Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json)
Hash identifier: 0zYWrt02jFmnwdNTN71942V+nVl4Pnk7PBnWju/wwxM=
Subject key identifier: 8F:1E:96:E5:92:70:6E:C4:4E:8E:B3:49:8E:07:34:4A:D4:1F:51:C1
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 019A23D2C824AE7A6F3A63632B129C3DDCC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 04:00:07 +0000
Manifest this update: Mon 27 Oct 2025 04:00:07 +0000
Manifest next update: Tue 28 Oct 2025 04:00:07 +0000
Files and hashes: 1: DKeRVwoenDXIzrWNyLGIpQggDrs.roa (hash: 5p/rY96e/v7nlh4ZVNWfswSCV1H2nosoTkJoyOAXVkI=)
2: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: Y+AgFM2nLJ7ZeeRo3JJU40i4DWn5j/47i6tkiQr+kbs=)
3: eznu2Fem8RjruQG_sIAcpJ1U-kc.roa (hash: dfwMs4TEX6QB36UycDExtNC5BAEKzqi0QvSQVdjONUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d2:c8:24:ae:7a:6f:3a:63:63:2b:12:9c:3d:dc:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: Oct 27 04:00:07 2025 GMT
Not After : Oct 28 04:00:07 2025 GMT
Subject: CN=8f1e96e592706ec44e8eb3498e07344ad41f51c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:59:12:45:81:a3:89:2f:44:5b:51:f0:29:da:
20:cb:bf:2f:4b:dd:99:c6:7a:f3:65:38:6a:2b:76:
12:55:ac:8d:12:a1:33:94:2b:c8:35:fd:75:71:1c:
c2:fa:cf:15:b7:e3:bb:2f:e4:f8:3d:0c:84:45:89:
73:c2:13:79:f8:d2:5e:59:f6:88:5c:b5:3f:85:77:
1f:0a:b7:6f:4f:6e:31:1c:d6:31:ea:a9:ac:80:31:
e2:a8:d4:dd:5c:3f:a6:b8:c9:bb:cf:38:92:24:b7:
b4:09:d2:0b:f1:ae:45:a8:33:ac:4c:82:d7:bc:e8:
92:87:84:fb:00:21:46:bb:2b:73:62:4e:0d:2d:98:
fe:07:ae:5c:61:9d:e5:47:95:4b:5d:59:14:22:b4:
6c:7f:cc:42:12:cf:12:8c:4e:1d:82:af:66:32:87:
c3:f8:49:ea:be:c6:f7:4d:a6:be:47:0b:c5:c6:ac:
9b:03:ba:3a:11:dd:be:1b:54:c1:2f:18:fc:6b:c6:
23:c2:24:62:c8:ef:6a:5e:06:d0:c4:27:69:cd:6c:
80:4e:f8:6d:23:5d:68:45:a0:38:a2:82:13:1c:34:
3f:4b:ff:98:11:7c:c6:d0:cc:9a:7b:11:3b:fe:72:
39:4c:36:c3:6e:6a:bc:bc:93:f9:23:33:7d:b5:87:
5f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1E:96:E5:92:70:6E:C4:4E:8E:B3:49:8E:07:34:4A:D4:1F:51:C1
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:be:60:40:2d:7b:ef:43:b4:4b:1a:93:c8:75:95:4f:1d:ce:
c9:79:19:f5:ca:42:87:cc:13:4c:9d:75:bf:6d:0f:b2:fa:24:
3f:96:dd:3c:bc:da:95:0d:36:8f:b6:9c:91:53:f4:a0:7f:57:
3b:b0:3f:f6:41:6b:ee:c2:d6:7b:85:57:91:b7:3f:f4:05:6e:
99:27:8b:01:fc:56:3a:5b:53:19:b0:d2:46:01:91:67:f5:d7:
b2:7c:c1:c9:88:07:92:5b:1b:99:d7:d5:65:78:e2:6b:b7:40:
10:c1:53:02:7e:a3:55:83:ce:be:de:7a:c8:0f:3c:42:65:d7:
ce:4f:f3:49:91:b1:5e:eb:a4:25:e0:12:cd:09:59:95:4f:15:
44:63:92:dd:2d:fb:c6:33:18:fa:0c:2a:2d:22:9c:c5:20:9a:
c2:ac:a1:eb:9c:79:66:02:41:c7:9f:d4:f3:b3:78:bf:75:62:
bc:5d:c4:d6:53:9f:df:ab:75:d6:7b:a7:96:31:6d:79:98:30:
75:77:5f:76:2b:61:84:24:c8:6b:c7:c9:a3:77:9f:c0:95:f8:
f9:de:68:20:62:e9:72:ae:27:aa:93:d5:6a:3f:e8:f0:e8:c5:
5b:64:65:a2:e5:c6:ba:19:4d:21:36:10:2d:d3:7c:83:f1:93:
84:e0:2c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:04:30 2025 by rpki-client