Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
File: K_CgGXhoxtjDTdFrP0TezF5CNvU.mft (raw, json)
Hash identifier: FtDfpG0eVQ66ot9NhjsXqSgcPXYd2mmmvy07E8NWGKY=
Subject key identifier: CD:67:B1:93:11:37:05:73:30:A4:4C:A2:A9:DD:25:4C:5F:77:92:04
Authority key identifier: 2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
Certificate issuer: /CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Certificate serial: 019A71B94C97F0EF5AC09996DC96AF62713B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
Manifest number: 0ED7
Signing time: Tue 11 Nov 2025 07:02:40 +0000
Manifest this update: Tue 11 Nov 2025 07:02:40 +0000
Manifest next update: Wed 12 Nov 2025 07:02:40 +0000
Files and hashes: 1: K_CgGXhoxtjDTdFrP0TezF5CNvU.crl (hash: u99Jq0uuhzdSMjgOuZzZqYOLIbW2AYnS/6RNcspaL04=)
2: cwewYqqUz_DTY7N101NBNvby5-A.roa (hash: 12Ilbr32JYBfPHCal30nzRY5XUe8GWiDmB7OIucWhgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:4c:97:f0:ef:5a:c0:99:96:dc:96:af:62:71:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Validity
Not Before: Nov 11 07:02:40 2025 GMT
Not After : Nov 12 07:02:40 2025 GMT
Subject: CN=cd67b1931137057330a44ca2a9dd254c5f779204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:00:64:73:e8:e2:ac:03:d6:9a:2c:46:b4:
c1:45:d8:cd:de:af:4c:90:84:d7:2a:d6:24:ad:e0:
f1:0c:e2:7e:c0:e8:04:03:fe:66:20:e2:25:69:9e:
37:1f:79:17:11:af:a2:e4:9f:2f:d2:04:49:d2:39:
6e:93:79:de:8f:8b:30:5f:25:08:0c:4e:30:48:6a:
2e:76:4c:54:64:c5:2c:bf:fc:2f:f5:1f:76:5c:cb:
62:56:09:d6:fb:0e:79:2c:ab:4c:93:ba:33:fa:ca:
53:2d:e3:ea:e2:29:6e:ce:42:b7:de:bb:43:20:61:
b4:87:db:c4:94:d1:5f:54:fd:1f:d6:33:37:48:05:
0a:49:27:c3:0b:da:12:98:72:a5:d4:4f:b4:20:26:
e5:63:06:af:88:24:44:a4:7d:9c:c1:2c:d7:28:e6:
78:a5:eb:75:7e:e6:62:7c:23:89:a1:d1:f8:56:6e:
12:41:4a:6b:b9:cf:c4:80:27:4b:ec:8e:64:55:84:
d4:d9:4d:6c:3b:55:b3:05:0e:b0:39:3a:ec:9b:81:
dd:c8:8a:60:8e:4b:97:23:11:51:6d:ed:e6:3e:7e:
a3:24:27:0c:92:af:64:03:62:43:42:cb:7a:50:0d:
41:87:20:72:d8:b6:f0:79:8c:6d:fb:f8:fa:08:0f:
fe:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:67:B1:93:11:37:05:73:30:A4:4C:A2:A9:DD:25:4C:5F:77:92:04
X509v3 Authority Key Identifier:
keyid:2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:43:47:1d:91:91:10:64:05:1b:12:da:27:73:7d:8f:4f:d0:
95:eb:5a:f5:c6:7e:a0:83:6a:50:b2:30:d7:4c:bd:cc:3c:a8:
d9:31:2a:ff:67:58:36:d9:55:9a:03:5c:3b:28:1e:49:d5:d1:
75:43:fd:c7:2d:d2:b5:81:55:8c:10:7e:0a:1b:71:d3:20:5d:
25:bf:a6:73:01:01:b8:c2:bb:1b:f8:30:0f:7f:1b:fa:18:8e:
f6:93:2e:4e:71:fe:d2:1b:c2:86:34:3e:39:e0:15:2c:9e:bb:
e4:ff:ef:dc:9e:8d:a9:52:1b:ae:8f:00:38:dd:fd:6e:51:d6:
1c:26:b9:b3:a4:27:1b:ff:bc:44:c6:80:d7:09:6f:57:90:c4:
14:b9:ea:63:87:bc:74:5c:77:4f:c4:86:b5:a1:73:f7:2a:3a:
2b:71:76:d2:04:01:5f:df:94:5f:8c:80:ef:26:92:bb:07:8d:
5b:8f:7f:ee:b1:44:7a:93:c0:1a:16:61:f7:ed:35:ed:86:81:
5d:67:9b:8d:69:98:b3:07:fe:5b:bd:9b:ef:5b:6d:3c:85:81:
b6:51:c8:8b:54:53:bf:f6:4c:c8:fa:ae:68:68:3f:4e:b5:a1:
bd:68:68:11:d3:a2:15:49:c0:a3:9c:2b:f1:f8:1f:e9:28:33:
28:c2:db:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:14 2025 by rpki-client