Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
File: K8J94IFvfguHpzPdMZkInlN_Jhw.mft (raw, json)
Hash identifier: g70wjZJsp2JrzOM3l2vM95TaK6kI+kTL2TLWt7m72jo=
Subject key identifier: 0D:FF:9F:5D:A0:88:E2:4B:7E:0B:4D:B5:BE:18:4E:C4:7C:C7:8A:7B
Authority key identifier: 2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
Certificate issuer: /CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Certificate serial: 019A72938B791C3A19DB27DB22512A72DC36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
Manifest number: 0D10
Signing time: Tue 11 Nov 2025 11:01:03 +0000
Manifest this update: Tue 11 Nov 2025 11:01:03 +0000
Manifest next update: Wed 12 Nov 2025 11:01:03 +0000
Files and hashes: 1: 37DCbHhm2sTXZoKnRAO3SOggtQQ.roa (hash: +uLJpv1JAEXe6w9bK9Js8rFmAHbw+aILnxdKvgw5Rzc=)
2: K8J94IFvfguHpzPdMZkInlN_Jhw.crl (hash: IannC1w8RXV0NP0viYSiAlvJqrIKmgTFSYyrn2Bkark=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:8b:79:1c:3a:19:db:27:db:22:51:2a:72:dc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Validity
Not Before: Nov 11 11:01:03 2025 GMT
Not After : Nov 12 11:01:03 2025 GMT
Subject: CN=0dff9f5da088e24b7e0b4db5be184ec47cc78a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:66:22:34:2a:73:61:19:05:0c:05:82:93:39:
ed:62:0d:87:c2:d6:0e:bb:13:16:3b:54:28:f4:8f:
ef:78:13:6b:45:25:99:6e:f5:3f:01:e6:e7:95:68:
8c:a2:cf:89:54:ae:84:8d:e6:59:6b:ee:f5:83:9c:
c9:65:1d:7f:ab:b5:0e:95:8c:75:28:78:0a:21:4d:
3b:1f:78:49:5b:ac:fa:41:06:90:35:21:ad:0c:bb:
74:e0:14:1d:bb:5c:e0:9a:91:6b:ae:81:55:cd:12:
00:f8:da:8e:0a:1b:a7:c5:3b:cf:0f:e2:aa:bb:fa:
bb:8e:41:b8:91:a8:13:d7:3c:3c:fa:b1:f7:ef:a6:
bd:95:53:52:d0:de:e1:22:e7:03:9d:49:0f:22:93:
45:89:e3:0e:28:45:33:7c:4c:79:64:ec:85:d2:00:
17:21:91:43:d6:57:ad:81:06:b5:ab:8c:fe:20:54:
d5:72:08:d4:f5:38:b0:b5:1a:41:d9:d3:77:fa:f1:
7e:9a:95:77:17:7f:41:cd:aa:bb:0c:d3:f8:bd:01:
49:a8:af:df:0a:73:e4:4a:2a:34:e7:64:f6:98:44:
ef:95:27:e3:cd:0a:15:e6:84:f6:84:1f:5c:0d:38:
ae:35:5e:5b:97:e5:f5:3e:89:78:39:00:13:b7:d9:
eb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FF:9F:5D:A0:88:E2:4B:7E:0B:4D:B5:BE:18:4E:C4:7C:C7:8A:7B
X509v3 Authority Key Identifier:
keyid:2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:73:12:06:6e:a5:df:b7:7c:2a:66:92:7a:2d:ed:19:ea:22:
37:36:e2:02:92:cc:02:ce:24:63:ae:a3:c9:cd:06:c9:6e:a2:
af:82:4b:d5:85:df:3f:ba:8b:6d:64:ae:56:13:0e:ee:80:0d:
f4:db:61:a6:eb:2c:92:86:60:0e:3b:04:98:57:d1:c2:c8:34:
a8:e5:e1:b4:95:b6:88:80:3d:fa:00:c1:18:7e:10:b8:1f:4a:
b7:4f:3d:d1:90:18:f5:cc:e6:c5:79:6a:cc:07:43:28:37:0e:
10:6b:5a:a2:ff:ae:c6:a9:d5:f7:5b:45:ca:73:42:af:42:d1:
d6:9a:61:c9:1e:d0:66:8e:c8:c8:b4:64:9a:cc:c5:cd:e3:60:
52:11:b3:2b:46:90:10:cf:7d:eb:3a:df:04:42:b3:b2:b6:94:
92:52:51:33:9a:1d:b7:c6:b0:7f:a6:7a:05:a8:2b:56:ab:8a:
58:43:9b:03:49:3a:37:17:7b:5c:d9:5c:42:44:e7:51:7c:bc:
e6:3c:c9:65:92:fd:0a:ec:02:50:34:7e:ac:73:45:d2:d8:ca:
cf:1d:05:3d:23:69:b4:16:2d:c3:9d:d1:4d:fd:a8:4a:57:db:
a5:00:12:1f:c4:e9:46:6a:2d:db:7b:9d:c3:a2:8d:d0:0e:bb:
12:a5:6a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:18 2025 by rpki-client