Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
File: K-zvlD00yA4KD9gUJuYTazFQj-4.mft (raw, json)
Hash identifier: 0y6Vq7ffwCUD82k6Lz8+STO50xc8etSPJl5e0T9LkKs=
Subject key identifier: D3:62:F1:74:A9:8D:1F:7B:85:B5:28:4D:A5:BC:95:FE:3F:F5:A0:75
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 019A4E861EB101F5A8E7B01C2FF86DB042F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
Manifest number: 13AC
Signing time: Tue 04 Nov 2025 11:00:03 +0000
Manifest this update: Tue 04 Nov 2025 11:00:03 +0000
Manifest next update: Wed 05 Nov 2025 11:00:03 +0000
Files and hashes: 1: K-zvlD00yA4KD9gUJuYTazFQj-4.crl (hash: Bbv+iRpicfugC0xki3S1nqs+3BKvlrac91YD5AM0AsM=)
2: uyTAYMzc27HPC3St2DUdxuZl0vQ.roa (hash: nhOGHiWnpfS9y1HiircEbA65FySC+R6VBPodKzedGIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:1e:b1:01:f5:a8:e7:b0:1c:2f:f8:6d:b0:42:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Nov 4 11:00:03 2025 GMT
Not After : Nov 5 11:00:03 2025 GMT
Subject: CN=d362f174a98d1f7b85b5284da5bc95fe3ff5a075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:40:b5:a4:a4:5b:d6:73:2a:e9:a1:06:00:10:
21:20:c7:9c:27:da:cf:86:8e:72:d7:cf:83:31:b5:
fd:9d:01:fb:b0:00:3f:7f:e8:50:44:74:33:1a:72:
e4:f7:8a:e2:cf:7b:b5:b8:cb:da:cc:1c:96:7a:41:
70:b0:88:07:dd:98:ac:ba:6e:e4:5a:5b:1c:8d:dc:
c5:2d:cd:44:5b:28:4c:53:46:51:c9:a5:21:4d:e7:
16:cd:89:53:29:e8:0d:87:5f:ca:9b:0f:48:bf:98:
54:c0:9f:2c:5d:93:41:bf:10:10:4b:1f:09:dc:60:
6e:d7:cf:9a:53:ea:b0:b8:65:66:5a:7d:2f:e6:03:
0b:19:16:5c:e7:79:f9:c4:af:a8:95:29:79:a2:d6:
81:92:a8:67:3c:a4:3d:26:b1:65:79:b3:b9:fb:8b:
b4:81:de:e4:a0:b8:41:30:22:8c:db:77:a6:41:29:
ad:45:de:47:8a:53:47:ce:d2:2a:b3:82:cf:6f:5d:
28:9f:23:ed:f7:78:4c:b5:29:9f:87:6e:2c:4c:77:
33:c7:34:5f:77:d3:01:e2:f4:a9:96:94:3f:c8:27:
5f:6e:8f:ec:71:66:18:67:0d:87:ef:f1:ce:e8:05:
04:67:83:7d:e3:f3:10:d7:cf:1c:1f:62:16:b5:e0:
10:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:62:F1:74:A9:8D:1F:7B:85:B5:28:4D:A5:BC:95:FE:3F:F5:A0:75
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:8b:57:9a:ab:69:2a:cb:33:99:a1:2b:ae:db:7c:27:bf:bf:
dd:47:b3:fd:d1:54:e3:5d:c0:78:f5:a6:92:00:6e:3c:af:cd:
f9:8a:d0:83:36:a0:0d:3f:b8:00:88:97:06:e3:8f:ea:d4:29:
ab:a7:7f:2c:f2:b4:f0:c2:74:3b:64:ec:01:ae:26:0f:8e:3b:
07:2c:ab:28:a9:e8:ce:a3:98:6d:4a:6c:f6:3f:e8:5d:09:33:
07:69:d9:0a:62:f1:58:c5:3e:52:4d:f5:2e:ba:05:dc:5e:43:
21:54:a5:25:ab:bc:1d:53:64:8a:0a:91:a3:29:11:62:79:8a:
0f:e3:66:2d:63:24:9b:c7:ae:c3:7b:31:a9:a5:6d:f6:9b:f2:
a5:52:c7:87:c5:1c:ac:31:b8:b7:87:59:6b:7e:3a:62:c4:8e:
1b:86:40:2e:3e:38:ec:23:c9:d8:5f:fa:4f:9e:7a:73:78:e4:
89:6d:c4:72:25:1a:e9:2d:5c:b4:dd:f6:c2:ed:32:9a:b4:ec:
29:59:41:29:d2:a0:a3:cb:f9:ca:f9:f8:c3:45:f6:55:85:e5:
c7:f1:ad:80:4f:c1:32:30:69:52:34:45:50:e3:94:df:31:17:
82:83:89:0d:55:75:88:9c:4b:51:32:ac:35:fb:a5:9c:ab:c6:
ef:dc:97:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:12:20 2025 by rpki-client