Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
File: K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft (raw, json)
Hash identifier: 64MSPCU5ZRWLxeaehsdmg+WZe6BF33Kfsb5VbE3uzj8=
Subject key identifier: 5B:C6:D9:33:2E:DC:BD:A9:9D:2F:24:9B:CD:FC:D1:5E:6F:7F:58:2F
Authority key identifier: 2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
Certificate issuer: /CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Certificate serial: 019A4EF51A84AD17C5F6D4B7ABA267AF15C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 13:01:17 +0000
Manifest this update: Tue 04 Nov 2025 13:01:17 +0000
Manifest next update: Wed 05 Nov 2025 13:01:17 +0000
Files and hashes: 1: K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl (hash: rv9CH2N9NJ4yGdhLjzjooqqtKzoeSXYFaXd2KyMSAXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:1a:84:ad:17:c5:f6:d4:b7:ab:a2:67:af:15:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Validity
Not Before: Nov 4 13:01:17 2025 GMT
Not After : Nov 5 13:01:17 2025 GMT
Subject: CN=5bc6d9332edcbda99d2f249bcdfcd15e6f7f582f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ab:1c:f2:bd:f4:bd:43:38:5d:74:74:bc:71:
89:f9:b3:2a:46:aa:b7:c5:41:98:65:d7:0d:47:59:
a7:61:23:73:28:97:25:9b:5d:76:45:f2:71:b5:1b:
b9:e9:d3:d5:37:27:71:c9:4e:64:2c:b0:ef:d0:83:
a1:ff:2c:9d:21:44:0d:96:60:2f:4f:4e:67:02:fc:
63:1d:82:75:d9:14:57:80:18:06:b1:06:82:b2:d4:
21:e5:39:35:df:9d:8b:99:10:52:da:85:74:55:4d:
6d:95:74:c8:d1:7b:0d:2c:a1:ba:dc:25:f5:f6:53:
26:0e:75:7a:79:fc:da:6d:db:e4:21:18:16:bd:d8:
06:54:f5:58:71:c1:25:bf:95:bc:9d:60:70:39:6a:
99:d8:48:2d:9a:a5:b5:25:9e:ec:ea:ac:f5:53:91:
b7:fc:26:f7:8b:9c:45:5e:31:68:20:49:e5:dd:14:
be:da:ec:0f:fb:a8:10:44:e6:17:76:3c:1c:70:cc:
80:bf:ef:98:70:1b:9d:f1:2c:20:ec:58:92:96:29:
5a:ad:e6:df:80:fa:b3:70:d6:32:07:ec:a2:83:8f:
c9:d4:8e:0e:11:7f:21:5f:22:56:3e:1e:2f:0b:72:
79:42:cb:fb:52:32:fd:4a:d7:e0:f2:ee:4b:00:e6:
c8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C6:D9:33:2E:DC:BD:A9:9D:2F:24:9B:CD:FC:D1:5E:6F:7F:58:2F
X509v3 Authority Key Identifier:
keyid:2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:fe:fa:98:9b:18:9e:68:7d:f2:c9:05:95:bf:6e:12:d1:2e:
37:d2:73:30:f6:c8:4a:e7:3f:7e:12:55:57:6a:9a:cc:6f:40:
8d:25:76:9f:15:bd:2f:d7:31:84:43:01:3d:1f:c1:83:cc:7f:
ca:db:62:ef:f1:b3:cc:07:f5:7e:c9:bb:0e:e2:dd:1d:4c:d9:
6e:23:25:74:e2:c0:97:e4:d9:96:da:06:e2:5d:20:b8:12:1a:
4e:d7:f0:a3:41:d0:08:b4:e5:a8:50:03:59:f5:1a:01:f2:9d:
d9:fb:cb:73:d6:83:00:00:de:d5:e3:77:c1:f3:5d:75:c7:4c:
23:b3:6e:1b:b2:d3:74:52:31:cf:c5:fb:93:84:80:63:ab:84:
97:2b:3a:18:bf:7f:ca:22:ac:28:49:e2:04:c6:24:5d:44:64:
dc:ec:71:c0:b2:0d:ad:b7:3b:e0:29:a8:98:4c:f4:38:7c:96:
a1:0c:c9:cc:1b:29:aa:42:f1:cf:97:69:2b:58:6a:54:6f:92:
ef:26:a9:9f:b2:78:07:3e:d9:a6:2a:76:f1:93:45:53:c6:fa:
6a:e1:6f:65:e7:b8:5d:17:c4:5f:12:4a:f7:63:96:fd:de:da:
74:0e:b1:47:3a:86:8f:24:10:7c:c2:7c:90:af:0d:d7:8c:1e:
a9:f6:76:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:13 2025 by rpki-client