Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
File: K0ro4PiNDIw530T_pB4ywmJ8OhU.mft (raw, json)
Hash identifier: rTl+uzz/hPyi8/Lz8iPU6aQvFHSljSgr0IbU2q15Mok=
Subject key identifier: 35:6E:C1:39:BC:10:B5:F7:A4:2B:DF:FA:6E:79:A4:40:AF:02:ED:A1
Authority key identifier: 2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15
Certificate issuer: /CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
Certificate serial: 019A258A974A0B10692B0C2F08C71C10A503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
Manifest number: 0411
Signing time: Mon 27 Oct 2025 12:00:30 +0000
Manifest this update: Mon 27 Oct 2025 12:00:30 +0000
Manifest next update: Tue 28 Oct 2025 12:00:30 +0000
Files and hashes: 1: K0ro4PiNDIw530T_pB4ywmJ8OhU.crl (hash: mDwhDsIxY55eUeyVjY5FNcCtqz1fLeM2qcEJX/Dh9rg=)
2: RewjGr43EG1iIMj1c-4pVfpQCtU.roa (hash: yXODa8RGa/7nz4mBNAxVv6ZScKn5IPa0tTC093Zhd9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:97:4a:0b:10:69:2b:0c:2f:08:c7:1c:10:a5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
Validity
Not Before: Oct 27 12:00:30 2025 GMT
Not After : Oct 28 12:00:30 2025 GMT
Subject: CN=356ec139bc10b5f7a42bdffa6e79a440af02eda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:cf:4a:f8:e9:79:0a:02:43:da:dd:41:8b:
69:a3:cf:dc:7b:01:ce:05:d5:9b:3c:68:f7:80:42:
ff:45:52:dd:18:99:ba:b0:f8:da:0d:1d:9c:87:44:
ca:30:9a:b0:7a:e8:5c:e8:a7:b9:ab:0f:cb:f8:ac:
ec:a0:bf:7e:dd:7b:50:f4:b6:38:84:0b:63:a3:ba:
07:7b:4e:2f:9d:c9:63:ca:6b:5c:51:3b:0f:d7:60:
80:c4:c9:ee:41:0d:e8:e1:fc:3c:41:e2:11:8d:09:
ce:df:59:21:9d:74:3f:32:9b:4c:7c:d4:da:ef:38:
af:7b:67:f9:5b:a0:f8:54:d6:29:d4:b9:12:15:ea:
1d:41:1b:e7:5f:df:8b:2f:1a:00:1b:57:be:b0:f6:
0f:2f:33:e8:1d:5a:7d:57:fe:64:f8:0d:1c:78:c1:
14:33:22:f0:30:fc:76:1f:c1:c0:43:98:0f:83:9a:
75:e4:eb:6c:1c:32:1a:b7:30:1f:11:4b:3d:f5:d4:
70:2b:54:69:c1:0e:aa:2b:85:c5:5d:d6:ce:63:ef:
8d:4c:92:f7:9d:56:1a:5f:d6:8d:3f:95:f6:98:00:
2d:5c:ff:3a:c8:db:c6:b7:89:c7:d0:d6:f9:87:c2:
3d:df:99:12:0e:4e:40:87:05:13:98:8e:e8:42:35:
f0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6E:C1:39:BC:10:B5:F7:A4:2B:DF:FA:6E:79:A4:40:AF:02:ED:A1
X509v3 Authority Key Identifier:
keyid:2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:90:38:3f:36:0e:63:73:d6:19:5d:51:55:fb:89:af:16:75:
8f:1f:f4:a6:1b:e7:e4:47:c1:98:8d:94:30:33:53:be:3f:a9:
f6:63:07:9d:b2:e2:36:3b:9d:e2:99:42:b0:0c:0f:ab:7b:b9:
86:72:20:eb:8c:50:f0:40:42:56:33:25:34:f4:6f:40:10:87:
60:c7:05:4d:75:3f:df:de:73:4c:26:e0:e0:e3:06:c4:d4:a6:
7c:9e:dc:da:e0:f9:a2:9c:5b:5d:2d:ed:de:dd:5b:fd:6d:4e:
d5:f7:a3:93:7a:77:6c:a1:bb:ae:7c:b9:eb:50:91:f7:e9:a0:
07:a3:94:77:61:0d:72:d7:77:9d:bd:9f:72:b7:a5:5f:f6:c5:
a3:9f:ef:25:5a:9b:b6:a4:7b:40:04:91:22:4c:77:ba:4a:13:
33:b2:41:ce:20:13:29:36:f1:d4:9b:c9:15:49:e2:cf:5b:97:
a7:12:f6:40:33:67:78:f0:7a:6a:07:26:46:fc:dc:2d:81:ea:
a2:67:6f:ff:eb:63:34:26:2a:0a:d8:2d:97:18:76:07:5c:4f:
25:4f:4f:b8:c9:8a:f5:f6:13:75:f4:52:4a:68:d5:47:53:6c:
63:71:7d:0f:2e:d3:4a:a7:08:98:d2:11:2a:65:c0:32:da:77:
f1:5f:38:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:17:47 2025 by rpki-client