Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
File: K0bJzPf_e9zPg3dioOFXvcE1cOA.mft (raw, json)
Hash identifier: aXU8MzkRaxwc2e8oP4TdNJr9k578Rs6BNRMtB7sOZP0=
Subject key identifier: 0C:ED:40:5E:48:92:E0:37:37:63:25:D1:13:F9:BF:6D:B7:53:E9:2C
Authority key identifier: 2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
Certificate issuer: /CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Certificate serial: 019A7226148E9BB552C422E1714707C9E27D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
Manifest number: 0730
Signing time: Tue 11 Nov 2025 09:01:29 +0000
Manifest this update: Tue 11 Nov 2025 09:01:29 +0000
Manifest next update: Wed 12 Nov 2025 09:01:29 +0000
Files and hashes: 1: K0bJzPf_e9zPg3dioOFXvcE1cOA.crl (hash: KfrwEnFu9HnQUe2SvCzbIJQYCWD+s8MryXP+BJGSPXs=)
2: qLWefGaIQEsRkcA1tO3guUVq3OU.roa (hash: xslOk/6LQdIGFli9jwCBp6kVRfq8yxFvis0Kh4JP+fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:14:8e:9b:b5:52:c4:22:e1:71:47:07:c9:e2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Validity
Not Before: Nov 11 09:01:29 2025 GMT
Not After : Nov 12 09:01:29 2025 GMT
Subject: CN=0ced405e4892e037376325d113f9bf6db753e92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:5f:82:e7:c8:23:03:90:8f:f9:7c:93:d2:
63:33:b4:ed:a2:3b:49:dd:51:4f:f9:91:de:15:76:
f5:92:38:52:b3:00:36:f9:5b:15:fb:83:21:26:03:
de:01:33:80:16:a3:16:af:d3:fe:2c:3d:12:6e:24:
4c:ae:f7:aa:ec:91:ee:df:3c:43:73:db:80:83:dc:
dd:31:96:65:83:35:f1:60:88:f7:f9:c2:b8:78:90:
f2:13:d6:6f:db:10:50:34:26:fd:0f:1a:80:4d:e4:
da:35:75:3d:ba:53:b0:03:7e:8f:23:96:7d:54:de:
08:8a:f2:59:2c:d4:c4:07:ae:24:d4:31:bc:86:e8:
7a:e9:b0:b4:6c:53:f4:3f:8c:37:75:7a:d5:af:72:
1f:85:08:4a:e2:aa:87:72:d1:21:d0:40:91:dc:ef:
68:4a:0d:c5:78:f0:c5:0d:6f:c2:a8:d9:78:78:8a:
2f:a8:ee:82:c5:8b:78:d4:1e:c1:8c:ef:6a:c8:fe:
a1:d0:7e:a3:de:f2:63:24:b1:27:fc:20:57:17:57:
10:0b:fe:83:f9:c5:e8:86:1c:08:d2:99:65:36:42:
09:fd:d7:59:ec:9b:0e:95:6b:86:41:ed:05:0d:d8:
5f:1d:e5:35:58:50:90:28:f8:d4:fe:6e:a3:4e:e5:
21:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:ED:40:5E:48:92:E0:37:37:63:25:D1:13:F9:BF:6D:B7:53:E9:2C
X509v3 Authority Key Identifier:
keyid:2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:e0:63:76:ea:41:84:bd:f3:ef:89:75:ef:4e:19:ed:4c:13:
ed:05:d7:f4:05:68:83:0a:88:61:ec:9f:5a:fb:f8:df:d9:80:
c5:93:9a:ad:07:2f:f9:97:c1:dc:2e:ab:e7:6a:1e:de:40:0f:
b6:cd:ed:87:0f:83:ff:08:16:48:c8:06:07:ec:4d:f1:ea:33:
02:bb:04:e9:1b:8c:cc:45:38:be:c7:e0:26:30:ee:70:3e:62:
cb:16:7b:a4:38:05:1e:2b:79:48:5b:03:92:29:1f:e7:bf:3c:
81:93:11:c1:a4:37:78:94:f4:ae:20:8b:68:b1:50:a2:03:c7:
7b:42:30:2b:67:54:4b:b3:9a:4f:4c:7a:37:d2:a2:c5:d0:65:
fe:d8:f7:9f:54:aa:0d:7c:af:11:6d:e1:c0:c3:20:56:95:89:
d9:d8:83:f3:67:fa:3a:a9:16:34:42:11:f8:1a:63:41:08:00:
0b:a3:1c:5b:2b:ec:5e:cb:7e:7d:7e:87:17:51:3f:11:51:f4:
4e:6c:6c:d4:4c:66:10:4b:73:d0:82:1d:e7:d5:27:f9:48:af:
5d:bc:ac:2b:ff:08:f4:18:f7:93:e4:89:da:1d:d0:dc:e8:44:
3e:33:23:c3:01:d6:7e:76:92:80:5d:14:4f:7f:bc:96:a8:f4:
21:8a:02:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:49 2025 by rpki-client