Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
File: K03fo7vxW8Hbhdg3maAbmGmtXOc.mft (raw, json)
Hash identifier: Pf+vhyWqmifTCn8kfEVhvHiiETfERQcVMwLwCn4Xa1U=
Subject key identifier: C2:14:CA:1B:66:01:E9:4E:FE:0B:25:06:67:59:EF:3A:18:DE:86:53
Authority key identifier: 2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
Certificate issuer: /CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Certificate serial: 019A1EAE26A368386021003C1F06DAEE799E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
Manifest number: 05E8
Signing time: Sun 26 Oct 2025 04:02:00 +0000
Manifest this update: Sun 26 Oct 2025 04:02:00 +0000
Manifest next update: Mon 27 Oct 2025 04:02:00 +0000
Files and hashes: 1: IlzfTHCX--ryHCCh1ym927r2NiI.roa (hash: FciYooHb2klECPV8l+c1FyHw/6m8DpTuCRKy7yclUjA=)
2: K03fo7vxW8Hbhdg3maAbmGmtXOc.crl (hash: R9mSqX2LmQSweXQwDJmuDWkG1wT2sm5V1rUDc0k2vRM=)
3: LA9bx3k0C7Na4-u8OH3eVdW5a1M.roa (hash: kQiZYiCrBnh88ITE24ugea51DvkHaqRGnV+SPvNj+zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ae:26:a3:68:38:60:21:00:3c:1f:06:da:ee:79:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Validity
Not Before: Oct 26 04:02:00 2025 GMT
Not After : Oct 27 04:02:00 2025 GMT
Subject: CN=c214ca1b6601e94efe0b25066759ef3a18de8653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:bb:9e:6e:d9:2d:71:24:39:e7:cd:ae:4b:
c8:4b:d5:e8:1b:24:80:46:27:dc:a4:d8:2e:f3:84:
c5:83:03:f9:5e:dd:2d:b1:db:01:db:0a:75:91:72:
69:4d:1e:29:b6:e0:6c:54:5f:c5:64:b2:32:04:e5:
0a:1e:c7:6c:75:e1:da:70:92:c3:02:86:9e:f7:08:
2d:45:8a:d1:54:f4:3f:c9:70:75:30:74:5b:7f:ab:
c6:c1:4b:1b:9e:03:96:d6:d3:97:60:4d:60:ed:4d:
cc:90:2c:6f:51:07:75:95:f5:33:ff:a6:05:c4:f6:
a6:6c:9b:99:0c:f8:47:9d:3f:6f:16:17:61:05:87:
22:c0:61:46:5c:1c:0d:79:59:36:8e:7d:bf:05:30:
49:a0:d7:84:25:f5:dc:1d:c0:09:f8:fb:75:67:13:
02:46:e2:30:67:9b:db:2c:0f:b1:fb:02:97:82:22:
6d:41:95:f2:53:79:4e:2d:a9:5d:db:68:7b:fb:f3:
61:b6:c3:64:95:33:04:a8:fc:3d:dc:5c:d8:43:ba:
9c:64:45:23:42:9d:d4:b7:c3:15:0d:08:30:d1:5b:
12:93:93:81:38:93:c6:16:09:4b:17:02:da:e0:d0:
5d:b0:44:b7:d8:ee:89:19:e5:24:70:80:0f:73:25:
2a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:14:CA:1B:66:01:E9:4E:FE:0B:25:06:67:59:EF:3A:18:DE:86:53
X509v3 Authority Key Identifier:
keyid:2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:49:79:6a:6b:4c:de:59:5f:5b:84:20:04:37:28:76:98:06:
24:b1:7e:43:b2:6a:ab:81:50:72:7e:9b:13:c6:fe:af:93:6b:
15:a3:45:57:af:43:0d:38:48:e3:90:47:1c:13:d3:7f:7d:4d:
c5:db:b7:d7:d1:09:f2:94:02:8c:99:60:92:e9:cc:fa:b7:17:
ff:c5:81:51:07:57:14:85:ca:95:3d:df:53:86:2d:f1:47:f9:
d3:1d:e4:ab:7a:73:04:c3:b2:af:ff:fb:91:8a:a6:75:88:18:
cc:9c:fc:e3:3d:5c:9b:f2:54:48:b0:07:d9:ce:c9:2c:95:05:
3f:55:27:8d:55:14:eb:f7:31:c1:c0:47:e9:4a:06:19:b1:b2:
d1:b4:5c:92:07:2e:ca:e6:3b:92:0a:6e:8e:81:f4:84:98:19:
21:a8:89:11:4e:de:5f:1d:b1:6c:53:a1:15:99:e7:cb:a9:5b:
bf:07:6d:ab:49:1a:9d:ec:46:48:ee:3e:b0:7c:08:04:54:7c:
7f:e5:ef:c8:90:14:08:ce:a9:98:85:28:cf:e2:34:8b:97:22:
d7:3d:f0:13:e2:a2:54:0b:c3:16:5f:5e:7e:cd:23:5d:07:68:
eb:b9:56:f2:a6:73:03:39:7c:e3:9a:d6:c0:1a:37:00:8d:28:
7a:6a:dd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 07:10:09 2025 by rpki-client