Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
File: K-1ik1-0ivbkTLoZQm76tR8cVBA.mft (raw, json)
Hash identifier: f3iMVx3C2FnYnPSRhCesJGNqg/qm8MC9nm/aSdQWwIQ=
Subject key identifier: 39:FC:80:98:81:0A:D1:03:97:8C:46:69:F4:FA:5A:35:17:6E:61:90
Authority key identifier: 2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
Certificate issuer: /CN=2bed62935fb48af6e44cba19426efab51f1c5410
Certificate serial: 019A168536F9428CAE17F7788D2B81169F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
Manifest number: 0DD6
Signing time: Fri 24 Oct 2025 14:00:20 +0000
Manifest this update: Fri 24 Oct 2025 14:00:20 +0000
Manifest next update: Sat 25 Oct 2025 14:00:20 +0000
Files and hashes: 1: K-1ik1-0ivbkTLoZQm76tR8cVBA.crl (hash: eZhs9ILDpOipSVP2OT8RFjzvXMCCe5fQ7zk8yPk3lOk=)
2: jYHRdDHfT6bQOmOGT7Tls1WhRLY.roa (hash: pWv0ClQXtIskoLimOYMYx3t3am8WhnpvjCRS+V8Iqy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:85:36:f9:42:8c:ae:17:f7:78:8d:2b:81:16:9f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bed62935fb48af6e44cba19426efab51f1c5410
Validity
Not Before: Oct 24 14:00:20 2025 GMT
Not After : Oct 25 14:00:20 2025 GMT
Subject: CN=39fc8098810ad103978c4669f4fa5a35176e6190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:1c:21:b5:02:e4:81:ac:a9:26:e0:9d:36:
09:22:1a:59:70:8f:26:f2:52:d6:76:51:1c:b1:7e:
2a:31:6c:71:c3:de:2e:ac:dd:3f:25:dc:af:40:e6:
23:20:db:ef:6a:e7:fa:7d:5d:c0:c9:36:bd:16:8c:
55:71:14:87:44:90:2b:fa:84:61:8b:c5:8e:b7:58:
8c:1f:da:a2:18:d0:e8:26:9a:7c:97:23:d9:28:ce:
16:1a:58:d8:77:45:89:b3:88:15:86:57:04:a0:41:
62:05:a0:61:e1:d3:a7:d7:ad:a2:46:6e:bd:54:05:
61:6c:ed:c6:36:a8:7a:f6:34:b3:6c:73:33:c4:da:
53:75:b2:70:de:e4:5c:d6:c9:54:7c:23:c5:84:62:
a9:15:49:5f:cf:63:0c:87:b4:74:9d:b1:d2:5a:7e:
8e:64:47:79:dd:9b:c0:49:34:3a:97:03:fa:a1:bf:
c0:a5:3b:81:2e:43:34:c5:c2:3c:b4:df:58:5f:b9:
0f:7a:b5:c1:9e:a2:2d:ae:02:55:6f:66:9f:7d:4f:
98:0d:e2:e3:b9:b5:e0:7e:5b:2f:0a:10:16:a6:33:
2b:6b:bc:ea:6c:a3:e6:6e:ab:ec:fa:06:b0:b2:82:
bc:22:e4:79:14:31:40:6e:71:35:08:48:61:5b:16:
b2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FC:80:98:81:0A:D1:03:97:8C:46:69:F4:FA:5A:35:17:6E:61:90
X509v3 Authority Key Identifier:
keyid:2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:79:1f:f0:11:c7:96:58:49:e9:0f:86:f4:84:a1:76:76:d6:
