Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
File: K-U9NAqL9Hwb800yVeEC77GBrRk.mft (raw, json)
Hash identifier: h3+zGzuGRzqNItPHGhQEi++hWiXLPf/yBk+pMSRdIAM=
Subject key identifier: 9D:31:51:1C:D5:F0:9B:39:BE:97:F7:56:69:84:64:DC:83:89:79:8B
Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Certificate serial: 0199FC2178A531BE13A5631794E58BE939A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
Manifest number: 0B38
Signing time: Sun 19 Oct 2025 11:01:15 +0000
Manifest this update: Sun 19 Oct 2025 11:01:15 +0000
Manifest next update: Mon 20 Oct 2025 11:01:15 +0000
Files and hashes: 1: K-U9NAqL9Hwb800yVeEC77GBrRk.crl (hash: XQOtaQwC/SBcR7TeLVXfmPsuV9Tj5ynODuDgwdnmEjc=)
2: QmDTegVSmEYF6fnpKbqY_97oaSM.roa (hash: tHb5J/NaAqeZ3yJpUfHC3cRpeW6+mrRMysLZDeKxz2M=)
3: _tQcgZijvm9qlNfbL3oLbTBqXKw.roa (hash: xWDEvLw1mwcjLwMZNAz8Pf0/GCXvJ3lHopahWXf20MA=)
4: y4GLfgEHHvh7-yMgUWBtC7KLuEc.roa (hash: dQpKnxbZerxvWzLT4LUfokJhZeXYIR/y034iOg9NMks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:78:a5:31:be:13:a5:63:17:94:e5:8b:e9:39:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Validity
Not Before: Oct 19 11:01:15 2025 GMT
Not After : Oct 20 11:01:15 2025 GMT
Subject: CN=9d31511cd5f09b39be97f756698464dc8389798b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:c5:b9:c4:f4:97:af:97:6a:20:02:73:8f:
cd:30:e7:ea:68:85:ab:1a:bd:fd:54:f4:2d:c1:7f:
87:23:e8:17:f9:ba:ed:23:21:88:5e:23:ae:fa:5e:
e9:78:84:ea:79:d4:ca:1e:3a:14:1d:f1:e5:99:4f:
6c:4a:09:44:8f:02:2d:6f:45:b2:44:36:e4:09:07:
d1:f8:a8:bd:d5:24:f3:cc:16:b8:d0:55:7d:43:67:
08:62:a1:c7:f4:f5:1f:de:32:27:65:62:38:28:44:
fd:69:71:7e:28:ce:f7:41:c0:b6:2f:a0:55:e0:21:
7d:3b:6d:5a:7b:ee:c9:d5:2e:68:b9:91:22:c7:a4:
62:65:5e:3d:f6:35:e2:a8:20:4f:f5:da:95:6a:31:
28:a4:69:60:38:81:57:99:6d:37:b9:51:5b:6b:8b:
23:07:6c:41:68:d5:74:1d:09:f8:9c:6e:63:1a:ce:
7d:60:91:62:1f:70:33:f2:0b:5c:72:3f:fe:ce:14:
d3:38:5b:dd:9e:2f:12:fb:88:86:89:a5:f3:69:36:
29:4f:3c:9b:02:d6:bb:9a:65:88:ab:13:8e:4e:46:
b9:17:65:84:87:b1:7c:ee:67:83:00:76:0d:f4:9f:
92:02:a3:4c:89:87:dd:f1:46:ac:81:a4:08:0f:9f:
9a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:31:51:1C:D5:F0:9B:39:BE:97:F7:56:69:84:64:DC:83:89:79:8B
X509v3 Authority Key Identifier:
keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f1:19:e0:6e:58:a1:2d:2b:37:69:df:dd:5c:4c:f4:24:eb:
e3:d7:cc:e5:ed:cb:11:97:fa:d8:6d:8f:6d:a7:0f:73:6e:30:
b8:84:62:1a:04:5b:af:07:5e:ce:ed:44:78:3f:3d:e0:57:29:
5b:a5:33:e3:9a:d2:1d:98:cb:c1:c9:32:fb:a4:77:21:3e:c6:
74:4d:42:59:cb:4c:12:1a:b4:0e:53:81:11:c9:77:34:5a:32:
46:d3:97:a8:a1:b7:85:23:2d:ec:43:c8:46:36:5b:7d:06:a4:
4b:4c:0a:fa:5c:4d:ad:7e:4b:2a:75:2d:93:32:7f:2d:de:76:
e5:28:0e:36:2c:68:65:39:71:14:aa:1f:5d:c7:dd:f4:c3:d2:
46:3a:b7:f3:1b:cf:0c:2d:9c:38:4e:50:d8:bf:81:dd:a4:92:
6c:a4:ff:e6:e1:32:27:86:58:62:c3:72:c4:cb:dd:09:90:64:
86:f1:a5:1e:6e:a5:95:02:d2:dd:96:39:72:e5:ea:21:95:55:
9e:4e:ce:a3:a8:1a:d6:0b:c2:9a:32:f7:be:50:2f:16:b7:f0:
0c:8b:20:13:7a:71:8a:8d:5a:9d:74:26:1d:15:98:e1:2c:27:
e1:8c:a0:2e:69:18:57:d5:48:a1:c0:e3:01:9e:6c:e5:e9:76:
3b:ee:78:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:43 2025 by rpki-client