Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
File: K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft (raw, json)
Hash identifier: /ltmehHSrSalvEMFbFOCgPNFJal8Ofu0UiNDqgoQUG4=
Subject key identifier: 29:21:46:00:86:D5:0B:83:32:B3:5E:23:85:97:4E:40:EF:E9:D8:09
Authority key identifier: 2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF
Certificate issuer: /CN=2bc7b51dbf35aa4239abdad55f966945659401cf
Certificate serial: 019A1797C706AB9780A6683BE87FC5D192FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
Manifest number: C0
Signing time: Fri 24 Oct 2025 19:00:13 +0000
Manifest this update: Fri 24 Oct 2025 19:00:13 +0000
Manifest next update: Sat 25 Oct 2025 19:00:13 +0000
Files and hashes: 1: K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl (hash: WSpISi4RcQSYu1ghRY8fzBES624gpI29G/G7ChfJNeI=)
2: MKp_wnfGXJz9vDnuCk6NRSVDYjQ.roa (hash: 5LllIjjTErVD6cEbTzyP47TnfsEC+5tnD2nfvOPP5z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:97:c7:06:ab:97:80:a6:68:3b:e8:7f:c5:d1:92:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc7b51dbf35aa4239abdad55f966945659401cf
Validity
Not Before: Oct 24 19:00:13 2025 GMT
Not After : Oct 25 19:00:13 2025 GMT
Subject: CN=2921460086d50b8332b35e2385974e40efe9d809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:81:90:b7:cb:fe:b7:8b:ca:80:01:27:af:2b:
6e:3d:0f:6c:45:de:39:5d:e9:bd:1d:1a:24:62:b2:
8c:17:a1:80:aa:48:ef:02:ff:76:97:2a:bd:3c:a5:
aa:e3:cc:0b:c4:2f:f3:17:42:90:af:6a:50:aa:68:
29:fc:58:18:30:58:8b:89:ba:4d:69:71:ba:2b:b1:
ca:bc:3d:44:cc:62:53:05:ad:f8:a4:7b:b5:93:91:
d9:00:d6:2d:89:2d:03:a8:e7:da:1c:e3:e5:4a:e5:
08:1c:be:1d:8f:8c:d7:ec:89:0a:40:49:4e:10:0e:
74:52:7a:99:97:87:b8:24:90:9a:17:9e:aa:ea:17:
58:bd:b8:0f:97:43:b9:96:60:73:24:00:1a:c0:b9:
6d:07:bb:6b:ef:d9:21:84:da:5f:b8:0c:9d:a8:18:
8f:f5:96:4c:39:52:4e:2c:6a:44:2a:c7:69:0d:d9:
a5:ac:cf:81:7f:7a:54:95:57:7d:3c:5a:a4:36:fe:
d1:9e:c2:cf:26:7a:64:1d:d2:d1:38:57:94:15:7a:
4d:52:a4:ef:c2:79:45:9c:f7:15:29:98:26:f4:0d:
df:b5:18:4f:0d:0c:b5:64:3c:ab:fb:85:55:1e:03:
b8:49:f3:81:3a:60:0d:dc:fb:43:b6:66:3d:79:01:
da:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:21:46:00:86:D5:0B:83:32:B3:5E:23:85:97:4E:40:EF:E9:D8:09
X509v3 Authority Key Identifier:
keyid:2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e3:07:f5:3c:08:a1:41:de:b3:bb:42:a0:a6:e0:da:14:95:
a8:f7:bc:77:9b:bf:0a:b2:8b:69:4c:e3:e6:9e:22:4e:0a:3b:
