Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
File: K-U9NAqL9Hwb800yVeEC77GBrRk.mft (raw, json)
Hash identifier: 0qR27gct2N+AUH7KSKFwye0lMR9Pe6zC4PSjuVZ17XI=
Subject key identifier: 4B:4F:1A:75:8B:8A:7C:45:E1:14:BD:A0:C4:9C:2E:4D:EF:20:16:09
Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Certificate serial: 019A2C6898F85231ACB6B73C248BB0A31D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
Manifest number: 0B51
Signing time: Tue 28 Oct 2025 20:00:43 +0000
Manifest this update: Tue 28 Oct 2025 20:00:43 +0000
Manifest next update: Wed 29 Oct 2025 20:00:43 +0000
Files and hashes: 1: K-U9NAqL9Hwb800yVeEC77GBrRk.crl (hash: xc1tfmzjhGqHFU4AjZM8wg4aZNK3f+7Dyt29TZtw8Xg=)
2: QmDTegVSmEYF6fnpKbqY_97oaSM.roa (hash: tHb5J/NaAqeZ3yJpUfHC3cRpeW6+mrRMysLZDeKxz2M=)
3: _tQcgZijvm9qlNfbL3oLbTBqXKw.roa (hash: xWDEvLw1mwcjLwMZNAz8Pf0/GCXvJ3lHopahWXf20MA=)
4: y4GLfgEHHvh7-yMgUWBtC7KLuEc.roa (hash: dQpKnxbZerxvWzLT4LUfokJhZeXYIR/y034iOg9NMks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:68:98:f8:52:31:ac:b6:b7:3c:24:8b:b0:a3:1d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Validity
Not Before: Oct 28 20:00:43 2025 GMT
Not After : Oct 29 20:00:43 2025 GMT
Subject: CN=4b4f1a758b8a7c45e114bda0c49c2e4def201609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:cc:52:8b:82:bc:ac:04:4b:7e:63:42:9d:
8d:28:00:d1:cb:cc:be:af:a5:e1:68:ed:e8:28:07:
a2:06:d7:4d:5b:cd:55:8f:57:80:55:c0:54:e5:d6:
68:41:4c:81:ec:37:3a:3a:36:1c:11:e6:cb:46:df:
cb:00:f1:f1:db:3d:df:76:0d:e9:e9:e7:56:77:7c:
5d:b9:05:e0:a4:25:b7:7a:b3:10:67:ed:cc:a7:8f:
f8:52:cf:9e:01:18:25:5c:c4:f9:73:48:80:ed:4f:
7b:dc:6d:98:9d:c1:4e:77:b8:94:43:06:4a:d3:62:
02:2c:42:1d:30:1f:93:b9:f5:23:bb:32:7c:ba:87:
92:a9:ec:13:f1:cc:ef:7e:e3:d4:dc:69:c2:be:c9:
02:33:0e:c4:00:6b:ae:b0:41:03:b5:53:26:d7:29:
a5:a9:cf:12:d8:f2:0c:85:92:ec:3a:0b:4c:24:89:
27:e0:00:3b:81:11:03:36:ef:a3:29:27:f5:7c:4d:
9b:04:b1:b2:d8:e0:b5:03:22:a2:95:7b:5f:52:f0:
ac:f4:68:40:20:63:df:1c:b6:90:17:6c:37:27:4d:
8c:86:7a:72:ab:4f:87:4d:fe:3a:fe:db:bb:13:03:
c4:f2:02:c8:55:1b:fa:03:8b:41:87:1f:bb:23:97:
d8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4F:1A:75:8B:8A:7C:45:E1:14:BD:A0:C4:9C:2E:4D:EF:20:16:09
X509v3 Authority Key Identifier:
keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5c:d9:29:8a:33:5e:10:1c:99:3c:c2:63:e7:05:24:21:bd:
79:01:c5:ee:ce:ca:35:81:8c:03:2f:23:07:36:60:f1:53:e8:
25:a8:9e:df:de:46:8a:44:15:f9:c1:66:28:3f:8d:69:54:65:
84:1c:18:fc:b3:5e:aa:6a:58:87:a3:d6:bd:58:54:2e:e3:32:
71:69:06:df:82:56:42:32:4f:51:05:25:85:21:a7:56:b4:11:
ef:0b:12:96:f0:91:0a:d6:7b:16:ef:6c:85:6a:0d:98:ce:ce:
06:29:43:3c:4a:f5:1f:5c:54:91:cc:0d:ff:36:c4:53:ed:67:
0c:f0:b6:fe:05:e5:3c:e4:12:7f:51:4e:4b:b1:d6:b4:cc:cc:
cd:a5:ed:6b:1d:18:4e:61:97:00:fb:e2:20:fc:be:6a:56:de:
c9:f7:29:da:f7:7f:be:81:a2:8a:79:75:16:6f:de:8e:fe:e8:
04:42:1a:8e:4d:0e:4a:91:59:79:79:e5:74:f3:79:e5:91:8e:
d0:08:11:0c:14:aa:de:ed:14:24:d3:8c:58:ed:4e:c0:9e:d0:
06:c0:39:7f:64:8a:d4:9c:9c:40:8d:be:92:b4:6b:57:c8:e2:
09:6a:42:5f:a1:36:92:07:3d:8d:38:72:54:ef:14:61:ba:43:
f2:a7:e0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 05:32:19 2025 by rpki-client