Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
File: K_L644DF1MHigYEKNNuYg8nZ_y8.mft (raw, json)
Hash identifier: txRMhUhhnTFQQdxsFJpyObN7HQxSXrxL6l+MBEpSRGg=
Subject key identifier: B6:84:22:6C:87:B6:50:41:F9:BD:E2:03:B0:F6:F4:D4:1D:F6:86:A4
Authority key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
Certificate issuer: /CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Certificate serial: 019A73384FE6BE9D8D3014C90B98AE62B05B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
Manifest number: 06A8
Signing time: Tue 11 Nov 2025 14:01:01 +0000
Manifest this update: Tue 11 Nov 2025 14:01:01 +0000
Manifest next update: Wed 12 Nov 2025 14:01:01 +0000
Files and hashes: 1: 8964tiUCrci-dSkDlhkG-ckPcFg.roa (hash: Rx+Y3g/PNyAfTkv/fzvW90GXeVi8TmddmM6ip16OFZg=)
2: K_L644DF1MHigYEKNNuYg8nZ_y8.crl (hash: 1URZGXiQ3coGw5sdZq0npha3d3NWWYsJ8YO+bSX7G8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:4f:e6:be:9d:8d:30:14:c9:0b:98:ae:62:b0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Validity
Not Before: Nov 11 14:01:01 2025 GMT
Not After : Nov 12 14:01:01 2025 GMT
Subject: CN=b684226c87b65041f9bde203b0f6f4d41df686a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:3d:62:52:a6:00:f6:33:f7:08:82:f4:64:
f2:42:4a:1f:2b:36:28:a4:e8:cc:c3:9e:06:6d:17:
3f:41:e9:b3:75:a0:1c:eb:5e:d1:5c:a9:dc:c7:3d:
b4:99:23:a7:08:98:fd:6f:14:3c:e6:03:cf:9a:30:
66:68:90:7a:e7:bf:33:55:9f:6e:5e:b1:79:6c:e8:
d5:ad:d8:ee:05:c3:3f:5f:88:dd:7e:dc:5e:39:4f:
1e:28:ef:6f:3c:dc:a3:dc:6b:84:2f:cd:16:c6:31:
75:0f:a2:51:86:4a:79:6a:a7:ea:5a:3c:84:99:45:
85:28:1e:75:05:70:93:e6:1c:59:a1:37:48:bc:d3:
8e:6d:30:57:2f:1d:f8:40:3f:6b:16:bb:5e:9a:5f:
31:12:02:ef:31:67:85:03:db:2a:98:bd:ef:c3:34:
1a:94:47:6e:b1:21:db:0c:30:ba:a2:50:f5:51:b2:
f1:ca:ec:a4:cd:e9:ec:4f:84:c9:dd:88:07:10:a7:
3c:0d:69:75:5e:c3:63:2b:72:8f:c3:ee:ee:e2:3b:
a3:06:ee:13:d0:70:53:48:59:b0:d4:24:38:ea:7d:
e4:a1:61:bf:0c:47:ed:cb:24:f1:93:3a:70:20:31:
23:e2:ea:8b:8d:ab:7e:6d:31:68:29:68:d8:7c:e5:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:84:22:6C:87:B6:50:41:F9:BD:E2:03:B0:F6:F4:D4:1D:F6:86:A4
X509v3 Authority Key Identifier:
keyid:2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b7:a7:aa:bf:22:9e:aa:71:9a:53:57:8f:e2:d7:05:47:d9:
93:4a:1d:4b:5d:4c:f4:15:09:31:28:ef:ca:e1:27:26:41:fc:
