Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
File: K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft (raw, json)
Hash identifier: Xq2kl/xT9yEshMk7FKUKy+rKGGBguDqK5GrT96JJPoc=
Subject key identifier: FC:4E:EB:F7:73:09:72:9E:A4:DB:B8:8D:D8:10:FB:60:B2:9A:E3:21
Authority key identifier: 2B:73:FE:15:C1:57:F0:6F:E9:AB:21:95:DC:C3:BD:7B:D0:71:68:A0
Certificate issuer: /CN=2b73fe15c157f06fe9ab2195dcc3bd7bd07168a0
Certificate serial: 019A3E37D68B12F820EDED6046E1942D92B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
Manifest number: 06AF
Signing time: Sat 01 Nov 2025 07:00:37 +0000
Manifest this update: Sat 01 Nov 2025 07:00:37 +0000
Manifest next update: Sun 02 Nov 2025 07:00:37 +0000
Files and hashes: 1: K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl (hash: VVaCXJM2EMPUDRtYeAONxfKLaxKZ9FPizOjXtsXMayM=)
2: WGdEQE91EliXk0v4x3jIiAr2OTM.roa (hash: gEyRBLqxqp6b0VNBQfdpnj0lqDeqco4Wbi4LrUK1SDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3e:37:d6:8b:12:f8:20:ed:ed:60:46:e1:94:2d:92:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b73fe15c157f06fe9ab2195dcc3bd7bd07168a0
Validity
Not Before: Nov 1 07:00:37 2025 GMT
Not After : Nov 2 07:00:37 2025 GMT
Subject: CN=fc4eebf77309729ea4dbb88dd810fb60b29ae321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ab:43:ed:d8:f6:46:bc:57:e3:5c:03:bd:15:
15:7b:29:a3:8c:20:eb:7f:3a:c4:da:fc:0a:f3:53:
22:1a:b4:30:0e:66:47:5c:70:1b:27:2f:d9:a0:58:
24:0e:91:12:f9:41:8f:1a:6e:b5:86:20:43:3b:eb:
11:da:c1:6e:2a:0c:88:76:25:fc:4c:3a:39:79:b2:
35:c9:87:76:30:70:5c:62:87:2f:c3:1c:6c:1a:cf:
a9:12:a5:45:59:36:ac:bd:eb:40:d3:af:0c:49:a1:
d5:f6:ec:5c:74:25:af:38:9f:d7:f5:f6:d5:05:03:
c1:e6:aa:e1:78:95:f8:93:0d:9e:01:56:5a:7a:fd:
29:38:17:13:68:0f:fb:39:57:9a:ed:8e:a4:b6:51:
4e:b7:27:c6:51:c3:7a:00:be:61:be:ce:7b:41:4a:
21:c1:e1:6b:25:b8:e9:f1:15:c9:c1:d7:fc:53:85:
42:1c:79:85:a5:f6:48:25:8d:44:3c:11:67:07:ea:
b3:60:17:19:a4:1f:d9:47:e6:27:85:24:32:6f:90:
dc:f0:bc:4f:ff:bd:1c:f2:99:7c:7d:8a:cf:9f:81:
87:a0:a9:a2:dc:1d:18:74:82:df:81:77:89:1e:d1:
1d:fd:1b:1c:b2:5d:99:98:53:0e:0a:03:a2:15:06:
81:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4E:EB:F7:73:09:72:9E:A4:DB:B8:8D:D8:10:FB:60:B2:9A:E3:21
X509v3 Authority Key Identifier:
keyid:2B:73:FE:15:C1:57:F0:6F:E9:AB:21:95:DC:C3:BD:7B:D0:71:68:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6e:f0:4d:a9:ab:2e:79:a3:4c:15:82:68:b8:2c:ec:5f:f3:
a7:9e:d0:85:a8:4b:00:ee:c1:1e:4b:ff:bc:7d:7b:78:9f:a1:
ec:7e:bb:51:9f:45:d2:53:06:12:8f:0c:3c:b2:21:49:d1:a2:
08:fc:6a:b6:b8:de:f7:c4:e1:65:b1:3d:e0:10:47:d1:df:6c:
3d:44:7c:e1:04:24:12:0b:cf:5d:8f:0f:7d:8e:af:7c:c9:f5:
0a:7a:2f:fe:f3:6f:1b:d6:ad:8a:ef:84:f6:40:b1:a3:c0:05:
05:05:82:81:a1:7b:b0:90:12:29:e3:86:62:b7:04:c1:fb:39:
7b:ea:bd:36:2b:7b:ba:29:40:5b:6f:2b:4e:d9:48:9c:b6:c0:
04:dd:e1:54:6b:71:be:16:04:da:46:96:00:dc:c5:06:c7:93:
49:b8:c8:67:89:06:a6:7b:f5:2e:6a:5f:2b:e4:06:f1:32:ea:
ec:7e:21:f1:cc:a8:fe:eb:8b:fc:37:13:3b:c5:78:4c:ea:b1:
0a:1d:c7:d3:a3:35:e8:3b:7a:9c:33:b2:c0:37:a7:82:dc:d6:
a9:6f:e7:96:f1:77:ab:2e:07:42:a2:8f:33:19:91:88:26:8f:
30:90:e3:0e:a6:e3:de:2d:91:39:46:52:fe:e2:92:63:b2:42:
9e:ab:99:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 14:06:45 2025 by rpki-client