Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
File: K2s1AF0wIoBENtctw8nIZc-qoAM.mft (raw, json)
Hash identifier: iP7B7JwiUzTdRHi9iiolvcTsDkxBpWcWjQOZK92cy6g=
Subject key identifier: 88:27:F9:51:CB:E7:75:D7:29:02:8E:40:CB:04:EA:54:43:5A:79:B0
Authority key identifier: 2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03
Certificate issuer: /CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
Certificate serial: 019A515156AB8CD7DA32FED4BEC56821E9AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
Manifest number: 0C39
Signing time: Wed 05 Nov 2025 00:01:16 +0000
Manifest this update: Wed 05 Nov 2025 00:01:16 +0000
Manifest next update: Thu 06 Nov 2025 00:01:16 +0000
Files and hashes: 1: K2s1AF0wIoBENtctw8nIZc-qoAM.crl (hash: c1EatRTYyKrK5cdJur+24f18V/FmGf2IMg9kzRri9E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:56:ab:8c:d7:da:32:fe:d4:be:c5:68:21:e9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
Validity
Not Before: Nov 5 00:01:16 2025 GMT
Not After : Nov 6 00:01:16 2025 GMT
Subject: CN=8827f951cbe775d729028e40cb04ea54435a79b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:91:60:0d:e4:de:e0:5a:ed:c2:8c:ad:63:39:
ef:dd:39:c5:77:06:14:5f:1e:0c:f5:fd:11:d6:e4:
24:72:86:f3:54:49:98:6b:a3:0a:db:71:db:e8:cf:
46:26:f0:cc:56:35:4e:fe:6b:04:7c:a5:f9:7b:88:
9c:05:fd:fc:1e:f0:7a:75:3e:bf:bb:55:12:34:b6:
23:93:5d:15:6c:a0:4e:fc:a8:24:27:ed:0c:40:8f:
d9:3d:cf:49:99:94:c9:d7:ca:7d:4d:05:44:0b:d0:
c0:32:8e:24:3e:51:f7:76:9a:31:5c:72:e8:8e:13:
76:0b:84:1b:34:04:2c:08:09:ab:e5:08:86:28:c3:
22:8b:82:44:b1:7a:94:aa:58:56:c1:b6:1d:90:c0:
bc:b4:f1:cd:b2:3b:98:6e:f8:8e:fd:17:0e:66:1e:
a1:6c:d3:79:e0:52:1e:73:5f:e0:12:23:c2:fe:6f:
bb:e8:b4:c0:22:1b:ad:5b:50:e2:f5:e9:36:67:9e:
31:30:07:79:ab:60:65:69:63:67:f6:b4:d1:0a:8b:
ee:b3:4b:02:c1:cc:8f:6b:b2:12:71:3b:76:ec:ac:
3c:88:ff:40:49:7e:ba:7a:0b:13:33:ca:ec:98:d0:
85:b7:65:71:c0:30:9f:a4:32:ad:ce:e8:0b:4e:10:
dc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:27:F9:51:CB:E7:75:D7:29:02:8E:40:CB:04:EA:54:43:5A:79:B0
X509v3 Authority Key Identifier:
keyid:2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c5:42:69:bd:68:c1:58:b7:8c:34:6f:84:51:a4:b6:a4:4d:
61:3b:3d:13:cc:dc:d0:98:f7:bd:0f:81:37:06:c9:52:c5:88:
dc:4a:34:2f:bc:0f:3f:39:98:7e:b3:41:d9:aa:76:56:be:87:
3a:85:64:77:1a:b5:71:2e:15:79:87:83:cd:98:22:f2:05:2e:
cc:3a:db:f0:57:4f:f7:4d:0f:18:27:6f:b4:22:18:1f:33:03:
15:e2:0a:4f:c0:e1:bb:b7:48:12:3a:42:7f:06:a9:42:fc:c6:
72:8d:02:98:e8:e2:0c:a0:a2:d2:0b:a6:7c:10:b7:3f:03:6a:
f5:26:0a:45:9f:33:71:67:3c:47:1d:12:b0:47:e5:93:75:94:
f0:c2:df:a3:60:6f:06:8f:bd:34:dd:af:90:0f:0c:40:6b:45:
3e:3b:af:1d:59:ce:07:d6:d7:e6:3c:12:c4:1c:fb:2a:cb:7f:
e3:b8:ce:72:bb:a8:58:14:4d:97:6e:fa:3c:7f:58:f1:c2:77:
b8:ba:48:2c:97:fc:4c:7d:3e:49:44:32:60:75:61:46:cb:61:
d5:93:1d:2c:64:24:b3:04:c8:31:d9:9c:8c:8f:d4:db:a1:80:
49:8e:a0:f0:49:e9:0f:ff:cd:82:f0:f2:43:e3:4f:e6:d9:6a:
e6:91:82:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUVarjNfaMv7UvsVoIemqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNmIzNTAwNWQzMDIyODA0NDM2ZDcyZGMzYzljODY1Y2Zh
YWEwMDMwHhcNMjUxMTA1MDAwMTE2WhcNMjUxMTA2MDAwMTE2WjAzMTEwLwYDVQQD
Eyg4ODI3Zjk1MWNiZTc3NWQ3MjkwMjhlNDBjYjA0ZWE1NDQzNWE3OWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJFgDeTe4FrtwoytYznv3TnFdwYU
Xx4M9f0R1uQkcobzVEmYa6MK23Hb6M9GJvDMVjVO/msEfKX5e4icBf38HvB6dT6/
u1USNLYjk10VbKBO/KgkJ+0MQI/ZPc9JmZTJ18p9TQVEC9DAMo4kPlH3dpoxXHLo
jhN2C4QbNAQsCAmr5QiGKMMii4JEsXqUqlhWwbYdkMC8tPHNsjuYbviO/RcOZh6h
bNN54FIec1/gEiPC/m+76LTAIhutW1Di9ek2Z54xMAd5q2BlaWNn9rTRCovus0sC
wcyPa7IScTt27Kw8iP9ASX66egsTM8rsmNCFt2VxwDCfpDKtzugLThDc2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgn+VHL53XXKQKOQMsE6lRDWnmwMB8GA1UdIwQY
MBaAFCtrNQBdMCKARDbXLcPJyGXPqqADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzJzMUFGMHdJb0JFTnRjdHc4bklaYy1xb0FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mNGMzNTQtODBmYi00YzM5LWEwZjgt
ZjE4ZmJmNTk2ZWJhLzEvSzJzMUFGMHdJb0JFTnRjdHc4bklaYy1xb0FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mNGMzNTQtODBmYi00YzM5LWEwZjgtZjE4ZmJmNTk2ZWJh
LzEvSzJzMUFGMHdJb0JFTnRjdHc4bklaYy1xb0FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMVCab1o
wVi3jDRvhFGktqRNYTs9E8zc0Jj3vQ+BNwbJUsWI3Eo0L7wPPzmYfrNB2ap2Vr6H
OoVkdxq1cS4VeYeDzZgi8gUuzDrb8FdP900PGCdvtCIYHzMDFeIKT8Dhu7dIEjpC
fwapQvzGco0CmOjiDKCi0gumfBC3PwNq9SYKRZ8zcWc8Rx0SsEflk3WU8MLfo2Bv
Bo+9NN2vkA8MQGtFPjuvHVnOB9bX5jwSxBz7Kst/47jOcruoWBRNl276PH9Y8cJ3
uLpILJf8TH0+SUQyYHVhRsth1ZMdLGQkswTIMdmcjI/U26GASY6g8EnpD//NgvDy
Q+NP5tlq5pGCwg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:38:10 2025 by rpki-client