Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
File: K0lf5W80diAmqUA18yDwqQt6JWY.mft (raw, json)
Hash identifier: XKzYePGXq2SEh2elrFXLrh4Ey2bB8AdS0ljbn7e0Wds=
Subject key identifier: 9C:1F:C1:81:85:67:BE:D0:27:D1:83:F5:CE:C8:7E:1D:9E:4E:9B:3F
Authority key identifier: 2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
Certificate issuer: /CN=2b495fe56f34762026a94035f320f0a90b7a2566
Certificate serial: 019A711370939A3594AEA0B295DCB038C7C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 04:01:30 +0000
Manifest this update: Tue 11 Nov 2025 04:01:30 +0000
Manifest next update: Wed 12 Nov 2025 04:01:30 +0000
Files and hashes: 1: K0lf5W80diAmqUA18yDwqQt6JWY.crl (hash: yHnL36L78SXF30uFx+7IlFRU+PvnMI0qxipDZm+EaVk=)
2: xWy_WK3zN7U168-WlDV1tLOFxms.roa (hash: 1F+oH+DvxsXdBv6L+suStKLkTpWpU6OO0n2cflrUK4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:70:93:9a:35:94:ae:a0:b2:95:dc:b0:38:c7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b495fe56f34762026a94035f320f0a90b7a2566
Validity
Not Before: Nov 11 04:01:30 2025 GMT
Not After : Nov 12 04:01:30 2025 GMT
Subject: CN=9c1fc1818567bed027d183f5cec87e1d9e4e9b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d9:f2:1a:5c:2d:7e:51:d7:45:92:60:fa:13:
f3:7d:c5:7e:7a:38:ef:4a:18:94:c5:b7:b1:77:3d:
ba:0e:bc:df:a3:7b:15:c9:a9:5e:47:94:ea:e7:cf:
c3:f1:ca:ce:2e:2b:7e:8f:1e:2f:9a:7d:63:47:f0:
f5:ad:36:1d:7e:a3:62:fe:26:77:96:ad:82:77:79:
0a:ae:bc:2d:23:d5:13:30:30:92:38:45:c9:4f:2f:
8f:26:d5:69:9e:65:37:c1:65:d6:c3:ef:88:03:d2:
3b:c7:fa:37:72:e0:e6:5e:af:f3:87:2b:1d:b0:7f:
6d:02:d0:4f:ea:6b:4d:7d:1b:9b:4e:fc:fb:87:90:
a5:8f:57:a5:52:6f:1d:95:3f:7f:9e:94:44:b1:58:
35:75:f4:f8:c8:bc:1c:0f:ea:53:56:dc:fb:9f:b4:
ec:d9:d9:db:f7:bc:9a:7a:48:cb:7b:3f:8a:65:d4:
f3:fc:1a:b0:e9:59:ec:e7:cb:3f:99:7b:9c:f7:23:
d7:a6:64:3c:02:5e:94:f2:cd:de:40:a5:87:05:17:
f5:18:f6:e0:3d:23:15:9c:88:6c:31:55:2d:45:0c:
fc:cf:5a:c9:d9:ea:53:ff:51:ab:1c:e1:a5:b2:c4:
dd:10:40:c0:fa:7c:f5:e0:e3:f1:6b:15:f8:e4:e5:
ef:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1F:C1:81:85:67:BE:D0:27:D1:83:F5:CE:C8:7E:1D:9E:4E:9B:3F
X509v3 Authority Key Identifier:
keyid:2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:4b:25:f9:ec:f7:cf:10:99:ec:f8:67:fa:a1:6e:38:ef:61:
98:f8:2b:ad:b5:11:c2:2c:8b:c5:a2:4e:98:61:d0:05:31:69:
fd:62:ca:2b:63:ae:fc:af:ab:e0:41:ac:92:2b:65:fa:e4:80:
bc:ef:42:96:30:03:e6:8d:82:c5:b7:c8:d0:48:22:49:0c:a9:
fa:23:26:09:9b:c8:e7:67:90:90:7f:87:13:3d:f8:30:18:52:
f5:98:7c:fd:2d:6d:e8:c7:a4:70:78:9a:e2:e1:ef:de:3c:79:
7c:b7:f5:08:6e:7d:81:5c:33:4d:8b:24:7b:47:0a:6d:d1:1f:
ea:0a:12:77:5a:63:de:50:a1:90:af:d0:30:f3:9b:52:09:a7:
53:8b:7a:10:a8:9f:03:8c:2b:11:1f:85:49:8d:fe:68:a5:0e:
3c:e7:46:b6:f1:22:20:73:2d:7e:b8:a3:83:85:87:07:dd:58:
13:53:fe:72:20:78:61:2f:f8:07:29:78:cb:dc:bf:f8:bb:32:
da:60:98:9a:4a:5e:93:e2:b8:ee:08:2a:34:e7:d5:35:68:3a:
cc:18:b4:d3:5f:e9:3a:c9:36:99:ae:a6:0b:fc:20:5b:f9:35:
8b:19:1e:a6:1e:8d:e3:af:79:43:0f:0b:20:92:ef:5d:8c:24:
9a:ed:b1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:14 2025 by rpki-client