Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
File: K-U9NAqL9Hwb800yVeEC77GBrRk.mft (raw, json)
Hash identifier: rZT7y4a5PZPxdkaqjokl84y3PyAnoOtErTMRzJ7xaGw=
Subject key identifier: 61:68:27:D4:97:CF:BB:11:0D:0F:B5:03:A6:CD:5A:3D:33:A6:21:7D
Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Certificate serial: 0199353781DCDB4A80F90C1F999743046418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
Manifest number: 0AD1
Signing time: Wed 10 Sep 2025 20:00:53 +0000
Manifest this update: Wed 10 Sep 2025 20:00:53 +0000
Manifest next update: Thu 11 Sep 2025 20:00:53 +0000
Files and hashes: 1: K-U9NAqL9Hwb800yVeEC77GBrRk.crl (hash: 7d/BWwWeTHnkh0n6Om14g5zLRjnmMhHfqDArR768nYg=)
2: QmDTegVSmEYF6fnpKbqY_97oaSM.roa (hash: tHb5J/NaAqeZ3yJpUfHC3cRpeW6+mrRMysLZDeKxz2M=)
3: _tQcgZijvm9qlNfbL3oLbTBqXKw.roa (hash: xWDEvLw1mwcjLwMZNAz8Pf0/GCXvJ3lHopahWXf20MA=)
4: y4GLfgEHHvh7-yMgUWBtC7KLuEc.roa (hash: dQpKnxbZerxvWzLT4LUfokJhZeXYIR/y034iOg9NMks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:81:dc:db:4a:80:f9:0c:1f:99:97:43:04:64:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Validity
Not Before: Sep 10 20:00:53 2025 GMT
Not After : Sep 11 20:00:53 2025 GMT
Subject: CN=616827d497cfbb110d0fb503a6cd5a3d33a6217d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:73:0e:28:6e:c1:92:ed:4c:bb:f3:0e:6c:29:
62:7c:e8:12:65:7a:0a:87:7c:9c:ac:e4:f4:75:47:
1c:b6:74:e7:e0:d0:28:dd:8a:07:be:92:ca:2d:a6:
86:f3:94:4e:44:cc:be:e4:80:37:a8:4f:b0:0d:b5:
ef:ed:52:de:d0:16:c2:9f:12:d4:0c:dd:3e:28:f3:
71:33:03:8a:9d:6e:91:1c:b0:00:98:9a:17:6a:2b:
4e:12:4a:d7:ce:4e:0f:15:34:82:21:b8:96:ec:c3:
4b:ec:9c:40:e4:f5:7f:29:fe:45:a6:a8:6c:34:3b:
23:1f:40:40:e6:c1:94:2a:e5:a6:28:e8:55:b3:be:
27:b5:77:32:b4:00:03:af:75:36:b0:d2:be:d9:bf:
4b:f2:0a:0a:cf:5c:80:6b:34:68:b8:78:dd:83:30:
43:56:6d:d0:79:5a:9c:98:66:67:aa:27:86:3d:39:
7b:1b:ed:f5:5b:e3:bc:5e:72:31:60:5f:63:0c:f1:
3d:7a:fb:41:eb:21:ea:30:96:35:85:b4:0a:d8:36:
b0:13:e7:75:66:83:c3:64:b7:ea:a7:32:79:a4:b2:
b4:0e:0f:b2:40:af:80:56:94:0b:35:45:4b:c3:da:
e0:d2:0a:07:62:93:8a:b7:a8:b6:2b:6b:00:49:e8:
d5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:68:27:D4:97:CF:BB:11:0D:0F:B5:03:A6:CD:5A:3D:33:A6:21:7D
X509v3 Authority Key Identifier:
keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:6c:ef:65:f5:a9:ef:d2:3e:58:58:2e:23:13:98:18:63:86:
fc:b5:11:89:09:03:2e:de:72:ab:56:19:e2:89:f1:1c:bd:6c:
36:6c:f5:23:a3:be:a3:0b:e0:ef:f7:46:5a:0d:42:08:77:84:
d9:ef:76:bf:2c:de:f4:a6:25:95:65:67:a1:f5:70:f2:97:a5:
aa:18:bf:8c:84:7d:72:98:67:2e:e3:53:c7:1c:58:4b:e1:7c:
3c:ce:9e:84:49:c6:c9:36:19:9d:4b:fd:33:1f:20:e6:e9:7a:
7c:06:6c:c3:39:7a:ad:d8:81:67:ff:91:97:7b:85:2a:0c:8c:
27:cb:3f:c2:39:54:91:55:72:b8:60:17:10:8d:44:ea:06:fa:
bc:cd:c3:53:c1:cd:0c:57:b7:8a:02:5c:a1:b8:eb:65:f3:1d:
12:f7:d1:8d:01:f9:20:3c:56:a3:12:ca:31:b7:71:0a:61:47:
43:09:f5:a9:3b:d9:53:f5:93:b6:18:9e:19:1b:73:5b:76:41:
f5:f2:8d:a6:07:52:ea:93:a3:48:09:8d:83:81:ac:02:b9:b2:
3c:dc:c6:9e:ce:5d:f2:45:76:3e:e9:33:9b:9e:69:24:44:ca:
5c:db:b9:9b:e8:e7:4c:6a:b8:a5:af:62:05:3d:af:f4:af:3a:
99:de:67:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:25:24 2025 by rpki-client