e7:cc:92:02:88:1e:32:2e:32:15:1f:47:1b:e8:dd:c5:d4:ac:
82:73:21:83:a8:2d:37:e1:0f:14:89:e9:e8:bc:c7:18:7a:d1:
0e:ba:66:95:6c:36:0c:9b:66:3c:21:e2:5c:65:d1:68:59:22:
bd:3e:ba:d1:7a:51:13:5b:66:89:d9:e1:47:5a:f6:cc:d2:07:
46:95:ef:2f:44:62:de:4b:ca:70:f4:cc:23:f2:c3:12:be:d4:
75:8b:77:27:ec:01:89:fc:ec:f7:a9:bc:73:49:22:98:02:e9:
2e:da:e6:7e:85:6c:85:46:8d:f8:63:3d:4b:29:6c:f3:23:f0:
67:01:ae:d8:3d:50:57:2d:11:3e:60:f6:3d:99:97:82:d9:24:
cf:9e:34:e5:c4:f8:3c:a7:52:b1:8d:32:11:85:92:22:30:74:
a1:f6:dd:16:95:09:42:46:77:e4:63:29:3c:4c:24:0c:d3:3f:
28:21:8d:aa:a1:df:f4:f0:57:66:28:3a:1b:58:3b:a8:f4:bc:
50:cd:11:22:39:13:2f:b6:ad:96:c0:c8:15:3d:cb:a2:41:ce:
28:87:c0:bf:08:9e:45:07:17:92:b9:55:38:76:3f:62:ea:ff:
39:4a:8c:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoWhTb5QoyuF/d4jSuBFp8oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZWQ2MjkzNWZiNDhhZjZlNDRjYmExOTQyNmVmYWI1MWYx
YzU0MTAwHhcNMjUxMDI0MTQwMDIwWhcNMjUxMDI1MTQwMDIwWjAzMTEwLwYDVQQD
EygzOWZjODA5ODgxMGFkMTAzOTc4YzQ2NjlmNGZhNWEzNTE3NmU2MTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP4cIbUC5IGsqSbgnTYJIhpZcI8m
8lLWdlEcsX4qMWxxw94urN0/JdyvQOYjINvvauf6fV3AyTa9FoxVcRSHRJAr+oRh
i8WOt1iMH9qiGNDoJpp8lyPZKM4WGljYd0WJs4gVhlcEoEFiBaBh4dOn162iRm69
VAVhbO3GNqh69jSzbHMzxNpTdbJw3uRc1slUfCPFhGKpFUlfz2MMh7R0nbHSWn6O
ZEd53ZvASTQ6lwP6ob/ApTuBLkM0xcI8tN9YX7kPerXBnqItrgJVb2affU+YDeLj
ubXgflsvChAWpjMra7zqbKPmbqvs+gawsoK8IuR5FDFAbnE1CEhhWxayewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDn8gJiBCtEDl4xGafT6WjUXbmGQMB8GA1UdIwQY
MBaAFCvtYpNftIr25Ey6GUJu+rUfHFQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85YjgxYzgtNzMyYy00M2YyLWI2YWIt
NDg0MDE0YTRkOTRlLzEvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85YjgxYzgtNzMyYy00M2YyLWI2YWItNDg0MDE0YTRkOTRl
LzEvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAenkf8BHH
llhJ6Q+G9IShdnbW58ySAogeMi4yFR9HG+jdxdSsgnMhg6gtN+EPFInp6LzHGHrR
DrpmlWw2DJtmPCHiXGXRaFkivT660XpRE1tmidnhR1r2zNIHRpXvL0Ri3kvKcPTM
I/LDEr7UdYt3J+wBifzs96m8c0kimALpLtrmfoVshUaN+GM9Syls8yPwZwGu2D1Q
Vy0RPmD2PZmXgtkkz5405cT4PKdSsY0yEYWSIjB0ofbdFpUJQkZ35GMpPEwkDNM/
KCGNqqHf9PBXZig6G1g7qPS8UM0RIjkTL7atlsDIFT3LokHOKIfAvwieRQcXkrlV
OHY/Yur/OUqM+w==
-----END CERTIFICATE-----
Generated at Fri Oct 24 18:04:20 2025 by rpki-client