Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
File: K76x-Fza0UW9L5et3QlB0y11jec.mft (raw, json)
Hash identifier: ndzNFzuK2Rs5C1MyutIk9PLbYQpgiX6xevyLwFZf6ZM=
Subject key identifier: 27:3E:8B:96:AC:B3:92:55:83:AC:D2:92:63:5C:63:72:B2:1B:37:79
Authority key identifier: 2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
Certificate issuer: /CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Certificate serial: 019A1EAC7B04C261CCF670802703CD4825E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
Manifest number: 045A
Signing time: Sun 26 Oct 2025 04:00:11 +0000
Manifest this update: Sun 26 Oct 2025 04:00:11 +0000
Manifest next update: Mon 27 Oct 2025 04:00:11 +0000
Files and hashes: 1: 8Zt8UHUusx_XQrfwEnBO0zgttVQ.roa (hash: 99GtToN6lghv1t5UehgYXJgLt9TbyulNLZ07g/FzqO4=)
2: K76x-Fza0UW9L5et3QlB0y11jec.crl (hash: nX5zbskwYdE8BIzpKJ1FijW4M7sws1W1zggxXy2MfFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ac:7b:04:c2:61:cc:f6:70:80:27:03:cd:48:25:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Validity
Not Before: Oct 26 04:00:11 2025 GMT
Not After : Oct 27 04:00:11 2025 GMT
Subject: CN=273e8b96acb3925583acd292635c6372b21b3779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:cf:86:e9:aa:9f:24:8a:e9:8c:04:c7:86:
76:ca:3a:ea:5f:ca:e2:37:0b:b6:15:45:56:fc:dd:
53:db:49:9d:e2:24:6d:cc:52:03:27:64:b2:45:21:
5f:03:71:18:09:d2:dd:63:f6:1f:46:ca:76:49:7d:
b9:90:fd:fb:bc:a1:7c:a4:db:65:ef:5c:bc:b5:42:
c0:2c:cd:21:67:2c:00:d7:36:b9:46:51:6f:ab:e7:
71:9c:de:83:33:e3:39:a5:34:7f:f8:3b:8c:5d:7b:
82:fe:b1:f7:7b:de:98:f1:9e:a0:53:51:4a:d9:da:
7c:f5:aa:ab:1e:0e:45:5a:52:73:bb:70:d9:2e:55:
ad:c9:4a:bc:85:4f:39:d3:fc:52:06:35:e1:42:a2:
b0:55:fa:98:fa:df:9c:28:b3:10:d8:09:02:7b:74:
ed:dd:6f:03:69:30:3e:56:0d:60:36:5c:02:10:e2:
97:99:d8:b0:b8:be:d1:37:b6:eb:14:d3:72:d2:db:
57:c2:f1:ad:a3:5d:64:73:7d:f3:8c:1f:f8:4e:02:
a7:63:96:99:a8:ca:32:33:2c:cb:aa:79:1f:3e:5b:
93:99:52:f9:fe:62:95:bb:00:91:bf:09:87:c7:10:
d8:44:ae:61:1f:d0:cb:de:44:82:b2:a0:0f:20:0e:
08:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3E:8B:96:AC:B3:92:55:83:AC:D2:92:63:5C:63:72:B2:1B:37:79
X509v3 Authority Key Identifier:
keyid:2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:f4:d2:1b:a4:08:af:17:cb:36:85:4c:5a:6c:8a:be:2b:5b:
d6:96:af:47:91:99:9f:44:24:be:a2:61:8a:45:79:0c:14:dc:
db:02:a1:8c:fb:25:75:35:85:61:b3:ba:e2:a1:b4:77:dd:34:
ee:70:86:b0:7b:ef:d6:1a:27:06:76:c8:8b:8a:e2:cb:6e:05:
bb:9f:d4:b4:4e:bb:ea:8b:d2:d9:8d:89:64:3a:34:c6:f2:19:
f5:bf:1f:67:c2:a8:01:46:69:33:55:1b:66:81:61:bd:cd:2f:
70:68:64:36:fc:26:25:da:1a:a8:f6:5a:b2:45:d7:c0:89:91:
c0:72:0e:ef:2c:81:7a:66:c2:33:cd:6e:32:3d:a6:42:3a:23:
35:e2:88:7c:b7:83:2d:da:9c:c4:68:f2:a3:0c:dc:5e:3f:8e:
57:20:91:84:ff:4b:5a:79:76:09:4d:76:4b:35:3a:b8:8e:ff:
6d:b2:61:18:80:e4:88:45:72:ba:97:11:42:51:c0:29:c8:e9:
9f:e6:22:d1:01:30:2c:6f:49:bc:d6:22:fe:54:9b:a2:1c:ad:
b8:b8:0a:f0:7b:1b:78:29:17:cb:47:91:34:1c:05:51:43:14:
b2:46:1f:8b:ae:d7:32:05:6b:50:97:9b:f2:fc:e1:71:17:b0:
78:8f:1f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 09:38:13 2025 by rpki-client