e7:38:cd:32:d2:95:a1:9a:98:4f:6c:0b:4c:34:1d:e5:e3:be:
da:b7:34:9e:01:93:a7:2a:c6:49:c1:c9:57:90:22:34:99:8b:
41:8c:12:b7:80:65:14:64:0a:8a:9a:8b:a1:49:a0:c5:21:04:
07:f7:44:d9:37:a2:e1:2f:b2:65:1c:96:12:01:21:9b:d4:5d:
80:7c:b9:95:85:a8:36:82:33:82:b2:28:81:66:5f:5e:7d:b1:
81:08:cb:9d:f5:32:27:8a:87:f4:4e:06:8f:93:3c:a7:5f:e9:
e2:00:01:d5:2c:61:21:46:9d:dd:79:43:5d:f5:7b:b6:2c:f9:
45:59:e9:ac:3e:11:09:ad:4d:c4:91:31:75:55:89:43:9c:ad:
51:0c:9b:c4:3b:52:d1:c7:ff:67:a6:e6:a2:93:a2:fc:53:2a:
3a:14:01:11:f9:af:ce:f6:3a:01:f8:9d:06:28:05:0f:9b:91:
73:c3:cf:b9:55:4a:9b:2e:44:9a:3e:80:56:6a:52:95:3f:ae:
a5:48:80:67:88:cd:53:ba:f5:b4:e5:df:ef:00:1a:cd:20:89:
0e:97:22:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoXl8cGq5eApmg76H/F0ZL+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYzdiNTFkYmYzNWFhNDIzOWFiZGFkNTVmOTY2OTQ1NjU5
NDAxY2YwHhcNMjUxMDI0MTkwMDEzWhcNMjUxMDI1MTkwMDEzWjAzMTEwLwYDVQQD
EygyOTIxNDYwMDg2ZDUwYjgzMzJiMzVlMjM4NTk3NGU0MGVmZTlkODA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYGQt8v+t4vKgAEnrytuPQ9sRd45
Xem9HRokYrKMF6GAqkjvAv92lyq9PKWq48wLxC/zF0KQr2pQqmgp/FgYMFiLibpN
aXG6K7HKvD1EzGJTBa34pHu1k5HZANYtiS0DqOfaHOPlSuUIHL4dj4zX7IkKQElO
EA50UnqZl4e4JJCaF56q6hdYvbgPl0O5lmBzJAAawLltB7tr79khhNpfuAydqBiP
9ZZMOVJOLGpEKsdpDdmlrM+Bf3pUlVd9PFqkNv7RnsLPJnpkHdLROFeUFXpNUqTv
wnlFnPcVKZgm9A3ftRhPDQy1ZDyr+4VVHgO4SfOBOmAN3PtDtmY9eQHauQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkhRgCG1QuDMrNeI4WXTkDv6dgJMB8GA1UdIwQY
MBaAFCvHtR2/NapCOava1V+WaUVllAHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzhlMUhiODFxa0k1cTlyVlg1WnBSV1dVQWM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iMWI5MWMtYjUyYi00YmRmLWJhMGQt
MmEzODEyNGJhZDhjLzEvSzhlMUhiODFxa0k1cTlyVlg1WnBSV1dVQWM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iMWI5MWMtYjUyYi00YmRmLWJhMGQtMmEzODEyNGJhZDhj
LzEvSzhlMUhiODFxa0k1cTlyVlg1WnBSV1dVQWM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApeMH9TwI
oUHes7tCoKbg2hSVqPe8d5u/CrKLaUzj5p4iTgo75zjNMtKVoZqYT2wLTDQd5eO+
2rc0ngGTpyrGScHJV5AiNJmLQYwSt4BlFGQKipqLoUmgxSEEB/dE2Tei4S+yZRyW
EgEhm9RdgHy5lYWoNoIzgrIogWZfXn2xgQjLnfUyJ4qH9E4Gj5M8p1/p4gAB1Sxh
IUad3XlDXfV7tiz5RVnprD4RCa1NxJExdVWJQ5ytUQybxDtS0cf/Z6bmopOi/FMq
OhQBEfmvzvY6AfidBigFD5uRc8PPuVVKmy5Emj6AVmpSlT+upUiAZ4jNU7r1tOXf
7wAazSCJDpciUA==
-----END CERTIFICATE-----
Generated at Sat Oct 25 01:06:57 2025 by rpki-client