Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
File: K5KAl9yfiaejqKKWp4pPnQy84X8.mft (raw, json)
Hash identifier: +PlBumiZDI6e9FWMgoPEBYjIVlFhcTOVoxfTUy40g68=
Subject key identifier: C2:73:3E:4F:DF:B0:B4:50:03:49:84:CB:73:38:5F:BC:BB:D8:EF:A5
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial: 0199FBEC1C31CC66F2F6FDADB652DC751C79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
Manifest number: 16EC
Signing time: Sun 19 Oct 2025 10:02:58 +0000
Manifest this update: Sun 19 Oct 2025 10:02:58 +0000
Manifest next update: Mon 20 Oct 2025 10:02:58 +0000
Files and hashes: 1: AmmERHoFL94GmD-TNoEsdCRoLA0.roa (hash: biK301TWdWY9asw86ndZF9AzE6I4gnsLDy1ooUih+WA=)
2: K5KAl9yfiaejqKKWp4pPnQy84X8.crl (hash: Z25RXDmvi/hGvg6SirpHLlsZa8lcNmdlKN89ZxWMTW8=)
3: Yir1wFnAK-DFdW1gJQQBqKeL_rg.roa (hash: /+asFMl4xLs7yAsL3JI4lb0AzpjlX5T5v9MFr+IdWAw=)
4: uUIHLpHOzvZGAd44SZTSJe8l41g.roa (hash: fYWeKpFER5K7DmZGk625fBtbp6QjScVAI5NXZ5fqiWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:1c:31:cc:66:f2:f6:fd:ad:b6:52:dc:75:1c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Validity
Not Before: Oct 19 10:02:58 2025 GMT
Not After : Oct 20 10:02:58 2025 GMT
Subject: CN=c2733e4fdfb0b450034984cb73385fbcbbd8efa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:52:98:e9:f6:af:c2:09:22:1d:7a:8d:71:ff:
d0:27:27:e0:94:7b:02:9c:a6:b7:29:e4:76:5a:bd:
1a:fb:be:35:20:40:91:c3:ee:13:c6:e2:b0:dd:be:
5e:f8:2b:de:81:99:c6:7d:4e:b1:85:04:b3:48:12:
f0:0a:28:f4:cc:74:2a:84:68:5f:d8:b5:38:0d:ba:
39:d4:92:d4:06:85:84:af:be:61:ad:fa:aa:2a:65:
2b:47:b3:f8:a3:ca:1c:a3:b6:9d:c1:2c:7a:58:22:
18:2c:11:0c:fa:22:71:37:24:43:5c:cf:41:ad:93:
ec:a2:70:f4:61:0f:98:08:8f:66:04:9f:d1:85:d9:
48:8d:2a:1c:d9:24:37:17:74:35:ff:eb:3b:ac:51:
59:76:0d:88:da:7c:4f:3e:dc:c0:e1:79:62:ed:f2:
46:b7:9e:2f:86:12:99:99:27:88:5a:44:3d:fe:8c:
c0:22:a9:12:c5:cb:57:24:92:ec:e8:e7:26:c0:37:
6f:64:1a:8e:eb:d6:2c:78:83:1b:f6:fa:6a:b8:f5:
9d:f4:bb:7c:47:5b:a3:19:8e:65:8b:18:99:72:e5:
91:3d:57:94:6e:fa:22:9f:2f:03:d0:ef:69:e6:da:
67:51:e0:21:19:a8:b7:7e:e0:db:f5:b1:23:33:05:
82:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:73:3E:4F:DF:B0:B4:50:03:49:84:CB:73:38:5F:BC:BB:D8:EF:A5
X509v3 Authority Key Identifier:
keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:cc:c8:e8:27:49:12:ad:5e:9f:c1:9a:51:e7:e4:61:63:55:
fa:61:59:68:0c:20:5c:e8:87:b8:1f:17:5f:a6:23:7c:0c:59:
15:63:7f:1a:09:0d:ab:dc:96:04:d9:35:c3:01:49:1a:e2:6b:
45:32:15:4d:d9:25:50:37:4f:84:16:56:58:5c:ac:c4:02:3d:
2a:1e:21:f5:ef:96:f3:54:ec:7b:4e:24:cc:7d:7d:d9:3e:a1:
f0:94:40:da:80:08:39:af:de:bd:e0:41:62:6e:01:2c:5d:30:
f7:18:ca:02:45:16:cb:e5:aa:1a:c5:a8:21:56:d3:b3:db:98:
32:d7:d1:44:f4:95:c8:73:e9:21:46:90:ac:a6:d7:8a:49:0f:
75:a2:bb:32:0f:0b:ae:0c:4f:d7:41:d7:62:20:3d:3e:96:9f:
a8:18:3d:1d:71:a1:b2:34:8e:a6:99:c6:98:68:ee:97:39:fc:
4e:0b:d1:bb:df:b4:2b:00:c5:7d:c4:c6:0e:8d:6b:74:e9:a4:
59:97:56:57:c5:7b:87:55:1e:f5:ba:8f:9b:fb:b2:6d:56:c2:
6d:cb:ee:e1:ca:64:ec:c1:cc:10:61:5a:f8:84:19:93:98:d5:
c8:35:b1:12:a4:bf:44:29:b4:2e:44:5b:db:9b:a0:e7:cc:9f:
9f:b3:fe:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:01 2025 by rpki-client