Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
File: K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft (raw, json)
Hash identifier: yhwvNr7m8Vasgcs4pow8ueJZ9wFGmIjtxsBBjep7/vw=
Subject key identifier: 57:3A:43:D3:F5:18:5F:40:44:2E:97:E5:5A:64:14:6E:A4:C4:B2:CB
Authority key identifier: 2B:73:FE:15:C1:57:F0:6F:E9:AB:21:95:DC:C3:BD:7B:D0:71:68:A0
Certificate issuer: /CN=2b73fe15c157f06fe9ab2195dcc3bd7bd07168a0
Certificate serial: 019A4F997AE7B0370EC449997B842B07EE6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
Manifest number: 06B8
Signing time: Tue 04 Nov 2025 16:00:49 +0000
Manifest this update: Tue 04 Nov 2025 16:00:49 +0000
Manifest next update: Wed 05 Nov 2025 16:00:49 +0000
Files and hashes: 1: K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl (hash: GPzevicJQztNoqm3dZqdRqg6I0yrX8O1u6SumL4YePQ=)
2: WGdEQE91EliXk0v4x3jIiAr2OTM.roa (hash: gEyRBLqxqp6b0VNBQfdpnj0lqDeqco4Wbi4LrUK1SDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:7a:e7:b0:37:0e:c4:49:99:7b:84:2b:07:ee:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b73fe15c157f06fe9ab2195dcc3bd7bd07168a0
Validity
Not Before: Nov 4 16:00:49 2025 GMT
Not After : Nov 5 16:00:49 2025 GMT
Subject: CN=573a43d3f5185f40442e97e55a64146ea4c4b2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7b:bc:c9:c3:a3:91:fc:a4:a8:f1:58:c6:57:
59:ee:fb:eb:9f:38:7a:2f:e6:33:61:d9:9c:83:1b:
e8:fb:14:43:a7:7c:28:8d:df:9e:2c:c0:97:c1:89:
7a:0b:32:4d:42:0c:67:09:71:84:6f:b5:08:b4:17:
30:32:63:13:4c:89:06:88:d2:f6:6d:0e:5f:33:74:
3a:9b:16:54:a3:0c:60:6c:8f:34:c8:8f:90:ba:b9:
81:ec:b9:b4:3e:e1:79:c9:90:d3:bd:9e:ae:59:13:
31:e5:73:c3:37:40:fe:7e:5f:da:9c:2c:f6:c6:69:
0c:5f:c0:ca:5e:e9:7a:3d:81:7c:ca:de:cd:e4:61:
b7:cc:92:58:75:ba:fd:9f:1e:3b:b6:a7:2e:3b:7a:
34:f9:d6:a4:97:1d:05:db:60:81:df:37:bf:2e:16:
6c:1a:ac:76:ec:94:1f:a1:ff:e0:15:2a:0a:4c:4c:
9f:67:97:5e:cf:68:7c:5e:ff:ef:88:b4:15:db:0b:
9d:6c:71:c2:bc:c3:72:05:1d:9d:63:9d:97:21:40:
3d:7f:a4:f2:32:75:65:1c:db:0e:81:3f:d8:f5:0b:
8c:fb:98:e8:3b:ca:b2:60:19:9b:fc:ca:fd:0c:28:
aa:3a:c4:59:50:f1:1a:7e:4a:53:5f:77:33:d6:e7:
e9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3A:43:D3:F5:18:5F:40:44:2E:97:E5:5A:64:14:6E:A4:C4:B2:CB
X509v3 Authority Key Identifier:
keyid:2B:73:FE:15:C1:57:F0:6F:E9:AB:21:95:DC:C3:BD:7B:D0:71:68:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3P-FcFX8G_pqyGV3MO9e9BxaKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6dd10a-4f5f-4932-a160-05171b1b0efd/1/K3P-FcFX8G_pqyGV3MO9e9BxaKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ef:86:e7:e0:77:61:53:92:d4:02:70:c2:a9:89:63:4a:28:
71:9a:2a:d2:60:74:6a:90:6c:a5:a1:64:4e:a6:1c:63:c8:4a:
e6:5a:57:20:68:2c:48:00:d5:f7:35:eb:c3:e9:3a:4d:fb:51:
fb:85:b2:57:40:1f:2c:c2:37:52:7b:da:75:31:06:37:9c:83:
85:d6:44:59:26:1b:4d:61:26:02:ec:2c:df:39:44:c1:c6:71:
92:97:bd:23:d7:18:f6:c5:67:34:0f:93:88:50:a3:25:4c:ec:
d3:ea:de:65:d8:24:50:07:d2:4d:00:98:dd:74:c1:bf:af:3c:
f4:0a:eb:cf:bd:a1:af:58:95:46:c5:67:7c:9f:00:87:3f:cb:
96:89:06:aa:09:6e:51:31:28:a3:0f:96:43:86:c9:c4:c1:3d:
33:69:ba:9f:f2:c4:87:39:37:5b:0b:8f:e0:34:b4:85:74:33:
3a:25:70:5c:1c:cf:39:c0:36:f4:96:fe:d6:64:95:d1:38:fe:
11:b7:24:55:ec:9c:67:ba:44:50:ff:54:50:ce:c3:b0:b6:5b:
41:e2:fe:b1:67:a5:10:be:c8:54:b3:11:05:ce:7d:72:e2:9d:
c5:8b:32:89:a5:01:57:17:04:5f:ea:da:0e:52:c6:9c:6b:a6:
e5:b4:05:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:43 2025 by rpki-client