Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
File: K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json)
Hash identifier: mFjQDGljt4d7pAgcZ/U9xtlkQQ+VQ7td14WMcRvZny4=
Subject key identifier: 41:B6:03:99:31:DC:96:92:45:D1:18:E4:9E:03:D3:E1:B6:1C:E3:F6
Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Certificate serial: 019A51BEDBD60A03ACCCB86082EA07960146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 02:00:53 +0000
Manifest this update: Wed 05 Nov 2025 02:00:53 +0000
Manifest next update: Thu 06 Nov 2025 02:00:53 +0000
Files and hashes: 1: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: BqoynZdR/FeRpeSwkicDgI7WQJeakvqLIGqrxdxZ94s=)
2: bUHKbn34m9YZfg0LWUckx1_q0Mc.roa (hash: Bh0vmrRSsDhj05TsHSvScRpLwoC6mmV/tmtMQaNdewI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:db:d6:0a:03:ac:cc:b8:60:82:ea:07:96:01:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Validity
Not Before: Nov 5 02:00:53 2025 GMT
Not After : Nov 6 02:00:53 2025 GMT
Subject: CN=41b6039931dc969245d118e49e03d3e1b61ce3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:59:43:b7:3a:cf:b4:65:05:78:d5:47:cd:a4:
e0:a3:a7:a2:44:92:87:d4:12:13:f8:47:fb:63:19:
8b:56:ad:af:73:a9:8a:84:7e:6d:6e:7c:4a:4c:41:
98:cd:92:c0:56:c0:13:eb:0a:0e:e6:e5:1c:ae:ca:
09:78:80:6c:a6:9d:06:a4:d4:53:94:67:f9:7f:c7:
14:c2:f9:81:98:21:7e:cb:94:2d:86:8b:1b:e9:cb:
24:4f:a4:5b:2d:88:15:98:f6:bb:b8:52:47:1b:de:
c0:28:8f:2e:49:f1:9d:20:9c:c5:04:dc:7e:72:b8:
6b:4f:0d:a2:f5:e0:33:f7:9d:96:55:b3:b0:e5:fc:
92:15:b0:9a:ce:da:64:33:1b:3b:bd:11:c1:08:db:
9e:d4:85:16:67:e1:17:f4:24:75:53:d2:18:ab:a4:
b4:70:9c:da:c9:07:c8:4c:9f:24:1d:0e:be:6c:41:
6f:b0:cc:ff:c1:10:43:c8:4f:74:43:a3:29:07:eb:
f9:ef:08:ec:96:20:aa:ab:fb:b8:13:e7:45:79:84:
db:94:15:3e:35:51:45:ed:d3:9b:29:7a:94:fc:06:
66:ca:03:95:c3:ce:32:c2:9b:c4:34:3c:91:d5:6a:
61:8a:f1:9a:0e:25:9f:23:a9:c5:7a:e5:6b:76:12:
8b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B6:03:99:31:DC:96:92:45:D1:18:E4:9E:03:D3:E1:B6:1C:E3:F6
X509v3 Authority Key Identifier:
keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b7:86:c0:8d:52:c0:55:8d:b6:db:6d:ce:24:d5:7c:65:57:
f8:d6:30:82:79:d7:34:f7:42:6c:2b:fe:94:03:fd:83:a2:5e:
25:68:7a:cc:32:23:85:d0:c1:45:d3:6c:26:b1:9b:f1:61:2f:
72:2d:7a:33:01:c2:5e:02:7e:72:23:3b:20:56:da:0a:63:a8:
3f:cc:f4:e2:6f:91:9f:f1:af:b7:72:07:94:06:65:04:87:0c:
8c:b3:25:52:be:58:39:9a:c7:e9:fe:57:b0:be:3c:90:b7:c7:
fd:57:02:4f:76:b4:de:0f:60:d3:b2:8d:64:3b:ae:20:cf:f5:
c5:8f:57:b9:93:c0:e4:28:ec:96:ef:c3:5b:1b:0c:9d:d3:e8:
d3:1c:1a:ac:d6:37:16:58:e1:0d:81:a1:46:69:f0:bf:5b:75:
72:34:d4:31:92:dd:13:af:13:b7:85:69:43:ba:63:4c:cf:4c:
aa:81:fa:12:e9:4f:69:31:62:d5:31:97:ac:3a:25:6d:f8:78:
e6:01:17:f0:79:00:fe:ea:96:62:d9:84:f1:17:87:fe:79:ca:
28:7c:c2:9b:f6:cd:ea:f3:9c:d0:a4:8f:63:0d:e5:00:a5:39:
46:fc:8b:e8:60:14:84:83:29:4b:44:ff:54:9d:9b:43:5d:e7:
fb:e0:94:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:46:49 2025 by rpki-client