Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
File: K1wFUAyGXpJL3esa7nsuuMupJ8k.mft (raw, json)
Hash identifier: f7lcWrU/ett/2KX658jzGBTZTfmlEZg7V9PVt7Y/Nwo=
Subject key identifier: AF:EC:6A:FB:28:EC:66:07:4F:13:E6:EC:4F:50:24:5A:78:4A:13:B3
Authority key identifier: 2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9
Certificate issuer: /CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
Certificate serial: 019A1E3F0C2D19AD6C921A00E09216F503DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
Manifest number: 01F9
Signing time: Sun 26 Oct 2025 02:00:39 +0000
Manifest this update: Sun 26 Oct 2025 02:00:39 +0000
Manifest next update: Mon 27 Oct 2025 02:00:39 +0000
Files and hashes: 1: K1wFUAyGXpJL3esa7nsuuMupJ8k.crl (hash: 3GTAEQX/pJRVjFD96thh5puqEwUxPSd/w6xILsFkJz8=)
2: vzFDjwhsHuCEXenA4Ry9zlS6KxI.roa (hash: nNA4bFfVyipriW6rYfX4ArBAMjERFDTms9Zlmp1WCCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:3f:0c:2d:19:ad:6c:92:1a:00:e0:92:16:f5:03:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
Validity
Not Before: Oct 26 02:00:39 2025 GMT
Not After : Oct 27 02:00:39 2025 GMT
Subject: CN=afec6afb28ec66074f13e6ec4f50245a784a13b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:67:9d:2a:d6:10:37:0a:ca:21:6b:b3:ed:97:
5e:48:a2:ef:fe:48:ce:d5:0a:54:da:f2:6f:76:31:
10:3f:05:86:4a:3b:5c:9e:5b:60:f8:a4:40:d1:8c:
50:ab:59:77:1d:e8:e2:49:be:15:98:e0:1f:dc:59:
68:57:9f:94:6c:82:18:0e:db:3b:c5:c7:07:8e:55:
48:4e:6d:12:06:19:76:6a:8f:1c:7e:f6:ad:5c:62:
93:5a:2e:af:ba:6e:bb:b5:c5:d2:0e:9f:5d:19:1d:
c8:b4:27:57:68:db:18:bd:eb:73:36:2f:0c:d1:ef:
66:ef:d9:c8:8b:8e:a6:03:99:5a:96:dc:25:41:26:
8d:11:f0:47:c2:05:a6:f1:c3:06:f6:ff:80:e5:38:
0b:c3:86:17:fe:45:fc:cc:38:0d:ec:6e:69:f4:1f:
7c:8e:86:75:33:f8:d9:15:a4:21:d4:6e:00:3f:e5:
be:2c:e9:59:7f:aa:e4:d1:1c:ce:29:2f:e0:fd:9f:
e5:da:10:47:db:cb:ec:43:1c:77:5b:f8:11:27:f2:
a7:60:fd:58:e1:1c:7e:48:2e:72:2d:c5:29:73:60:
2d:14:8b:9b:18:d8:5f:bc:70:f5:4b:a4:cf:ea:08:
48:cd:f0:33:9a:fb:43:47:24:9b:c0:e3:5c:d2:83:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EC:6A:FB:28:EC:66:07:4F:13:E6:EC:4F:50:24:5A:78:4A:13:B3
X509v3 Authority Key Identifier:
keyid:2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:70:dc:de:fa:71:b1:c1:e9:5a:1e:18:b1:f0:ed:9c:03:85:
07:26:57:ad:e8:53:87:c2:b4:96:eb:0b:8b:93:50:c0:94:57:
6a:8d:4b:40:8f:15:ec:c9:9e:25:d4:d8:ec:4e:b3:ac:e5:7e:
70:b9:8d:f1:af:c3:1d:dc:58:e9:07:56:51:02:2e:91:69:4d:
3a:3f:eb:37:b6:d2:75:f1:d1:1b:f0:0f:9c:63:4d:f8:ee:d9:
72:f7:fa:c2:38:60:5c:78:ae:92:8c:e3:b5:37:90:9f:36:6c:
b2:40:d6:27:f0:67:8c:50:8b:66:66:5a:53:3f:b9:3f:35:bc:
06:33:a9:d3:23:3b:14:6d:41:a2:ae:4d:fd:d7:a3:e5:4a:7d:
ee:cc:63:f1:16:95:de:92:77:53:ae:e7:b2:df:7e:87:6f:67:
a9:ec:79:59:c3:75:af:07:f1:41:dd:45:06:b7:c1:1c:a7:f6:
31:ee:13:42:00:84:34:c5:e5:c7:4e:42:71:fa:cd:72:77:e2:
cb:da:4d:69:02:e0:c2:d5:15:09:4a:50:22:a2:9f:6e:1d:90:
9f:82:c5:f2:f7:87:5a:72:29:9a:8d:66:cc:77:7c:b9:59:b4:
71:b2:56:39:22:a0:96:69:b8:0d:1d:fa:78:15:d3:b3:95:09:
40:e6:a5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:47:29 2025 by rpki-client