Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
File: K0bJzPf_e9zPg3dioOFXvcE1cOA.mft (raw, json)
Hash identifier: W88V2TLr6QnVc4/XUSRFVN/F4cLG+Lc27WdkBkzCKJo=
Subject key identifier: 71:A5:21:AC:15:86:C9:2C:83:EA:3F:4A:15:92:51:5C:25:ED:F4:4C
Authority key identifier: 2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
Certificate issuer: /CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Certificate serial: 019A4D741414E8E9FCBA1D0261D0545ADF4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
Manifest number: 071D
Signing time: Tue 04 Nov 2025 06:00:44 +0000
Manifest this update: Tue 04 Nov 2025 06:00:44 +0000
Manifest next update: Wed 05 Nov 2025 06:00:44 +0000
Files and hashes: 1: K0bJzPf_e9zPg3dioOFXvcE1cOA.crl (hash: jnpuYvZYQYwQR9kRBr2xR/eeM1UpvwS0daLagjOfH2k=)
2: qLWefGaIQEsRkcA1tO3guUVq3OU.roa (hash: xslOk/6LQdIGFli9jwCBp6kVRfq8yxFvis0Kh4JP+fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:14:14:e8:e9:fc:ba:1d:02:61:d0:54:5a:df:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Validity
Not Before: Nov 4 06:00:44 2025 GMT
Not After : Nov 5 06:00:44 2025 GMT
Subject: CN=71a521ac1586c92c83ea3f4a1592515c25edf44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9c:be:fd:8d:10:10:74:e1:53:b2:02:2e:12:
3d:90:b2:50:ad:a6:e7:10:bc:8f:f6:00:8b:7a:df:
86:80:34:b3:50:ac:74:d0:98:a7:83:13:d6:45:d3:
6f:91:bb:3e:00:bf:42:3e:84:50:ca:4a:5b:6b:26:
49:41:ea:ad:ce:89:c0:2e:68:01:77:eb:58:d4:8e:
12:70:17:c0:32:a8:92:7d:f0:bc:ab:7b:2c:9f:70:
26:fc:3f:e8:65:e2:32:c3:4d:bf:2d:15:1a:fd:90:
9c:4f:ec:8d:33:21:07:55:7e:e3:96:46:92:89:9f:
41:fa:7b:95:90:4d:6f:2b:49:fd:08:22:ab:dd:d8:
6b:ef:9a:85:fc:62:98:f7:33:7a:f3:21:a8:ed:cd:
54:48:9f:3e:01:f8:fd:6e:04:ae:78:e8:dc:c4:35:
ed:13:8b:2c:52:31:61:ad:8c:f5:b2:8f:9d:a9:1f:
71:6e:bb:f9:10:1c:09:b1:e8:d0:3c:56:64:7c:b2:
18:4e:8a:d5:8a:1a:9b:5e:91:df:f5:65:96:ee:fc:
e6:e3:bd:4c:b5:35:e3:7c:30:ac:1c:55:5a:b9:54:
b7:58:04:cc:1e:c4:4f:35:c2:81:db:e5:fa:91:16:
4a:d8:ff:eb:d4:11:06:23:47:01:0a:c5:2a:c8:08:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A5:21:AC:15:86:C9:2C:83:EA:3F:4A:15:92:51:5C:25:ED:F4:4C
X509v3 Authority Key Identifier:
keyid:2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ae:ad:d5:bd:7b:7e:9f:77:bb:9b:55:c7:63:bc:52:fd:eb:
6f:83:3f:de:64:af:f5:8c:76:a9:bc:33:e1:c3:19:6a:1a:59:
8b:c1:38:9f:a4:09:e6:4e:47:9b:d6:a5:97:e1:46:54:58:1a:
47:ae:5d:1d:40:c8:49:aa:4d:e2:d3:ff:9c:17:2a:80:42:a5:
7e:47:d6:da:c9:af:33:f3:b8:c1:72:fb:ae:5e:33:0a:42:01:
42:4c:91:01:b4:fc:28:7d:5b:d8:c3:46:e5:da:c5:4f:02:6f:
06:63:ce:e9:de:85:d9:30:7a:2e:07:c2:de:0f:e9:30:e3:c5:
3e:df:9c:e6:b4:8b:9d:94:c4:77:e1:1b:a6:89:ea:e3:a5:09:
04:b7:02:97:95:89:a7:90:8c:b4:ce:53:97:7f:fb:4b:c8:02:
fd:24:2c:03:00:d0:c5:e0:9d:79:0e:55:46:1e:7b:99:22:2f:
1b:88:b9:3e:93:3a:37:a2:cd:db:88:c8:4f:e8:b7:80:39:01:
2d:b2:b1:48:03:90:c6:bc:af:8c:86:3f:6e:2c:51:27:4a:9f:
7e:d9:56:b3:ff:ae:6b:9e:70:2b:19:bc:f1:12:ad:a0:16:14:
48:f9:52:c1:83:94:45:fd:f4:25:36:96:36:90:7c:04:ba:29:
5a:fe:3e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:00 2025 by rpki-client