Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
File: K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft (raw, json)
Hash identifier: CaO1Jl0Eh8TwS/qkf8c9S6H0S8qe+Au/TefjIEIpO20=
Subject key identifier: 32:B4:77:46:AB:BE:24:1F:74:FA:63:4F:BF:D7:C2:83:A0:61:CB:8D
Authority key identifier: 2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
Certificate issuer: /CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Certificate serial: 019A71EE65074281B86183616EBA4607187B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
Manifest number: 0390
Signing time: Tue 11 Nov 2025 08:00:40 +0000
Manifest this update: Tue 11 Nov 2025 08:00:40 +0000
Manifest next update: Wed 12 Nov 2025 08:00:40 +0000
Files and hashes: 1: K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl (hash: MJhF/8sM7sUaAKIcahj6xqtQPKmuEsuerlh0CmbOQNY=)
2: cRNU9mqjTuLyrs64AbQG-Q8lS_M.roa (hash: gATqx8bTowXwaPkDc2Os+EOXUJAixbB51eSVdjtnNog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:65:07:42:81:b8:61:83:61:6e:ba:46:07:18:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Validity
Not Before: Nov 11 08:00:40 2025 GMT
Not After : Nov 12 08:00:40 2025 GMT
Subject: CN=32b47746abbe241f74fa634fbfd7c283a061cb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:9a:d5:bb:3f:61:1c:95:7a:64:e8:91:7b:
d6:bb:57:26:77:0c:1e:d5:6a:0b:9a:61:3b:03:ba:
07:dc:71:09:09:af:68:45:f2:a4:3d:34:90:74:58:
0f:ed:68:8b:2a:e4:55:d6:89:4d:05:d2:22:12:35:
b2:89:b0:a5:a5:c9:0d:52:48:92:08:76:45:af:50:
2d:cd:c6:0e:8d:43:c1:3c:89:6d:34:e3:f1:3f:23:
44:43:e0:65:60:b2:7e:5b:ce:b0:6a:04:25:e0:df:
d8:f9:e3:48:99:a8:d9:c4:35:f6:12:ab:52:60:15:
54:16:14:96:27:7d:54:0c:d9:61:1f:03:9d:26:e6:
1d:30:54:3c:81:7d:92:63:cd:52:09:27:57:b6:cd:
20:2e:20:ab:b9:44:bd:7f:73:3b:ac:f4:8b:d7:7d:
b8:83:8a:6f:2a:31:97:21:0f:05:c8:a0:8d:75:e5:
8f:1f:ca:90:ab:fb:9e:d4:b2:62:66:22:05:b2:5d:
b4:33:3a:ce:55:c6:b6:6d:ec:cf:ad:98:84:a1:9d:
89:8d:42:ea:f3:21:23:3c:5e:fb:ce:19:72:07:e5:
1f:5b:28:ac:91:9d:81:64:44:53:e5:10:53:43:62:
dd:a0:80:c0:af:96:87:23:30:0c:28:f7:dd:63:8b:
2f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B4:77:46:AB:BE:24:1F:74:FA:63:4F:BF:D7:C2:83:A0:61:CB:8D
X509v3 Authority Key Identifier:
keyid:2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ea:06:8f:16:71:bb:76:86:1e:f1:55:cf:e7:0b:5d:8f:99:
ca:bd:cf:f1:6b:4f:5b:cc:01:54:ac:72:c5:7d:f9:b9:e7:a9:
e1:fc:9f:ea:5e:f2:13:80:0e:68:2d:70:84:13:88:ff:1b:cc:
be:8d:1f:d0:15:0e:81:7f:e7:17:12:bf:c5:98:de:36:96:9b:
6e:63:cc:ca:30:76:b6:17:01:30:9a:30:0e:4e:6d:36:59:b1:
b1:da:c1:72:8f:03:fb:5d:64:03:68:97:2a:4b:2b:75:78:ea:
cb:c3:f8:c3:cb:79:66:5c:c6:1c:d0:b3:8a:c7:11:72:26:2c:
4c:15:1f:30:d5:57:e5:e4:fc:fd:05:a6:c1:b8:9f:61:90:7e:
d9:ef:49:ef:38:e7:f9:f8:53:9d:12:61:d7:a0:d4:b2:eb:69:
b7:be:67:46:f3:48:30:f5:ff:a0:c8:5b:69:85:20:ad:9f:2b:
1f:01:be:ec:fa:cd:38:c4:9a:fb:a5:f5:1a:4b:69:87:d2:13:
0b:2b:d0:0d:77:b7:ca:dc:e2:3c:fd:f5:10:6b:e5:1f:af:48:
24:ae:65:21:07:41:78:a4:28:9c:fb:e3:da:da:b0:22:a9:a2:
77:01:fa:f1:e2:69:fd:72:a5:15:fe:50:a1:5f:00:c6:12:a6:
7f:3d:31:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:33 2025 by rpki-client