Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
File: K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft (raw, json)
Hash identifier: k3upwo/qifvPDroPqUisdreeyDF8dXkW6g0wAhdjGY0=
Subject key identifier: 75:B2:EA:7A:BA:64:82:A7:BA:5B:F1:CD:70:34:BA:A3:E9:F8:AB:E7
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Certificate issuer: /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial: 0199FC8FAB95AD683CA11652C064190E8312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 13:01:37 +0000
Manifest this update: Sun 19 Oct 2025 13:01:37 +0000
Manifest next update: Mon 20 Oct 2025 13:01:37 +0000
Files and hashes: 1: K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl (hash: 9IpKw7VqThKAaje/VJt3S8mp5PGt+8xALt2G1xkfGo4=)
2: ltvzPx25u1h6KtyLg3u0jcOaPlk.roa (hash: 2f6Jvjn6F1N/MtDAOcMnV3ci6bmbSvFKgzVpnpXVDh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:ab:95:ad:68:3c:a1:16:52:c0:64:19:0e:83:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Validity
Not Before: Oct 19 13:01:37 2025 GMT
Not After : Oct 20 13:01:37 2025 GMT
Subject: CN=75b2ea7aba6482a7ba5bf1cd7034baa3e9f8abe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:75:e8:b1:05:6d:c4:fb:a9:11:33:7f:b2:
14:f0:dd:66:e9:db:3f:0d:ad:4c:3d:98:cb:51:e1:
28:c1:b5:12:9c:b7:a0:a2:b8:c2:6d:5e:9b:f2:a8:
48:41:cb:3a:a4:37:c7:b9:18:5a:84:76:49:e1:e1:
a2:b4:d9:0a:ac:97:4e:8e:0b:82:01:b8:74:7a:72:
e1:cf:d3:c2:50:77:4e:56:43:44:ff:a6:1b:95:95:
3d:23:c7:72:c9:61:c4:d7:1b:82:a1:91:df:57:cc:
6b:2e:6c:f6:b1:c9:1c:82:cc:66:e1:93:43:93:7b:
4b:eb:f7:16:44:d2:a0:ab:6d:58:c6:c8:ba:12:28:
d0:5f:69:3f:4e:a9:7d:06:5c:2b:67:16:3c:05:1b:
fd:e9:01:56:c7:c9:64:31:29:f0:28:c3:9c:78:09:
11:2a:f2:c5:ac:55:68:18:c5:8f:74:f9:52:75:a8:
44:39:cc:92:88:7f:da:74:0f:be:bf:0e:76:66:ff:
51:47:d3:1d:ca:1a:9c:79:67:8c:81:8a:93:2c:db:
fc:39:66:b5:39:07:6c:2c:68:7b:18:d1:b9:8d:0a:
38:4f:c0:ec:93:0f:a2:db:f3:82:05:3d:05:cd:29:
a8:e7:39:ac:d2:1b:d9:ec:cf:85:20:aa:74:fe:ee:
d6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B2:EA:7A:BA:64:82:A7:BA:5B:F1:CD:70:34:BA:A3:E9:F8:AB:E7
X509v3 Authority Key Identifier:
keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:03:f8:e6:c4:89:a7:8f:a4:b6:34:09:60:0c:ae:6d:67:2a:
22:4b:92:90:8b:2f:11:88:e8:9d:b8:eb:d8:cd:54:f2:37:7e:
39:12:88:2f:2c:c3:8b:a0:d8:fc:4f:d1:81:26:0e:15:73:91:
e2:18:5b:8a:ce:a1:57:dd:69:7d:cf:c0:b6:e6:e2:8f:0d:35:
d1:4c:88:38:47:ad:e9:f7:96:b2:b9:b7:91:22:13:2f:c2:4d:
e4:42:73:1e:11:b7:c6:50:85:d7:89:62:32:eb:61:65:ed:b6:
35:d1:15:c8:f3:73:7c:27:5c:24:ba:df:b0:7e:6e:66:bc:85:
81:ad:2d:4b:33:89:b3:cf:58:cb:51:e4:00:50:05:8d:9f:01:
f7:17:83:ab:3e:22:e2:c9:b7:de:aa:6b:2d:c7:fc:f8:b3:45:
76:e9:52:31:b0:23:5e:3a:a2:58:7e:fc:81:fe:fa:fe:de:a6:
9a:b2:16:88:d2:e9:13:71:24:4c:8f:20:11:24:ba:6a:17:70:
dc:dd:d3:78:4b:4a:42:34:a4:5a:92:a7:49:c3:e8:1a:6f:02:
72:74:f7:79:5e:43:aa:ee:0e:8d:12:09:e2:4c:88:ec:de:47:
8f:76:1d:5b:f3:91:70:e6:5a:df:63:e5:7d:61:6d:ba:84:3c:
f9:41:a6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:23 2025 by rpki-client