63:c1:c0:fa:66:1e:97:d8:85:aa:0f:ae:a2:38:14:90:93:05:
28:5e:12:77:5b:a7:0b:04:20:13:90:7d:52:19:e5:23:14:f6:
78:fe:e3:d4:6a:74:31:d8:c5:45:d5:54:84:13:7d:3c:df:a6:
71:4c:5c:f2:86:f7:24:bc:18:b8:a0:d5:37:b6:4e:93:02:98:
6b:3a:78:e3:68:8e:18:22:e6:4d:ce:93:06:02:4b:de:70:68:
71:fb:83:24:e7:12:c9:70:6f:15:fd:e2:ee:5d:c7:de:c0:bb:
91:0f:40:4b:cc:6a:72:e3:39:66:32:25:b8:ab:4b:c0:57:50:
3a:ff:87:4e:0b:26:cc:67:8f:6e:d6:1d:be:31:f0:27:52:e5:
f6:50:47:f9:1d:ae:1c:6f:cb:d7:7d:ad:32:e0:03:f0:fa:ac:
2d:d9:33:5a:08:10:b8:7b:9c:51:d8:5c:52:fd:3c:58:ca:5d:
52:f6:d3:82:08:4d:21:9c:b7:c7:ff:f6:96:53:f2:6f:f2:1c:
7d:65:ca:e4:87:fa:c6:94:17:0f:cb:21:a9:19:81:9c:6d:e1:
88:9b:a7:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzOE/mvp2NMBTJC5iuYrBbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZjJmYWUzODBjNWQ0YzFlMjgxODEwYTM0ZGI5ODgzYzlk
OWZmMmYwHhcNMjUxMTExMTQwMTAxWhcNMjUxMTEyMTQwMTAxWjAzMTEwLwYDVQQD
EyhiNjg0MjI2Yzg3YjY1MDQxZjliZGUyMDNiMGY2ZjRkNDFkZjY4NmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNE9YlKmAPYz9wiC9GTyQkofKzYo
pOjMw54GbRc/QemzdaAc617RXKncxz20mSOnCJj9bxQ85gPPmjBmaJB6578zVZ9u
XrF5bOjVrdjuBcM/X4jdftxeOU8eKO9vPNyj3GuEL80WxjF1D6JRhkp5aqfqWjyE
mUWFKB51BXCT5hxZoTdIvNOObTBXLx34QD9rFrteml8xEgLvMWeFA9sqmL3vwzQa
lEdusSHbDDC6olD1UbLxyuykzensT4TJ3YgHEKc8DWl1XsNjK3KPw+7u4jujBu4T
0HBTSFmw1CQ46n3koWG/DEftyyTxkzpwIDEj4uqLjat+bTFoKWjYfOX51wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaEImyHtlBB+b3iA7D29NQd9oakMB8GA1UdIwQY
MBaAFCvy+uOAxdTB4oGBCjTbmIPJ2f8vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS19MNjQ0REYxTUhpZ1lFS05OdVlnOG5aX3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xM2UxZmYtYTVkMy00NGNkLWIxYmUt
ZmJmMGVkM2Y5MTU3LzEvS19MNjQ0REYxTUhpZ1lFS05OdVlnOG5aX3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8xM2UxZmYtYTVkMy00NGNkLWIxYmUtZmJmMGVkM2Y5MTU3
LzEvS19MNjQ0REYxTUhpZ1lFS05OdVlnOG5aX3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLenqr8i
nqpxmlNXj+LXBUfZk0odS11M9BUJMSjvyuEnJkH8Y8HA+mYel9iFqg+uojgUkJMF
KF4Sd1unCwQgE5B9UhnlIxT2eP7j1Gp0MdjFRdVUhBN9PN+mcUxc8ob3JLwYuKDV
N7ZOkwKYazp442iOGCLmTc6TBgJL3nBocfuDJOcSyXBvFf3i7l3H3sC7kQ9AS8xq
cuM5ZjIluKtLwFdQOv+HTgsmzGePbtYdvjHwJ1Ll9lBH+R2uHG/L132tMuAD8Pqs
LdkzWggQuHucUdhcUv08WMpdUvbTgghNIZy3x//2llPyb/IcfWXK5If6xpQXD8sh
qRmBnG3hiJunvw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:00 2025 by rpki-client