Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
File: K3bhVwytdzn9C_9gYy4FvAb2QuM.mft (raw, json)
Hash identifier: wI9a8JmcAtU4p0MMPrAPpkIML6vSV2nT5qpoaRO6dUA=
Subject key identifier: 9B:B6:4E:00:61:8C:33:15:B0:19:4C:85:38:0B:8E:7C:D0:B7:14:C3
Authority key identifier: 2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
Certificate issuer: /CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Certificate serial: 019A337D55442936749ED49BD318E3324C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
Manifest number: EA
Signing time: Thu 30 Oct 2025 05:00:43 +0000
Manifest this update: Thu 30 Oct 2025 05:00:43 +0000
Manifest next update: Fri 31 Oct 2025 05:00:43 +0000
Files and hashes: 1: K3bhVwytdzn9C_9gYy4FvAb2QuM.crl (hash: w/0YfGJpE8fp5Q6O8nOpQSx20fRL/Ir4Oo0lDSvdvHE=)
2: _R8JganIA6Y5xqA_CejFzUDFPSs.roa (hash: E9VdkNaUTEKvw+Vgp2OrNs1qd+GYgpa3bopcEol5P3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 01:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:33:7d:55:44:29:36:74:9e:d4:9b:d3:18:e3:32:4c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Validity
Not Before: Oct 30 05:00:43 2025 GMT
Not After : Oct 31 05:00:43 2025 GMT
Subject: CN=9bb64e00618c3315b0194c85380b8e7cd0b714c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f8:ff:8b:72:ef:a2:c7:af:5b:ff:08:6b:ce:
f1:3d:1e:4d:b7:a0:f1:ab:79:76:6f:b1:fc:c3:95:
df:f8:eb:99:0e:bd:1f:9a:7c:41:26:0f:1a:e0:74:
38:3f:61:a1:d2:34:0e:f4:1b:db:f1:db:d0:6d:3d:
7f:8d:de:0d:65:af:e5:36:30:d8:d1:7b:75:27:21:
a8:42:a3:5b:8a:78:53:a0:cd:b6:5f:32:02:2d:26:
8b:de:ce:92:1e:5b:4e:8e:eb:02:ad:ac:e3:5c:8b:
e0:57:eb:47:ab:c3:89:f3:03:ee:70:90:1f:74:2d:
43:d1:d4:d3:a3:e5:3e:dc:f0:4a:ce:48:07:5c:63:
50:e0:2b:01:bc:32:1c:53:e0:2e:9c:a5:1f:ca:f8:
27:da:78:dd:46:57:c9:93:51:c0:63:31:2f:2b:e7:
4a:60:8f:cb:7b:61:c9:f0:04:e9:a3:7a:11:fd:34:
50:65:0c:64:7b:d5:69:59:13:a4:ec:10:31:51:35:
2c:89:63:12:7a:7d:4d:70:ab:73:aa:47:02:1d:58:
7a:09:5f:89:08:7c:91:71:fd:82:c9:56:93:b4:4b:
a0:0c:96:00:0d:43:d3:bf:d2:ed:99:45:75:73:d7:
79:2f:20:62:92:ee:a3:1a:e0:80:a6:5d:d5:a6:38:
2f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B6:4E:00:61:8C:33:15:B0:19:4C:85:38:0B:8E:7C:D0:B7:14:C3
X509v3 Authority Key Identifier:
keyid:2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:60:7d:51:6c:57:8f:23:1a:23:15:e6:88:3b:ce:f7:d0:dd:
48:04:0f:ac:1f:a4:25:e5:b3:d0:45:88:7f:b9:68:01:4d:37:
67:39:6a:57:1c:5b:6a:08:94:06:49:70:8f:e8:3c:77:d3:55:
42:e4:c1:3b:43:94:0d:60:4d:51:ee:c2:bf:72:c9:a6:34:0d:
4d:4c:f2:4c:e1:2f:3b:a8:0d:01:e6:e9:50:48:52:2a:19:ca:
98:a7:a0:e2:f6:b5:65:43:af:76:a9:2c:24:2e:60:eb:5d:d0:
2c:f1:6b:49:af:a1:1f:ac:01:3f:27:ad:e4:4e:d8:11:c0:a1:
fb:3d:9a:73:0d:a7:09:e4:b1:eb:e7:fe:c6:37:c2:a5:84:83:
4b:c2:ee:59:2a:ad:3b:51:42:a6:c9:5f:f0:d4:30:9e:e8:5a:
90:be:31:ee:6e:1f:af:4d:19:a5:0a:7f:ce:72:2a:77:f5:c2:
4e:19:c3:27:21:d0:18:95:95:9b:16:52:ab:7d:55:05:cf:d3:
cb:68:a5:b5:5b:9a:27:2c:f3:b8:53:1f:5b:0e:a6:dc:4d:64:
87:e9:65:96:0d:81:4e:9e:11:d8:8f:0d:fd:b5:90:b7:ae:51:
48:1e:2f:bd:82:2a:c0:1e:47:5e:1e:42:aa:cc:83:72:89:05:
2a:3d:ab:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 07:21:11 2025 by rpki-client