F6:88:4B:72:8E:83:70:F3:5C:F8:8C:72
X509v3 Authority Key Identifier:
keyid:93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6e:a7:81:f2:6f:e5:6a:09:cc:91:53:6a:75:4e:e0:c5:48:
c4:fc:b7:2b:ff:8a:bb:69:0e:00:ec:f8:0a:b9:e7:45:e2:08:
7e:b0:a8:96:02:e1:5b:9c:fd:c9:b1:57:fe:0b:55:2f:fd:34:
f5:97:8d:b8:3c:6e:2e:e9:0a:95:b4:12:22:d7:63:30:21:76:
4a:ff:55:26:dd:07:ba:56:ab:fa:d6:97:a5:36:41:c7:ba:5d:
95:81:fd:fb:8b:f4:cd:5f:c6:f4:25:e1:fe:ca:36:a8:03:ec:
1a:ea:b9:b2:af:31:e5:d1:53:bb:12:3d:6c:81:61:9f:e7:e9:
c7:f1:8b:fa:46:bf:34:ef:66:5c:c9:21:06:ec:27:cb:a2:08:
b2:82:f6:5e:98:18:84:1e:29:ea:9f:24:61:70:f1:33:21:8d:
b7:dc:b8:a1:54:2d:4f:83:46:1c:28:f0:71:a4:9e:26:64:db:
40:47:b7:c2:b7:34:b4:1d:cd:95:08:8e:d2:b1:27:91:1b:78:
f5:e2:ae:f4:52:b1:92:96:df:35:05:8d:67:b7:58:79:cd:c6:
dd:6c:a2:5d:03:bc:86:df:be:06:7f:b4:17:48:e6:10:98:35:
ec:53:8e:b1:c7:f4:e5:ce:d6:94:b2:ea:55:19:50:a1:4d:a5:
01:07:46:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:07 2025 by rpki-client