Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
File: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft (raw, json)
Hash identifier: QQWNDk4EB9XOK0rx89aViEpEV1p86SQ/yAywe5tIyTs=
Subject key identifier: 01:5E:8F:FB:95:44:18:AE:43:7F:2F:DB:34:A5:67:DE:79:30:B8:17
Authority key identifier: 2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
Certificate issuer: /CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Certificate serial: 019A7226228C01067328BAB3121585F4AA21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
Manifest number: 0757
Signing time: Tue 11 Nov 2025 09:01:33 +0000
Manifest this update: Tue 11 Nov 2025 09:01:33 +0000
Manifest next update: Wed 12 Nov 2025 09:01:33 +0000
Files and hashes: 1: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl (hash: uGhIqzCsWkyYUyXUsnwnXxdRJc0QtWDO0Yi2CBvoE7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:22:8c:01:06:73:28:ba:b3:12:15:85:f4:aa:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Validity
Not Before: Nov 11 09:01:33 2025 GMT
Not After : Nov 12 09:01:33 2025 GMT
Subject: CN=015e8ffb954418ae437f2fdb34a567de7930b817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:58:89:8c:6f:d2:d4:c7:99:5b:7e:a1:04:ee:
10:54:a6:09:f4:e2:2e:06:98:a4:d2:9c:9d:8b:6e:
1d:7b:79:c3:6d:24:01:01:6f:ba:01:71:53:74:7f:
12:c9:61:7a:85:17:3d:28:4c:72:dd:d6:e7:56:56:
55:ee:35:92:43:23:8b:0f:6e:04:f5:ca:9f:ca:4e:
26:3a:5d:08:64:51:02:97:c4:e5:a1:07:b2:c1:df:
38:cf:56:31:94:32:99:c8:f1:1e:6c:83:fc:20:b5:
0d:14:87:f3:b6:7c:24:c0:05:86:65:3d:60:ae:8f:
07:7b:03:d3:b3:f0:18:b6:40:23:44:8b:64:f1:b8:
fa:9d:bf:ef:e8:40:f7:6a:5f:4a:a5:ab:d1:4d:d4:
ac:b5:11:3a:08:0e:29:d6:d8:ba:bd:f7:26:98:15:
a6:e5:14:c8:a0:e2:16:ed:e9:c9:fb:71:05:ae:4e:
a7:9f:d6:8e:fc:8a:71:d2:da:6c:bf:76:f6:bc:67:
f4:48:5f:9c:69:3f:94:82:54:12:71:09:0d:c9:68:
07:e0:72:fb:45:60:4a:f3:5a:94:83:49:ad:b3:c2:
56:2e:93:0b:c8:99:da:ee:ae:a2:b6:d2:3e:1e:a2:
7b:80:cb:6f:68:46:a2:76:3c:61:a9:61:f0:52:ff:
af:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5E:8F:FB:95:44:18:AE:43:7F:2F:DB:34:A5:67:DE:79:30:B8:17
X509v3 Authority Key Identifier:
keyid:2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:51:50:28:39:bd:a4:f6:06:e7:c9:dd:9a:19:0a:bf:50:7e:
69:d9:95:ae:c4:7b:e7:90:f4:d2:0f:03:f3:e8:39:87:a0:7b:
14:77:8a:5f:f6:fa:c9:b9:5d:f7:6a:24:05:f6:91:09:fe:e1:
e8:ee:50:f1:bb:43:a2:4b:f5:3d:9f:8c:65:ff:3b:32:95:bb:
09:46:ee:49:01:b4:53:24:d0:ea:24:3f:a5:0f:4e:da:65:02:
21:62:7d:3b:cd:18:ec:79:47:5e:af:bb:56:06:c5:c6:68:85:
1f:f3:c9:24:3d:5c:27:6c:3b:0b:af:ca:a8:b3:a0:57:30:af:
58:20:de:87:a7:29:b7:53:8e:42:7d:30:53:bd:06:dc:3d:14:
44:8b:f0:dd:a4:87:61:98:f0:f7:4c:18:cf:a2:4b:8e:e6:21:
08:77:1f:43:1d:b4:28:8c:71:70:e1:07:18:c1:91:6e:e0:ad:
f7:fd:bd:0e:69:f2:a3:bc:18:ff:37:e8:20:6c:f8:1d:a8:b5:
8d:15:10:34:d5:74:75:08:bd:db:10:60:ba:d9:0d:2a:57:70:
ac:46:42:f3:fc:09:7f:0c:65:0d:a1:87:39:8d:14:5b:84:89:
f1:af:e6:90:02:cc:55:b6:d4:6e:91:7c:d5:2c:d3:6f:bb:2e:
0e:fe:8b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:44 2025 by rpki-client