Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
File: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft (raw, json)
Hash identifier: Zxh7LUr7SD59ov8c9R3BSt/wJs57bmkCyTN6VTpdb04=
Subject key identifier: 95:6B:4A:75:F1:C9:45:24:46:CA:06:49:B4:72:5A:3D:C1:63:46:B1
Authority key identifier: 2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
Certificate issuer: /CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Certificate serial: 0199FDD9D2DB0E45838111142034AA8F041D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
Manifest number: 0EC2
Signing time: Sun 19 Oct 2025 19:02:14 +0000
Manifest this update: Sun 19 Oct 2025 19:02:14 +0000
Manifest next update: Mon 20 Oct 2025 19:02:14 +0000
Files and hashes: 1: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl (hash: 4oTeLL347hnvXtQMZn16cpRWAT6Lp0W8qC4EGFSdnEU=)
2: rK_Cs7Dz6iUX_MoKD-Xocnfo1R4.roa (hash: b1uXDovLrtEkVyA+DIE0O5ACHvWcfbWlFzT0S+Ih5Jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:d2:db:0e:45:83:81:11:14:20:34:aa:8f:04:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Validity
Not Before: Oct 19 19:02:14 2025 GMT
Not After : Oct 20 19:02:14 2025 GMT
Subject: CN=956b4a75f1c9452446ca0649b4725a3dc16346b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:b6:b3:ac:68:9d:69:92:64:4c:9d:a6:a0:
ac:c5:bc:ef:b7:be:61:16:64:22:7a:78:b0:90:74:
b5:48:03:fe:c3:09:7c:4d:71:e8:89:73:e0:75:98:
d8:b7:ba:50:4b:24:9c:45:03:9a:0d:f6:6a:12:ae:
b0:a0:09:79:a3:7e:76:75:a1:d4:19:22:ca:02:9d:
fd:91:dd:3a:61:dc:76:92:6a:50:04:6b:c0:5b:fc:
ca:1b:7a:0e:86:b8:51:3c:88:1e:99:de:14:1a:84:
21:09:70:95:0d:c6:56:29:44:09:9d:91:16:fe:e3:
50:db:a8:18:4c:97:7f:5b:7b:ae:a0:29:95:dc:de:
f2:51:38:43:c3:8e:e1:a4:3b:33:a9:3e:4b:9f:54:
82:77:65:b5:95:e3:21:48:89:bb:7d:95:a5:2d:29:
b3:79:f5:4a:4f:13:67:b8:55:fb:35:6b:d9:b0:25:
08:6f:25:46:ab:c5:5f:c4:99:e7:4f:8e:4d:44:bf:
b1:e2:50:aa:c0:c8:0d:c3:69:d2:a1:c7:4b:6c:f0:
be:3a:9b:d2:84:1a:a2:7b:18:ef:47:22:8b:8e:7e:
f9:ce:07:96:b2:fd:ce:d9:22:f4:7c:95:21:8a:6f:
95:74:1c:34:c9:b9:cf:77:0f:d9:bc:1e:b2:ec:95:
e3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6B:4A:75:F1:C9:45:24:46:CA:06:49:B4:72:5A:3D:C1:63:46:B1
X509v3 Authority Key Identifier:
keyid:2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d0:b3:1c:88:9a:e9:6c:60:c9:29:81:e8:bd:48:d7:78:26:
69:9e:65:43:d2:e3:d4:2f:56:6e:bb:47:d8:47:11:c8:3f:6f:
48:45:dc:95:55:b2:c4:29:e7:53:7c:5f:ee:b7:6e:45:7a:9e:
da:c6:7a:08:6b:aa:55:ea:04:41:59:f0:bc:39:d3:47:63:a8:
16:c4:26:6a:12:23:bd:75:e0:4a:01:ab:0c:c7:a5:6f:62:ce:
ae:ea:35:4e:d0:d9:2b:14:78:5a:62:10:a9:24:e0:5e:31:37:
82:7c:46:ca:62:ce:27:ae:83:ca:32:b8:91:b2:5f:54:75:b1:
73:94:90:a4:fb:1d:2b:31:65:e5:41:5e:d0:47:bd:09:d7:d1:
60:4d:87:fd:e8:05:d7:0b:c4:6e:5c:25:71:c5:4d:89:31:cc:
f1:1a:d4:4c:41:db:b1:8d:b3:8f:d9:a5:1c:4a:7d:a9:be:16:
39:32:1a:1e:d5:7c:2b:06:1a:cc:84:d0:94:b4:da:0d:a9:db:
a5:1d:68:a7:6d:bd:e0:d3:69:f6:89:53:f8:53:78:23:7b:ae:
2f:44:d1:db:44:cf:ae:c9:c3:ff:e7:30:2e:a5:fa:70:42:e0:
a1:09:a7:0d:7b:e0:4b:ab:b4:c9:0f:c2:1b:9b:ed:2c:c6:07:
8a:a2:43:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:28 2025 by rpki-client