Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
File: K2nm32CJ1NhhNocX6mbnthbHkMk.mft (raw, json)
Hash identifier: k6DItRXnYpYGOOt5z/pKYhiZwtCpHElMgtbjHLHIvQs=
Subject key identifier: 69:FB:E1:6F:5D:99:7C:9A:43:30:DF:B2:39:E2:3B:18:D7:C6:C4:1F
Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Certificate serial: 019A1428CE8B75B1F96FE8D37E16AFA37051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
Manifest number: 02BE
Signing time: Fri 24 Oct 2025 03:00:09 +0000
Manifest this update: Fri 24 Oct 2025 03:00:09 +0000
Manifest next update: Sat 25 Oct 2025 03:00:09 +0000
Files and hashes: 1: K2nm32CJ1NhhNocX6mbnthbHkMk.crl (hash: a9MaKq48g+32gV4EWEHjNO5+ZKn/psDljTUZidH/5GQ=)
2: k228-bewHScQpnRNpC4KIJkr3eY.roa (hash: MBjyb6nNGhWgH6/ZgxXCpJnqP9qVdkiHuZvRP3PD2BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 03:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:28:ce:8b:75:b1:f9:6f:e8:d3:7e:16:af:a3:70:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Validity
Not Before: Oct 24 03:00:09 2025 GMT
Not After : Oct 25 03:00:09 2025 GMT
Subject: CN=69fbe16f5d997c9a4330dfb239e23b18d7c6c41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:0b:0a:0f:65:90:8e:54:b5:d4:39:e0:47:
76:7d:38:e9:a6:07:2a:02:c1:6b:46:44:db:01:2b:
24:c6:e6:38:94:e0:72:4f:0e:90:f9:01:71:da:82:
48:ae:71:95:38:88:1a:21:90:fc:8c:a1:b1:8c:26:
e6:59:e0:2c:b8:be:65:4b:7d:21:ca:c3:75:85:08:
c4:2b:d7:47:21:3f:bb:bd:85:a4:cd:20:29:d8:07:
38:83:25:a0:e6:e4:fc:06:8b:b5:0e:8a:d7:17:d0:
ea:89:ed:1f:55:d6:29:33:5b:f7:e5:87:7f:31:fc:
0d:36:fd:d3:ca:76:ba:84:fb:30:1c:ed:af:55:0d:
1c:ed:c3:32:1c:b5:1d:f1:76:b3:14:8b:94:24:d4:
f4:b3:64:99:8c:b4:13:c4:a2:56:65:6c:4b:9a:04:
4a:9b:7a:05:18:b8:4a:f8:70:a8:97:ad:c1:0e:2b:
d7:02:0b:e5:4a:92:9b:72:bf:f1:12:e5:8a:bc:d1:
16:7f:da:2f:eb:3f:da:67:74:2f:1c:a4:13:6f:62:
d5:45:80:fd:8c:2f:e3:4d:47:8e:15:97:3b:44:8f:
ee:b2:d6:9c:2b:96:12:48:4c:1e:75:ba:cb:e0:17:
53:86:bb:65:c4:b1:88:f0:13:f2:db:28:f9:ae:8e:
31:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FB:E1:6F:5D:99:7C:9A:43:30:DF:B2:39:E2:3B:18:D7:C6:C4:1F
X509v3 Authority Key Identifier:
keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6a:b6:04:a2:06:ac:c0:b2:cd:0d:2f:e8:f7:d4:ae:69:45:
c1:37:2e:c0:49:ee:7a:2f:41:01:af:69:f2:45:9d:e5:d4:45:
5a:9b:cc:c6:cd:0c:62:d7:fc:f0:5c:af:c1:5f:3a:0a:a6:7c:
06:81:46:59:04:dc:cd:bd:69:34:01:a0:1b:12:b2:c8:af:20:
17:87:66:8b:c8:12:e2:11:12:86:3d:89:df:bd:b3:4c:2a:ba:
45:4a:70:ee:3b:dc:b6:7e:db:10:09:5d:c9:08:3c:c6:b6:05:
af:b9:b1:0d:10:85:e0:a4:8b:5c:7c:a3:40:e5:9b:78:cd:9b:
68:4b:94:f6:f4:d1:24:0d:6a:80:c3:ff:3e:3a:de:77:96:70:
a9:cf:b5:4a:98:9c:37:04:c1:55:c0:9b:ca:5c:23:3f:73:da:
0b:f6:e1:29:c7:3e:34:68:fa:6b:26:39:b8:5d:6f:1d:bb:a3:
f6:b7:23:12:24:ed:da:e5:14:fa:76:21:13:6b:4d:a1:9f:19:
66:6f:60:a7:a4:22:df:23:a0:0f:8c:4b:e7:85:83:bc:c2:83:
4f:a7:48:c1:7b:58:60:71:52:33:ec:cf:0b:45:36:73:a0:98:
96:5a:2a:26:36:a3:9f:ef:42:5d:13:3f:dc:42:fb:e6:0a:27:
da:78:24:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 11:51:20 2025 by rpki-client