Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
File: K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft (raw, json)
Hash identifier: MBBR+Ga/rxZObnw/s6OLzAf6fBTS9bJ+d69g95JME7Q=
Subject key identifier: 14:FE:5F:85:45:10:BF:74:4A:62:AB:94:7C:4A:3F:D9:C4:C6:78:D1
Authority key identifier: 2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D
Certificate issuer: /CN=2b73aa8437bc6723519d0f320bf1f1704141a53d
Certificate serial: 019A714A3269ED5B403C1643DF65C2E7109B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
Manifest number: 04E8
Signing time: Tue 11 Nov 2025 05:01:19 +0000
Manifest this update: Tue 11 Nov 2025 05:01:19 +0000
Manifest next update: Wed 12 Nov 2025 05:01:19 +0000
Files and hashes: 1: K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl (hash: 3xOns6+LlOCTm+eZDW8s2XJSzWw1kABR/qzZc7GpETU=)
2: Sz60tJGpfPEIPRKoNyD58l9TIHk.roa (hash: N59T40jObwP6xQKwd5i1QLcMPk2PBgJ5eVUrj8bdLR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:32:69:ed:5b:40:3c:16:43:df:65:c2:e7:10:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b73aa8437bc6723519d0f320bf1f1704141a53d
Validity
Not Before: Nov 11 05:01:19 2025 GMT
Not After : Nov 12 05:01:19 2025 GMT
Subject: CN=14fe5f854510bf744a62ab947c4a3fd9c4c678d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1c:30:a5:2c:df:a4:98:6f:65:17:d6:d1:47:
ea:b4:91:c8:7e:f6:e4:9e:1f:ae:17:bd:72:0c:db:
8b:0f:4b:41:8c:61:d4:b2:43:f7:18:f7:97:ef:4d:
15:56:d7:26:05:0d:cd:68:d6:52:27:21:ea:78:55:
97:1f:52:18:86:1f:e4:a1:73:6d:49:ec:7d:a5:ed:
79:79:2b:21:0a:da:5e:d2:ec:bc:31:cf:9b:17:62:
f7:96:f7:f5:82:ef:d1:b7:5b:fc:46:f8:08:7a:ad:
f1:99:44:8c:c9:af:ca:83:d4:bf:a7:75:6a:ce:16:
58:35:b2:fb:21:5f:ea:b0:1b:f8:53:df:91:df:10:
4f:1f:0c:3e:43:e3:a1:a7:5a:ba:f5:2c:c5:8b:d0:
48:78:bb:95:ec:2c:b0:49:4f:0b:e7:34:4d:55:45:
28:16:5d:29:41:ff:43:a0:86:94:7e:98:13:9d:f5:
67:56:d2:38:d3:5d:b5:4a:61:f7:4a:67:fd:fe:df:
f3:54:96:c1:f1:a4:b4:18:7c:8c:a5:00:49:20:c9:
1c:0e:09:bf:ab:a0:ef:cd:41:e7:bb:02:91:5b:1d:
e3:23:f0:71:c2:36:c1:91:21:80:14:66:d1:a4:50:
92:bf:3b:ee:fd:2f:8a:39:62:e5:62:bb:37:bc:68:
fd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FE:5F:85:45:10:BF:74:4A:62:AB:94:7C:4A:3F:D9:C4:C6:78:D1
X509v3 Authority Key Identifier:
keyid:2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:11:1a:ee:8e:b0:37:4a:db:d1:4d:e5:5c:af:f7:8a:c0:54:
0f:b8:fb:e8:c7:bf:fa:3a:80:1c:7b:13:fe:21:8e:5e:69:81:
ad:68:23:b5:c5:56:ad:fd:4d:bf:fb:57:6a:a9:6c:f4:cc:8e:
7d:fc:95:25:da:6e:c5:ba:d4:19:25:9b:f6:1a:a2:83:bc:e7:
44:f0:6f:1e:45:05:8a:56:73:21:8f:56:d5:92:f6:86:b0:ec:
4f:76:d9:58:71:ae:04:a2:78:44:e7:a5:5c:6f:2e:23:46:84:
e8:71:29:25:1b:b4:fa:96:21:09:b8:7b:d2:73:49:10:a4:f0:
d4:19:2b:00:b1:bc:12:02:5f:75:98:2d:76:bb:fe:2b:05:87:
3b:20:3a:75:37:6e:38:f4:22:49:be:ac:59:b9:a8:e7:45:be:
95:bc:41:4b:06:14:92:8b:b5:11:1c:0b:1d:f1:29:f0:a9:95:
55:12:90:b5:4d:41:de:07:1e:39:75:eb:c2:a4:02:68:aa:30:
1c:0a:bf:a5:30:77:f7:4b:54:a5:3c:4c:1d:d0:85:6b:0d:8e:
f2:99:b4:47:63:aa:d8:e1:2f:07:eb:bd:d4:ca:01:1a:2f:db:
d4:41:4b:c8:43:d0:68:4a:23:2a:a7:0b:e8:b7:e7:d1:b9:48:
65:d1:5b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:11:17 2025 by rpki-client