Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
File: K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json)
Hash identifier: sBEwdzxk7ZIwueJI9dHaOPekmjrcHidW/6xKS9enH50=
Subject key identifier: 41:31:BD:75:F4:5B:AB:0D:D3:CD:03:FB:3C:8C:52:BE:03:17:81:2B
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial: 0199FBB37138D4AF4BE4BD83CA3A175AA6A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
Manifest number: 0AFA
Signing time: Sun 19 Oct 2025 09:01:05 +0000
Manifest this update: Sun 19 Oct 2025 09:01:05 +0000
Manifest next update: Mon 20 Oct 2025 09:01:05 +0000
Files and hashes: 1: 553lKMIKwThYw8AISbuyrXf1Y3Y.roa (hash: nZE4YzzK77LLVsV2aH36whqra+m62dlwzfCf/rC05r0=)
2: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: 6raoR1sVA00SHs9k+W9GHXwvXlGEkFSm6HzCMvnZycY=)
3: TzLZprRfeCh-Gvmzs5DuhB2A4E4.roa (hash: yX71+JwnuGNFxVBhBEfM6BQUby7eWkoWKbcUG9ykDEE=)
4: eAJf1shLltuAdbTmGWti91t3LTg.roa (hash: 8/RHu353a+jymfpXxCoIOn3xjWTjYdrxghHFteMflfs=)
5: gtgQ_ekA3bJACMevsOtUHfK0VcE.roa (hash: zrHM5OvfHbRJdC+cVcDeqn1NqWi0xhX/yY641YqUbM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:71:38:d4:af:4b:e4:bd:83:ca:3a:17:5a:a6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Validity
Not Before: Oct 19 09:01:05 2025 GMT
Not After : Oct 20 09:01:05 2025 GMT
Subject: CN=4131bd75f45bab0dd3cd03fb3c8c52be0317812b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7a:ed:7d:82:df:06:5a:61:79:1a:fa:90:bd:
22:91:29:41:eb:9e:c1:4a:c1:09:cc:1c:71:6b:04:
fd:e6:08:36:84:b9:29:de:76:32:0c:6c:8e:ed:29:
ca:c8:b6:06:1c:19:e1:fc:d3:9f:f3:a2:43:51:0a:
94:a8:98:2f:06:83:ad:43:9c:7d:88:04:3f:61:bb:
9c:02:43:a7:b8:9e:48:30:ba:82:17:3d:65:7a:6d:
13:17:a6:0a:b6:60:76:e0:a5:af:29:fa:20:b0:9b:
a4:2a:de:bf:09:f9:6f:2d:a9:14:ba:2e:aa:c8:72:
88:16:a1:5c:f0:c6:8f:0c:da:94:3b:9b:39:cc:28:
09:fd:15:07:af:fe:c4:37:55:59:e6:b0:2c:c7:1b:
ee:0e:3f:54:ec:b1:c0:7c:8e:dc:a9:b1:d8:7c:58:
0b:27:79:b8:c8:15:27:65:86:53:10:fa:73:dc:00:
33:b0:50:39:1b:f2:a4:88:f1:31:fa:3c:d2:99:64:
5a:a1:7c:18:82:e0:5e:f7:8a:09:e7:2a:cf:b8:be:
27:e0:15:fc:ce:7f:cb:52:83:46:6d:04:45:48:27:
40:ab:4f:f2:6f:29:92:9c:9f:04:e0:92:1f:29:eb:
b0:74:b1:f7:af:b6:cc:b2:06:99:d1:0d:72:c7:ff:
d0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:31:BD:75:F4:5B:AB:0D:D3:CD:03:FB:3C:8C:52:BE:03:17:81:2B
X509v3 Authority Key Identifier:
keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:86:d6:57:fa:e0:9c:22:b9:0f:9d:1f:6d:74:d4:a4:d6:ae:
a1:b6:c1:1c:9a:fc:e9:e3:90:0a:cf:b9:a6:f0:da:a6:19:b1:
88:1e:8a:0f:49:9a:85:e8:cd:bb:fc:7b:2b:a8:d5:1d:56:68:
f3:38:07:e0:7d:e9:0a:c3:e2:44:36:b8:3a:6f:6b:d7:ef:e2:
b5:6b:41:87:cc:d4:dd:4c:d6:97:76:8c:01:50:42:12:d7:69:
c3:14:68:8f:28:26:a9:95:81:04:23:98:49:d2:80:ce:3f:50:
ab:6f:84:86:eb:57:0f:c9:b5:bb:b1:75:fd:11:9a:73:66:ad:
1f:31:fb:48:0c:a2:a1:5a:93:3c:7a:4a:29:da:4e:3f:69:03:
b1:34:dd:46:65:02:32:a7:ff:3b:c1:6b:65:66:1f:86:e9:d5:
b3:f0:f6:60:0f:4c:6d:43:c8:2d:c4:b8:81:15:1c:7d:c6:69:
08:42:1e:1c:68:95:3c:7d:97:b6:3c:e2:a8:b9:98:f2:5a:e2:
0c:4c:12:5a:1f:00:a1:ec:a3:ff:c4:02:b4:4c:4a:72:b1:1a:
78:91:29:10:3b:10:a6:4d:26:e9:56:75:99:e6:69:86:4e:d7:
ac:5f:8a:2e:28:ff:96:ad:3c:97:bb:32:36:dd:4d:2e:32:ae:
81:e0:da:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:25 2025 by rpki-client