Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
File: K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft (raw, json)
Hash identifier: kzUhS8ov6aT2HNyO7fMgWz15f8gZJaSIO5oP/0uF/Qs=
Subject key identifier: C2:5D:FE:C9:B6:D1:AC:D1:1F:8A:B0:43:4C:CE:45:02:DA:62:9C:9D
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Certificate issuer: /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial: 019A214024EBA49E7AC149E135DD1C94C359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 16:00:43 +0000
Manifest this update: Sun 26 Oct 2025 16:00:43 +0000
Manifest next update: Mon 27 Oct 2025 16:00:43 +0000
Files and hashes: 1: K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl (hash: ZH/K7M7KtuBV90oATemAIqO1EojKh+FCMffnTdsWbQc=)
2: ltvzPx25u1h6KtyLg3u0jcOaPlk.roa (hash: 2f6Jvjn6F1N/MtDAOcMnV3ci6bmbSvFKgzVpnpXVDh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:40:24:eb:a4:9e:7a:c1:49:e1:35:dd:1c:94:c3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Validity
Not Before: Oct 26 16:00:43 2025 GMT
Not After : Oct 27 16:00:43 2025 GMT
Subject: CN=c25dfec9b6d1acd11f8ab0434cce4502da629c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:e7:ed:50:67:bf:6b:4d:87:7a:03:00:da:
aa:2e:1f:92:1f:1b:aa:ea:b6:ad:e1:97:09:2a:c3:
ef:c8:49:f7:87:dc:db:50:80:8f:46:1d:99:72:e4:
14:e8:97:2d:e6:9f:3e:39:46:1b:f0:01:07:f6:66:
49:9a:bd:7b:6d:05:65:35:48:f0:ea:c1:09:46:4b:
bb:a2:9e:ce:47:0f:2f:0b:9b:b6:31:e6:7d:61:0a:
98:ae:ce:83:a0:e8:c0:e6:0f:c5:9e:10:a9:7a:94:
12:5e:04:00:a4:b0:f3:90:10:96:0a:80:a0:c5:a3:
71:a6:55:fd:d1:01:ea:e7:26:eb:7b:57:1b:96:33:
7b:8f:60:07:fb:8c:54:1b:ad:4c:9a:2d:74:1f:87:
38:f4:fe:9f:35:6b:a1:95:df:b5:5e:86:d9:f7:4a:
47:08:82:d8:ca:5f:5b:79:0c:cf:5c:76:ad:2a:62:
74:d6:d8:48:04:d4:ba:53:75:90:2a:70:57:b3:87:
8e:38:64:9f:82:93:9f:76:f3:37:1f:c5:fc:5a:14:
33:eb:21:fb:17:ee:ba:88:21:89:4e:3b:ed:a0:3d:
64:3e:05:aa:59:03:bb:16:e9:65:c9:ac:dd:a0:54:
7d:1e:4b:00:fe:8e:be:97:f8:18:d1:37:b1:61:55:
1f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5D:FE:C9:B6:D1:AC:D1:1F:8A:B0:43:4C:CE:45:02:DA:62:9C:9D
X509v3 Authority Key Identifier:
keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a1:ed:89:0f:ad:de:ce:0d:37:17:83:5f:54:75:20:9c:e8:
00:ad:56:94:c5:46:f8:54:2d:a4:22:8c:e9:d6:7b:9b:d1:da:
3c:4a:30:23:5d:2f:f6:2d:fe:2f:fb:91:62:ff:b8:e7:31:f4:
b5:0c:d9:ee:da:ad:36:fb:75:8a:ff:2e:c4:19:55:4e:e9:20:
6e:2f:14:0d:06:81:3f:0b:5a:d7:33:82:54:64:e8:10:7b:38:
d2:23:a6:5a:bb:8d:f0:59:f5:ef:1e:70:51:3a:45:39:e5:4f:
16:a1:98:86:2f:d6:86:36:1f:d5:bf:49:62:2b:0d:b3:f1:aa:
26:ea:fd:fe:ad:a2:ea:8a:7d:4e:91:42:41:68:62:06:99:ac:
ad:17:17:0c:1c:5d:00:e6:0e:96:43:59:ab:d4:9b:ad:15:d9:
24:48:95:58:37:f3:c7:55:f0:77:30:1d:f2:05:5b:e3:7e:83:
32:9b:01:66:e5:24:0a:96:03:40:7b:e6:05:ac:77:68:81:50:
fe:b4:29:74:19:c5:85:10:0d:10:ab:7b:bd:7c:d4:2e:3c:73:
ef:49:df:d3:9b:f8:16:d7:e1:84:6e:20:fd:ed:6f:a6:59:67:
62:3d:e6:e7:9a:d1:bb:25:8e:3c:7b:f6:84:65:20:32:c8:b9:
23:de:3d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:23:59 2025 by rpki-client