Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
File: K0lf5W80diAmqUA18yDwqQt6JWY.mft (raw, json)
Hash identifier: LVT2dF1L3meoG2kDdX9Km80B0CzwWm2o1gHq/EtFQJ4=
Subject key identifier: FB:D5:C3:A6:B4:D6:19:5C:47:4C:45:25:A3:6F:B6:EC:06:DD:26:EA
Authority key identifier: 2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
Certificate issuer: /CN=2b495fe56f34762026a94035f320f0a90b7a2566
Certificate serial: 0199FD3428007DDA4E722D7983F1AF4FFCFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 16:01:17 +0000
Manifest this update: Sun 19 Oct 2025 16:01:17 +0000
Manifest next update: Mon 20 Oct 2025 16:01:17 +0000
Files and hashes: 1: K0lf5W80diAmqUA18yDwqQt6JWY.crl (hash: K7TYH2iwcNZRR9Q28LY41DBD2/1EFsd5NeiFtiMcFP8=)
2: xWy_WK3zN7U168-WlDV1tLOFxms.roa (hash: 1F+oH+DvxsXdBv6L+suStKLkTpWpU6OO0n2cflrUK4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:28:00:7d:da:4e:72:2d:79:83:f1:af:4f:fc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b495fe56f34762026a94035f320f0a90b7a2566
Validity
Not Before: Oct 19 16:01:17 2025 GMT
Not After : Oct 20 16:01:17 2025 GMT
Subject: CN=fbd5c3a6b4d6195c474c4525a36fb6ec06dd26ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:20:3e:4b:b4:63:73:b1:11:a0:82:d2:aa:49:
69:df:9b:50:51:db:85:e4:7c:2f:13:58:75:15:71:
6c:32:23:a1:16:bd:5a:bb:f5:36:9c:c0:e4:59:20:
33:d6:67:31:59:93:24:0a:df:12:5d:d8:f1:ea:bb:
b7:12:e8:f1:c1:5a:24:0f:fc:62:1a:f8:7f:b1:7c:
a1:0b:71:f8:85:02:c8:47:7a:15:73:87:68:19:fc:
ac:e0:bb:5c:ec:87:c4:de:08:d3:83:50:b5:b8:65:
a1:d1:01:29:30:1b:70:2b:1d:b5:7c:d2:51:68:01:
91:b0:8a:8a:38:52:17:0a:ef:77:dc:d2:f9:60:8f:
f9:ab:ed:66:75:21:80:fd:5a:a9:54:e1:67:2a:7a:
9b:56:99:20:9a:c0:91:49:3d:6d:ae:56:44:c1:aa:
54:95:73:2b:8f:bd:f8:88:7e:29:42:59:15:39:49:
e9:50:cd:b4:6f:c5:05:f3:0e:25:40:91:27:eb:67:
da:32:89:8a:17:4d:23:c0:89:d3:3d:ec:6b:58:b7:
3c:b0:98:04:3f:f6:03:91:9f:4a:a4:d9:2c:33:73:
14:cb:c1:21:d8:79:6e:6f:5d:58:5c:eb:11:61:c6:
6d:18:93:13:92:98:a4:94:66:df:5c:b3:86:33:1f:
7d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D5:C3:A6:B4:D6:19:5C:47:4C:45:25:A3:6F:B6:EC:06:DD:26:EA
X509v3 Authority Key Identifier:
keyid:2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:44:75:25:bd:dd:f8:18:5d:52:fe:0a:f7:3c:79:4a:47:8d:
40:f7:b2:a4:d4:84:2b:c5:f7:1d:b8:ea:a3:c9:5c:ad:13:ea:
2d:55:4d:90:20:68:41:16:47:16:5d:8f:5b:e7:c5:9a:a8:6c:
a5:0b:48:a4:b9:9c:02:1f:49:53:3e:35:99:de:75:84:ab:31:
c7:b8:ed:43:ad:d6:4f:a2:9f:3d:d4:11:54:8b:c0:57:08:af:
88:e1:06:04:ce:3d:86:02:95:9b:ac:52:17:ca:49:1f:3d:be:
f3:c2:2a:46:ce:45:bf:85:fd:12:4f:e8:b8:ce:cf:fa:1f:2f:
76:9e:7d:b8:91:f3:c1:5a:5b:42:82:d7:2e:17:4f:9b:ab:ee:
36:50:6f:9f:4a:a8:f6:cb:29:6f:0c:14:d8:aa:ca:51:74:54:
80:16:35:e5:f6:98:01:e4:ad:92:8c:03:3d:83:c7:9c:a4:97:
b9:1c:be:f9:26:cd:2f:d6:99:df:dd:eb:08:94:92:af:d8:1e:
6b:3f:44:91:85:a5:2a:18:37:60:3d:08:4f:df:0a:5d:d2:50:
8f:9b:e1:2a:56:bc:36:26:e3:85:4f:c4:56:3f:66:1c:65:28:
6d:18:dc:46:3d:18:16:59:96:c2:87:aa:04:b3:fb:ed:23:c0:
23:06:df:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:18 2025 by rpki-client