Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
File: K8wc-LjiEGa27GR2l9SUXY-bsFs.mft (raw, json)
Hash identifier: 07fzu4ylMjAiORTFp6CdixkAdSbOEXZAUmwfSF+uxDM=
Subject key identifier: 07:18:7F:F8:CA:96:46:8A:58:FE:9E:8A:21:BA:28:6F:86:A6:7E:33
Authority key identifier: 2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
Certificate issuer: /CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Certificate serial: 019A4E8672319308CD444319C403B4359CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
Manifest number: 12B3
Signing time: Tue 04 Nov 2025 11:00:25 +0000
Manifest this update: Tue 04 Nov 2025 11:00:25 +0000
Manifest next update: Wed 05 Nov 2025 11:00:25 +0000
Files and hashes: 1: 1-RD7DNOHCxhrIr1TSToj6urkCEM.roa (hash: YBfKNkThqc59/HOjNrqRSuRrZh5t6Vr9bzlwHzZcB5M=)
2: K8wc-LjiEGa27GR2l9SUXY-bsFs.crl (hash: cQp8ocQFkca+tQCm3CaAJTzHfHeW82PTCp7wAUURVXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:72:31:93:08:cd:44:43:19:c4:03:b4:35:9c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Validity
Not Before: Nov 4 11:00:25 2025 GMT
Not After : Nov 5 11:00:25 2025 GMT
Subject: CN=07187ff8ca96468a58fe9e8a21ba286f86a67e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:08:c1:3f:1f:a5:ca:00:d1:9e:3d:cb:4f:5f:
8d:f4:f1:12:b3:c5:2f:45:f7:27:a4:60:6f:ec:5a:
6a:34:62:71:5e:4d:19:72:59:4c:1e:12:1e:78:dc:
d9:e9:58:9c:70:18:ce:93:c3:fe:5a:a6:a2:e9:64:
e8:6c:7b:01:04:45:c5:2a:69:6e:0a:8d:7a:d7:99:
62:4a:c9:28:1f:13:97:d6:62:b7:af:45:17:d4:40:
d5:84:d0:9b:a3:1e:60:03:4f:db:53:4e:14:56:79:
65:30:29:e5:97:36:06:d9:cc:7a:c4:96:53:93:5a:
a2:af:fd:a2:c9:c8:70:c3:59:2f:e1:e7:ef:62:21:
24:71:d7:1c:29:19:b5:51:b4:7f:cc:9a:6c:a7:4f:
d1:26:eb:93:6d:6a:43:40:14:9d:eb:eb:39:7d:73:
b2:6e:85:1c:78:09:50:c0:85:9a:c5:dd:e5:1d:3b:
60:a5:6a:80:82:7b:73:cc:1a:45:33:0c:b5:f6:24:
ed:81:8d:5e:b7:28:64:61:eb:b6:7b:28:c7:84:5c:
68:87:7f:db:53:da:c9:2b:f5:7d:8d:22:3c:43:20:
a4:01:d7:3c:5b:99:1a:ba:07:78:b0:6d:f6:1c:53:
60:c2:f6:0d:35:c1:6c:29:c4:da:2b:3f:d5:c1:f0:
4e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:18:7F:F8:CA:96:46:8A:58:FE:9E:8A:21:BA:28:6F:86:A6:7E:33
X509v3 Authority Key Identifier:
keyid:2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:aa:fb:d5:8f:4c:92:fc:bb:1f:1d:20:ba:a7:6d:aa:12:93:
0e:84:05:29:aa:14:b7:6e:6d:93:df:2d:29:c6:26:0a:d4:f5:
c5:1b:f0:25:95:4a:49:b1:19:06:7b:fb:a8:9f:bf:a9:86:82:
36:2b:48:46:47:0b:5a:85:e8:9e:e5:bf:0b:d9:3b:c1:04:84:
c2:35:16:b4:d4:60:8e:53:a4:47:bb:8c:bd:5e:43:cc:bf:1c:
7d:de:40:11:7e:6e:d4:d8:f2:32:f8:65:56:bd:76:6d:ec:62:
cb:8a:9b:9a:b9:d8:73:36:8b:46:1f:53:27:3b:c7:bb:00:23:
f1:d9:f2:e7:02:3a:68:0f:6c:48:e5:aa:3c:a0:fa:5e:f5:76:
ed:3c:16:df:d9:74:95:45:00:44:83:da:a9:5f:7e:24:4f:47:
f2:5c:f4:64:43:5f:57:35:4b:07:0b:dd:78:aa:20:b9:0c:b7:
fd:d6:84:9a:94:95:d5:8e:cb:6c:3f:2d:d2:6f:b9:db:16:0c:
29:0e:29:9e:dd:cb:a6:61:bf:e0:70:d0:c3:de:cc:21:7d:f6:
5a:d3:8f:c8:8c:c6:ad:c5:a5:8a:70:c3:7c:4c:c3:7b:8b:bd:
41:81:ef:f2:82:dc:1b:2c:77:2e:fa:47:a4:cb:b9:76:2f:f4:
be:83:00:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:21 2025 by rpki-client