Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
File: K2ePFPiyKI1JVXym-xvfR5OSfc4.mft (raw, json)
Hash identifier: 9Th6wNcxyGsK87uF4/F+dkapz+GzEu7Z114WQMvouyg=
Subject key identifier: 3E:DC:16:9D:3C:3E:C0:DE:41:66:D6:42:CE:53:CA:88:08:B9:43:F2
Authority key identifier: 2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
Certificate issuer: /CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Certificate serial: 019A2B8C686F01967AC48313D8D0210BFD74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
Manifest number: 0EC7
Signing time: Tue 28 Oct 2025 16:00:13 +0000
Manifest this update: Tue 28 Oct 2025 16:00:13 +0000
Manifest next update: Wed 29 Oct 2025 16:00:13 +0000
Files and hashes: 1: F4GHMtEvNm46dM5TWDxthbQ6BA4.roa (hash: KVVBBRsYRigOW/uzk41RjMrk4PM1I4rBXcib4AOOQeA=)
2: K2ePFPiyKI1JVXym-xvfR5OSfc4.crl (hash: pCCa4X6b4FMIqyfQNTFNPxU3CE1yWnnlLAZfRJlLs1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 16:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:8c:68:6f:01:96:7a:c4:83:13:d8:d0:21:0b:fd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Validity
Not Before: Oct 28 16:00:13 2025 GMT
Not After : Oct 29 16:00:13 2025 GMT
Subject: CN=3edc169d3c3ec0de4166d642ce53ca8808b943f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9f:37:05:c4:07:b2:f7:07:a7:62:6d:df:13:
b5:f8:a0:18:c5:ff:d2:8a:ad:4b:7e:38:c1:f4:d6:
67:cc:3f:62:d2:fb:10:b8:28:98:3f:5a:fa:7f:23:
5c:79:2a:f8:c8:e8:25:1c:7c:49:4e:38:64:da:ab:
4b:63:35:96:04:9a:e1:62:9f:3e:39:b1:6c:40:87:
9a:28:23:41:2a:5d:15:39:76:48:ba:b8:04:c6:36:
31:d4:6d:c8:40:17:5d:3e:a7:58:5e:95:35:04:92:
df:f0:a5:b4:09:ca:e4:a0:24:fd:9d:7b:fa:e6:ff:
5a:a0:5c:13:98:98:0e:33:0e:d2:46:cc:cf:8b:6a:
02:46:16:f1:16:ac:ba:d5:66:eb:39:50:71:92:a8:
73:c5:c7:b3:09:88:89:3c:33:48:7f:06:41:67:b2:
90:9a:bf:5f:00:b4:b4:df:d9:f3:4e:bf:89:1d:00:
f5:bf:76:9f:63:38:a6:ba:12:18:4d:91:a9:cb:25:
b5:86:ea:f3:66:3c:b2:f9:cc:e1:19:d0:d3:be:f6:
41:83:d2:70:4d:c3:e9:bf:41:bc:d3:a7:1c:43:9d:
ce:aa:23:59:a5:a3:3f:ca:eb:10:13:4a:17:41:e2:
a7:cf:71:cc:99:43:6e:4e:ed:37:06:82:1b:4b:3d:
2e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DC:16:9D:3C:3E:C0:DE:41:66:D6:42:CE:53:CA:88:08:B9:43:F2
X509v3 Authority Key Identifier:
keyid:2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:37:1e:fb:e0:b2:b0:75:d4:38:d7:46:aa:2e:c1:4e:c6:1c:
64:66:5e:21:15:c3:b1:4b:1b:3c:7c:5a:4c:04:e7:a7:51:81:
ff:0d:03:3c:39:34:f0:b5:7b:3b:19:4b:b6:e3:e3:79:76:a5:
48:43:a0:6b:ed:40:af:3b:5c:00:1b:91:65:cc:97:39:e1:3d:
b3:47:b8:a7:b4:8e:16:d0:eb:bf:14:45:26:7a:54:08:ac:07:
94:5c:c1:fd:77:04:72:5e:4e:af:46:89:1c:e6:1a:51:4f:44:
cd:8c:5f:6e:f3:53:e6:ea:cd:c2:6a:bf:ae:df:1c:0b:e6:92:
97:e4:c8:6b:58:74:2f:33:a2:6c:bb:63:d9:d6:d6:45:dc:a8:
e9:c7:59:63:55:e7:53:f4:a9:3f:e9:29:4c:b7:6b:b2:e3:c2:
c5:34:af:c2:3b:7e:96:2b:28:0d:30:7a:d9:66:4a:f2:31:dd:
93:70:5d:11:c4:86:7d:c3:60:8b:55:42:71:de:a0:9c:6c:6b:
2c:a8:d2:3b:25:ac:ba:0c:67:f2:ae:07:e4:f0:d5:31:a8:9e:
65:b9:52:49:bf:3a:66:52:e1:5b:20:65:e1:36:0c:de:7f:99:
a9:0b:cf:cd:56:e2:41:ce:28:57:30:ca:b4:9b:e3:2e:2a:4f:
ff:d1:ed:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 01:32:14 2025 by rpki-client