Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
File: K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft (raw, json)
Hash identifier: AxkLyvr1P4IjcOb2G/aTb0aRM5KHgTtWCmRU6kDJ0Ao=
Subject key identifier: 95:2A:0D:41:BE:D6:6D:AA:D1:16:C7:A2:4E:69:C5:5A:FB:3A:7E:49
Authority key identifier: 2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3
Certificate issuer: /CN=2bf7ef33dd19690d94941c92fb31479550a917b3
Certificate serial: 019A5150CE672AEACBB8753AAE98F33A0109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
Manifest number: 04BC
Signing time: Wed 05 Nov 2025 00:00:41 +0000
Manifest this update: Wed 05 Nov 2025 00:00:41 +0000
Manifest next update: Thu 06 Nov 2025 00:00:41 +0000
Files and hashes: 1: K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl (hash: WQs+FDHfOwPxVXokRV+EN1jQsMM+YkIWYD+IoX5jDpY=)
2: TOPYw7YFWEAu7oYT1AfYZdgQtaE.roa (hash: qOIyQIvyLn/Q2C2VwhGhnpqFg11I5FE5kKtTCYisDKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:ce:67:2a:ea:cb:b8:75:3a:ae:98:f3:3a:01:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf7ef33dd19690d94941c92fb31479550a917b3
Validity
Not Before: Nov 5 00:00:41 2025 GMT
Not After : Nov 6 00:00:41 2025 GMT
Subject: CN=952a0d41bed66daad116c7a24e69c55afb3a7e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c5:f9:0a:52:50:34:74:90:8e:a6:65:f1:2a:
78:c8:18:d8:c5:6a:83:6c:95:8d:c8:f4:fa:8e:6d:
01:c0:bd:d8:92:fe:fd:ed:ae:57:d6:71:d8:2b:ec:
95:d7:7e:6b:f8:42:9a:05:f6:a6:16:6a:57:6c:fc:
42:7e:05:1f:06:c3:bd:ef:d9:f6:ec:bd:51:c0:83:
53:fe:00:69:33:bc:db:34:c2:3e:23:f2:a5:ab:9c:
34:ce:99:b1:cb:69:ef:87:88:cf:72:68:88:c1:d3:
9f:aa:83:b1:5f:d6:02:66:b9:02:3d:7c:0d:72:5b:
bf:0f:1c:3c:5e:e3:30:f1:71:e2:14:4b:65:c9:e9:
ea:bd:fa:db:62:64:fc:96:b5:aa:20:ed:62:0a:03:
ab:45:19:2c:75:e4:92:f7:89:24:4f:35:3d:09:8c:
41:2f:c4:0a:23:4f:c8:d1:22:a7:4e:34:f6:92:9b:
4e:e3:ca:7f:62:19:ec:c8:fd:f1:a7:db:e1:de:32:
fe:68:7e:29:7c:33:86:13:0e:35:c5:c5:ef:0d:2f:
a1:a8:9d:71:07:59:48:45:aa:e6:7b:bc:35:0e:8c:
a0:db:04:a3:35:0b:de:c9:1a:14:93:8c:d6:c1:33:
d6:94:19:67:11:bc:62:4a:00:fe:e3:f0:36:62:f5:
33:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2A:0D:41:BE:D6:6D:AA:D1:16:C7:A2:4E:69:C5:5A:FB:3A:7E:49
X509v3 Authority Key Identifier:
keyid:2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:fe:8d:00:18:f8:f5:73:b1:7d:03:01:69:3c:1b:e3:92:0a:
05:d8:3a:ad:96:00:e9:7a:c2:3e:0f:ca:f5:65:8e:05:8a:38:
03:21:56:09:a8:d8:6d:0d:37:64:ab:72:21:6f:81:42:6c:8e:
95:df:ac:8a:8d:5c:a2:53:e2:66:96:6f:6d:6c:53:ab:3f:3a:
73:66:89:78:bd:d8:a1:1e:9f:a2:6c:b6:92:15:e8:1a:dc:5c:
f1:d3:59:14:12:bc:7f:0d:8e:57:4f:0f:0b:2b:ff:6e:85:60:
ed:65:51:e3:b0:32:f0:b0:48:81:ca:0c:3f:68:4d:41:55:b4:
fc:a1:b5:41:ba:89:35:79:b9:b8:6b:5c:2a:75:f6:21:82:ee:
70:b2:37:2b:0d:29:3c:be:61:e0:e3:d9:b9:36:62:c9:be:c3:
17:c7:3c:0c:70:af:36:ee:40:30:e6:da:28:cb:f5:c3:5b:04:
66:01:22:28:1b:da:24:ee:66:b1:c2:70:c8:1e:ad:93:aa:e7:
61:5f:1c:78:f6:a3:da:95:7f:65:12:66:cd:65:21:ca:ee:ba:
02:0f:0e:29:b5:f7:cf:6a:d3:6e:af:26:0a:96:67:7d:6a:3e:
e1:41:8e:53:c6:96:46:72:0e:4b:86:c9:1b:50:cd:5b:c1:23:
cb:f0:fa:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:47:28 2025 by rpki-client