Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
File: K87k2VI_FSkcV2df0m3JUKfNVVA.mft (raw, json)
Hash identifier: xWAX9ZfxpwX5v5nj4GvLSLbBUABPUSJhzGij5wxi/ZY=
Subject key identifier: 39:74:D7:A2:86:FD:AF:6E:CB:08:1C:22:73:C1:6E:C2:19:53:B7:5E
Authority key identifier: 2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50
Certificate issuer: /CN=2bcee4d9523f15291c57675fd26dc950a7cd5550
Certificate serial: 019A4E18DF3758964F6B0A094B0A3BB5BE46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 09:00:44 +0000
Manifest this update: Tue 04 Nov 2025 09:00:44 +0000
Manifest next update: Wed 05 Nov 2025 09:00:44 +0000
Files and hashes: 1: K87k2VI_FSkcV2df0m3JUKfNVVA.crl (hash: LjEC1lV0vyjIVOti50GfaA8XWMgLziRuFCGNUJEQbtw=)
2: pxqHr4sai6w4MscZayNHP7SOQ7U.roa (hash: ixQj9fChzVhStwA3xD3Awi6hHSqhUCeXJMrkMLmnies=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:df:37:58:96:4f:6b:0a:09:4b:0a:3b:b5:be:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bcee4d9523f15291c57675fd26dc950a7cd5550
Validity
Not Before: Nov 4 09:00:44 2025 GMT
Not After : Nov 5 09:00:44 2025 GMT
Subject: CN=3974d7a286fdaf6ecb081c2273c16ec21953b75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8f:4a:69:49:01:ad:88:f7:8d:ac:51:e1:2d:
f7:1e:ce:ad:cb:fb:d3:29:0a:60:9b:26:7b:b4:93:
48:ef:fe:5d:eb:25:84:a7:23:d2:63:57:8a:0a:0c:
2d:7a:f9:97:b4:6f:11:9c:75:dc:a4:75:a2:0d:be:
1b:fa:70:4f:e0:79:fe:36:82:0c:5b:84:ea:4c:5d:
64:3d:26:d9:81:ca:b3:8a:2d:e7:84:d2:73:db:5c:
ae:13:1a:8d:4c:6c:b6:b9:ce:65:7c:17:0d:2a:d2:
8e:61:c9:d2:c4:2a:88:00:25:49:ec:ff:b7:67:59:
fc:d6:a1:ed:88:f6:f9:41:10:8a:12:6d:8f:8b:e4:
b7:47:e5:f5:ff:62:46:96:0f:16:c6:6e:1c:14:0f:
e8:4c:f3:3d:a9:69:56:5b:33:a6:33:74:60:99:a7:
2c:0e:0e:7b:a3:9c:5b:f9:b4:7a:69:e7:76:e1:a9:
49:4d:99:c4:d2:41:4f:f6:05:50:29:3b:8b:51:23:
b2:cb:7a:b3:e9:cc:5c:30:6a:ce:a1:1d:f8:2a:f7:
21:40:f5:54:1f:7a:f9:54:26:4e:8b:51:be:db:be:
f2:00:79:81:11:a9:7f:37:d8:33:9c:48:3d:b7:7a:
ce:59:34:54:87:aa:26:03:d6:6d:19:6d:d6:5c:99:
82:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:74:D7:A2:86:FD:AF:6E:CB:08:1C:22:73:C1:6E:C2:19:53:B7:5E
X509v3 Authority Key Identifier:
keyid:2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:8e:b6:88:a0:51:c1:7f:9f:c4:0d:52:7d:b4:44:b4:22:df:
57:8a:59:b3:ac:21:fa:04:36:25:89:75:52:c7:84:90:4b:99:
2b:4b:8a:6f:ac:95:40:3a:20:87:e9:1b:6e:77:b7:ec:73:43:
26:ac:a6:99:19:a3:f6:47:a1:87:1b:b0:7a:92:93:34:34:67:
c9:28:57:b8:18:ad:ca:62:d8:99:39:e9:98:26:d5:b8:8d:70:
31:8e:4c:bd:b8:df:98:00:23:46:8d:66:74:b2:05:51:cd:9a:
ce:87:0c:bb:93:ea:45:ac:89:32:89:88:6b:58:fb:52:1b:83:
c8:81:b3:fc:62:c5:f2:0d:2a:9c:cf:e6:e5:0c:db:6f:9c:3b:
4d:4b:c8:3b:e7:f7:4d:99:a5:e6:59:47:f1:2c:8c:a7:5b:f3:
c9:95:36:69:81:03:49:05:25:56:04:9f:1f:59:65:9f:6e:ee:
22:66:7f:de:73:9e:86:c4:8b:dd:e7:b4:0e:31:0d:b5:4b:44:
20:60:31:1a:f0:ce:a0:a8:96:cb:8a:e0:ca:b4:63:d6:7c:bd:
02:4b:86:85:65:2c:5f:14:93:b3:10:b5:37:10:de:f7:61:1a:
71:6a:cb:f2:63:91:21:92:7f:61:7c:86:60:c4:20:19:ac:b2:
c0:0a:c7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:10 2025 by rpki-client