Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
File: K8wc-LjiEGa27GR2l9SUXY-bsFs.mft (raw, json)
Hash identifier: 8Eb0krbHsttQs82+JGCrd1Vz3VhosGowJp7eNk0+zYw=
Subject key identifier: A1:BC:69:9C:95:75:F7:5E:B9:46:36:2D:9C:3F:62:B3:78:F4:91:D3
Authority key identifier: 2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
Certificate issuer: /CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Certificate serial: 019A7149C4EAEA1808B0FE109B1F755BFBC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
Manifest number: 12C5
Signing time: Tue 11 Nov 2025 05:00:51 +0000
Manifest this update: Tue 11 Nov 2025 05:00:51 +0000
Manifest next update: Wed 12 Nov 2025 05:00:51 +0000
Files and hashes: 1: 1-RD7DNOHCxhrIr1TSToj6urkCEM.roa (hash: YBfKNkThqc59/HOjNrqRSuRrZh5t6Vr9bzlwHzZcB5M=)
2: K8wc-LjiEGa27GR2l9SUXY-bsFs.crl (hash: ilLd1FOxpep9K9EgrSwxHi5PYrJEjyFoQcGh7/04heg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:c4:ea:ea:18:08:b0:fe:10:9b:1f:75:5b:fb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Validity
Not Before: Nov 11 05:00:51 2025 GMT
Not After : Nov 12 05:00:51 2025 GMT
Subject: CN=a1bc699c9575f75eb946362d9c3f62b378f491d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:68:cd:2f:ed:d0:e7:18:e5:7e:ee:d3:0d:73:
11:0f:2e:c7:ab:21:af:63:95:cf:51:5d:50:a8:77:
90:f0:ae:dc:fd:50:e8:97:55:c7:40:69:05:d0:95:
01:52:40:c9:34:da:ec:42:59:a4:23:97:f3:d4:ea:
55:37:e2:6b:31:f4:ac:01:cd:df:ce:15:df:bb:d6:
bb:98:73:9f:e7:3c:5b:6b:7a:49:97:78:36:e5:7e:
1b:42:21:e6:64:ab:d6:14:64:ce:97:ab:1d:dd:f4:
2c:db:94:90:7c:25:d1:84:93:91:b8:25:43:63:f7:
af:7a:3e:ab:d9:17:bb:27:e5:e1:38:bd:79:56:30:
bc:2c:9c:56:5d:99:87:bb:37:85:98:ef:ff:d9:73:
89:ae:40:47:f9:80:d1:9a:d1:5c:dc:ca:95:48:15:
01:e4:f7:48:97:fa:1a:21:b3:2d:82:4e:76:d0:48:
1a:e7:cd:e0:d2:43:21:b8:3d:ce:5e:83:e0:dd:e0:
92:31:5d:cb:2d:b8:0a:20:bf:ab:b7:89:b7:a5:c6:
96:fc:f8:ff:f7:e0:4d:dd:3b:07:ce:ef:ed:25:97:
fe:3b:9b:43:88:ad:3d:f4:fb:1a:1b:3f:93:88:12:
18:08:f9:dc:31:3a:60:e8:12:6f:79:b3:b9:da:c9:
41:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BC:69:9C:95:75:F7:5E:B9:46:36:2D:9C:3F:62:B3:78:F4:91:D3
X509v3 Authority Key Identifier:
keyid:2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:89:aa:e2:eb:75:85:3b:1e:72:1d:fa:9d:e0:81:f8:04:98:
3b:ed:ae:81:19:64:e1:8d:43:69:4d:ae:ae:db:6e:e1:b1:91:
d2:40:ac:c7:6f:11:da:b2:d8:4e:65:be:92:ce:2d:48:5a:6c:
5b:4a:e9:44:4a:43:bf:97:11:57:f1:77:3c:7a:a2:ab:f3:7e:
fd:8f:29:7b:f4:83:8b:e8:3a:a0:43:7b:ad:a9:66:67:9a:ce:
fb:24:36:2f:67:35:73:ce:18:c7:7a:08:15:d1:52:04:10:27:
26:a8:60:10:94:73:d0:c6:d1:5a:3b:a9:f4:52:36:5d:22:b8:
6f:e9:4d:ce:ee:b9:b0:69:6a:37:7b:17:41:1b:d3:af:3e:e9:
8d:61:09:ca:45:41:be:e1:a0:0a:c0:54:a2:27:bc:fb:00:75:
87:ee:df:14:fb:56:9f:7c:f8:bb:75:bc:a3:a1:c1:c4:7e:f5:
d1:a9:0f:f8:88:00:7f:13:78:4c:b5:25:d4:07:45:fe:f1:d4:
42:ac:94:40:c6:67:c5:a6:d7:8e:d2:f9:6b:ef:9e:05:c1:3a:
b2:fe:11:50:05:87:35:ef:7e:fa:15:57:e1:ba:5b:0e:e5:4c:
77:6b:65:23:4e:94:c3:84:84:2c:db:52:3e:fd:47:68:3d:34:
67:6d:27:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:12 2025 by rpki-client