Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
File: K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json)
Hash identifier: RjqqfmwMuG/7D+nr61lc/TdfhTeQBpDj5mK1vlms+ww=
Subject key identifier: 93:4F:E2:97:AD:05:50:7C:93:1F:04:86:9C:DD:D9:5D:B0:90:4D:8C
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial: 019A2252442DCF3B9993BE682B34237BB348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
Manifest number: 0B0E
Signing time: Sun 26 Oct 2025 21:00:07 +0000
Manifest this update: Sun 26 Oct 2025 21:00:07 +0000
Manifest next update: Mon 27 Oct 2025 21:00:07 +0000
Files and hashes: 1: 553lKMIKwThYw8AISbuyrXf1Y3Y.roa (hash: nZE4YzzK77LLVsV2aH36whqra+m62dlwzfCf/rC05r0=)
2: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: k4Yi2U06Q6HjMhYPpx5ow8CrPMlVi53X4X2T4fQg5no=)
3: TzLZprRfeCh-Gvmzs5DuhB2A4E4.roa (hash: yX71+JwnuGNFxVBhBEfM6BQUby7eWkoWKbcUG9ykDEE=)
4: eAJf1shLltuAdbTmGWti91t3LTg.roa (hash: 8/RHu353a+jymfpXxCoIOn3xjWTjYdrxghHFteMflfs=)
5: gtgQ_ekA3bJACMevsOtUHfK0VcE.roa (hash: zrHM5OvfHbRJdC+cVcDeqn1NqWi0xhX/yY641YqUbM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:52:44:2d:cf:3b:99:93:be:68:2b:34:23:7b:b3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Validity
Not Before: Oct 26 21:00:07 2025 GMT
Not After : Oct 27 21:00:07 2025 GMT
Subject: CN=934fe297ad05507c931f04869cddd95db0904d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9d:9e:12:8e:47:af:a3:4a:90:f6:89:47:01:
1d:f4:6c:3d:2e:d2:28:26:ec:0e:e5:58:52:14:5f:
90:40:9a:19:3f:1e:cb:b5:d7:f9:33:c7:96:93:7c:
89:06:2d:99:08:a8:f4:7a:30:f7:e2:f1:a4:a7:e7:
ac:47:47:75:48:f9:6f:d3:97:48:07:87:aa:38:26:
5d:17:e9:8b:ac:20:8c:00:a7:cc:4d:22:84:7a:9f:
59:69:ee:ea:aa:d2:f0:8a:17:20:ac:7e:a8:b6:91:
15:84:e1:ca:8f:a8:1e:af:b1:c3:1f:b0:43:84:7f:
39:84:60:95:c0:1f:52:83:fe:33:23:33:9e:a3:b1:
c0:c4:44:0f:35:02:98:87:6c:c3:bb:46:7f:19:8f:
8c:ef:a3:36:d5:11:87:49:72:76:2d:8e:b5:f3:b6:
71:a0:3f:3a:8b:a6:ab:76:2d:24:07:26:90:dd:c5:
5d:e5:79:91:92:0e:54:42:0c:0b:3d:d8:21:57:1f:
b3:e3:44:b9:64:20:c9:a8:64:a3:65:16:4e:bd:d9:
43:89:db:98:67:35:2f:5f:87:75:c2:ff:95:8a:bf:
6d:64:e0:4a:ca:38:25:68:83:b5:bd:5d:67:f1:4c:
49:ab:e2:e4:52:7d:3c:33:36:a7:20:ee:22:34:05:
8e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4F:E2:97:AD:05:50:7C:93:1F:04:86:9C:DD:D9:5D:B0:90:4D:8C
X509v3 Authority Key Identifier:
keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:bb:4a:ea:15:b6:af:ef:8b:9b:0b:b5:c8:43:27:06:fd:9c:
7c:f5:5b:ca:9a:ad:52:6d:0d:c2:d7:0d:aa:13:e2:e7:73:e9:
db:15:38:97:09:cf:82:2d:42:03:44:f1:43:c7:49:f0:56:46:
fe:95:17:6d:b3:aa:e3:28:b5:71:e4:44:1b:f1:2a:cb:79:2e:
c2:d2:04:62:dd:28:24:d9:bb:8e:61:25:07:b6:ce:09:41:1f:
d4:34:16:40:64:19:45:86:b0:8c:46:bf:56:59:d3:af:31:0d:
7e:ef:d2:93:e8:c1:fb:7b:9a:a4:a0:e2:b7:ef:c4:fe:cc:d6:
5f:17:ea:3e:52:54:f9:dd:08:3a:7f:71:7a:d3:98:ab:85:fc:
e0:90:5d:e8:9b:22:e5:21:a8:b3:d6:af:be:7a:95:93:1e:d3:
a7:79:05:98:e1:e5:bc:2a:38:38:f8:2b:b5:f5:d6:d6:de:e8:
81:b9:c0:45:d7:c7:59:1a:2b:07:2f:61:89:e6:15:36:f0:d2:
18:05:b4:b4:10:8d:4c:e1:36:49:9a:5e:37:48:66:dc:a0:05:
22:f0:93:a0:7f:0b:fb:c3:eb:2a:eb:55:bc:dc:c7:70:94:e8:
53:10:95:94:f1:b8:0c:ac:c6:a5:96:ae:23:c7:78:e4:4d:3f:
b3:fc:21:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:40:45 2025 by rpki-client