Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
File: K-1ik1-0ivbkTLoZQm76tR8cVBA.mft (raw, json)
Hash identifier: 7PbYkgzedJini+bmjPF7yCf02JkW7qWoigBwygDolfQ=
Subject key identifier: 4D:37:CC:F1:94:96:F9:A6:FE:04:8B:49:44:DC:5E:4E:7F:6B:88:5D
Authority key identifier: 2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
Certificate issuer: /CN=2bed62935fb48af6e44cba19426efab51f1c5410
Certificate serial: 019A4C98498B7CB08D370040A582EA13C60A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
Manifest number: 0DF2
Signing time: Tue 04 Nov 2025 02:00:39 +0000
Manifest this update: Tue 04 Nov 2025 02:00:39 +0000
Manifest next update: Wed 05 Nov 2025 02:00:39 +0000
Files and hashes: 1: K-1ik1-0ivbkTLoZQm76tR8cVBA.crl (hash: xDWbFLAlRgr612Ixo6cRFcXQAuQuXWrIFWN4eI0NaUM=)
2: jYHRdDHfT6bQOmOGT7Tls1WhRLY.roa (hash: pWv0ClQXtIskoLimOYMYx3t3am8WhnpvjCRS+V8Iqy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:49:8b:7c:b0:8d:37:00:40:a5:82:ea:13:c6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bed62935fb48af6e44cba19426efab51f1c5410
Validity
Not Before: Nov 4 02:00:39 2025 GMT
Not After : Nov 5 02:00:39 2025 GMT
Subject: CN=4d37ccf19496f9a6fe048b4944dc5e4e7f6b885d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:fb:94:dd:c8:67:99:a2:3f:55:57:d5:5a:
bf:a9:6e:73:54:58:81:37:0a:d5:0d:e8:4e:36:f1:
14:63:e0:7f:99:08:9b:91:e0:97:b2:eb:ab:3f:4e:
38:e4:14:31:a1:be:dd:e5:84:59:65:48:97:0f:1e:
3c:90:e0:84:ce:ff:11:01:ff:cf:d0:c7:ea:99:34:
e9:44:5a:e7:b9:f0:86:79:db:98:05:3d:e1:5c:84:
f9:ba:b3:78:ef:00:37:ee:23:03:01:64:ab:a5:a5:
fc:ba:dd:56:fb:35:8d:5b:0b:27:50:85:35:c4:dc:
21:a8:d6:07:3e:c0:d4:c2:5e:ca:ff:f8:9a:ca:46:
1d:f3:4b:c4:98:ff:ec:95:e8:f3:a5:68:7d:51:f3:
f0:e6:1b:52:06:16:02:50:86:91:4a:b9:ed:a8:97:
c3:c8:23:ce:b7:1c:94:41:47:00:49:66:c6:b1:9d:
c5:1a:97:04:05:b9:b3:5c:5a:05:2e:81:67:08:ca:
49:e0:c0:84:55:8a:d0:69:c4:47:5f:d9:75:38:6e:
93:d4:c0:7b:ab:3d:7a:be:90:df:c3:59:fb:95:e4:
cb:4b:97:e8:8c:f0:5b:bf:09:08:0b:9e:87:1a:ee:
63:64:07:2e:c4:d6:d3:f1:75:e3:cd:ed:84:1b:29:
40:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:37:CC:F1:94:96:F9:A6:FE:04:8B:49:44:DC:5E:4E:7F:6B:88:5D
X509v3 Authority Key Identifier:
keyid:2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:32:23:5e:72:29:4f:04:02:20:1d:d7:04:19:8f:34:f9:5a:
93:47:5d:79:b0:03:11:37:35:72:85:29:b9:a9:15:8d:ad:3a:
75:fc:6d:f3:08:5e:13:3f:4e:8e:d0:99:31:55:67:35:3a:06:
59:37:cf:8b:75:5f:c0:ba:6a:69:30:96:3c:e6:5b:fc:cd:6f:
62:e2:11:53:12:ff:0b:ed:e0:92:76:bd:5a:ab:cd:28:31:4f:
0d:6f:40:dd:2b:ba:dd:08:92:64:03:66:5a:e1:e7:c9:e0:85:
73:e6:11:7f:db:3b:6c:eb:f7:2f:e3:75:63:97:6e:a2:d6:10:
8b:53:87:36:2e:8f:33:a2:b6:0a:28:16:46:ec:d1:b2:d7:e8:
4c:5f:10:43:62:31:f4:2d:04:31:c0:d7:ff:65:bb:d2:a9:3a:
b6:ad:34:23:e9:2a:a0:51:09:98:36:b3:e1:fa:e8:f9:47:4b:
d9:d2:98:2a:9c:df:fc:22:39:3d:22:e2:b1:f4:ef:00:fe:14:
30:28:7e:d2:53:fa:97:93:46:1a:61:8d:42:bc:5a:63:85:7e:
68:8b:01:68:08:fc:bc:60:d4:6c:b5:8a:40:0f:8b:18:ba:c5:
66:5b:cd:8b:30:af:a5:65:92:fa:ab:12:e5:65:56:43:fa:ec:
c3:b9:b3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:48 2025 by rpki-client