Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
File: K2nm32CJ1NhhNocX6mbnthbHkMk.mft (raw, json)
Hash identifier: ULJNLwBKa8/e1FX0kUDjj+u7pQLL8P/qkadLGCRQa1A=
Subject key identifier: 9D:52:0D:DA:AF:5F:39:E1:84:B4:8D:D9:8D:35:CC:06:10:59:94:3F
Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Certificate serial: 019A51F5B1C5A86DDB4AF88562EB99362DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
Manifest number: 02DE
Signing time: Wed 05 Nov 2025 03:00:47 +0000
Manifest this update: Wed 05 Nov 2025 03:00:47 +0000
Manifest next update: Thu 06 Nov 2025 03:00:47 +0000
Files and hashes: 1: K2nm32CJ1NhhNocX6mbnthbHkMk.crl (hash: QfFXzOTnb+5Yuk2ZgW28fz/EAO/ICU/WZVScPs67WLM=)
2: k228-bewHScQpnRNpC4KIJkr3eY.roa (hash: MBjyb6nNGhWgH6/ZgxXCpJnqP9qVdkiHuZvRP3PD2BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:b1:c5:a8:6d:db:4a:f8:85:62:eb:99:36:2d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Validity
Not Before: Nov 5 03:00:47 2025 GMT
Not After : Nov 6 03:00:47 2025 GMT
Subject: CN=9d520ddaaf5f39e184b48dd98d35cc061059943f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:6c:1f:f5:eb:18:d5:3e:20:93:e2:f4:c2:
a0:a5:ca:33:ed:28:ab:c2:7e:24:8c:1d:5e:95:c1:
d6:f9:41:5e:b5:cd:d8:19:4f:49:6d:2a:ed:3b:27:
b8:c1:f3:5b:39:d9:6a:35:c5:29:ee:8c:a5:db:42:
1c:5e:c4:3e:bb:30:ff:18:be:75:45:e1:d3:6f:37:
52:7a:2e:dd:48:8d:8f:0a:28:03:bc:f3:85:7f:d3:
f4:60:bd:04:0e:96:e0:d5:33:a1:48:e4:80:38:c3:
eb:15:79:e2:0b:f7:f1:0b:52:b4:a8:c0:87:a6:f8:
a5:05:56:e9:b6:ad:ce:40:ff:ea:f2:30:34:19:bc:
42:0c:70:71:b1:a3:60:7e:4d:7c:9b:c1:f0:c9:7b:
af:27:f2:43:9b:2c:f8:5d:ea:eb:8e:bd:21:63:a9:
f2:d9:f0:c0:48:57:4e:19:97:67:4d:ba:68:20:a2:
63:e4:82:1c:6e:ee:35:71:f3:e3:78:a9:cb:52:12:
41:e6:31:3a:92:53:84:fb:20:2a:7b:77:e8:e4:d5:
0f:65:f2:f9:8e:5e:a5:92:8c:03:43:c0:cf:cd:69:
17:26:d3:ea:79:b2:e8:1b:16:22:fe:23:82:dc:93:
73:eb:df:dc:1e:9a:3c:d9:24:b6:cc:60:59:15:72:
86:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:52:0D:DA:AF:5F:39:E1:84:B4:8D:D9:8D:35:CC:06:10:59:94:3F
X509v3 Authority Key Identifier:
keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e9:d2:49:c9:35:b8:f3:d8:72:df:62:68:ee:51:a7:df:26:
aa:b3:db:21:97:dd:07:5f:38:53:2e:4b:4b:24:67:18:7d:81:
1d:e6:4b:81:5a:34:3a:07:78:d1:8d:bc:84:8a:74:2d:5f:28:
4d:5d:01:f0:3d:82:3f:40:e4:9d:fd:34:c7:f1:ea:ba:ea:6d:
0b:90:82:82:96:7e:62:d8:e2:c6:c1:f8:8a:8d:10:56:95:77:
5d:8e:b9:ff:4e:81:c2:8b:72:bd:6b:fb:66:a7:e2:05:0c:32:
35:c4:04:04:32:cc:a4:e7:0e:9f:38:b8:87:8c:ab:67:5a:0c:
68:fa:68:b8:fd:6a:b9:e0:29:03:c3:b9:ca:c5:77:45:a3:86:
b3:0e:25:60:a0:71:5a:d8:cf:6f:9e:f0:86:3a:fd:be:e1:d8:
5d:66:83:3f:64:da:c0:3f:54:79:9a:b2:2e:8a:23:94:18:f1:
01:16:77:31:d6:13:45:c3:b2:a6:a4:99:2e:da:78:24:5a:2c:
bf:66:be:86:ad:a0:bb:b6:8d:f5:90:ec:1b:38:66:ba:fd:b4:
8c:d9:35:b9:4e:3a:77:05:45:b6:71:2e:cf:d5:8e:2e:64:cd:
c4:41:f1:44:f3:bd:1b:c3:c6:85:b7:b3:8d:33:cc:00:94:2d:
26:df:1b:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9bHFqG3bSviFYuuZNi36MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNjllNmRmNjA4OWQ0ZDg2MTM2ODcxN2VhNjZlN2I2MTZj
NzkwYzkwHhcNMjUxMTA1MDMwMDQ3WhcNMjUxMTA2MDMwMDQ3WjAzMTEwLwYDVQQD
Eyg5ZDUyMGRkYWFmNWYzOWUxODRiNDhkZDk4ZDM1Y2MwNjEwNTk5NDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4hsH/XrGNU+IJPi9MKgpcoz7Sir
wn4kjB1elcHW+UFetc3YGU9JbSrtOye4wfNbOdlqNcUp7oyl20IcXsQ+uzD/GL51
ReHTbzdSei7dSI2PCigDvPOFf9P0YL0EDpbg1TOhSOSAOMPrFXniC/fxC1K0qMCH
pvilBVbptq3OQP/q8jA0GbxCDHBxsaNgfk18m8HwyXuvJ/JDmyz4Xerrjr0hY6ny
2fDASFdOGZdnTbpoIKJj5IIcbu41cfPjeKnLUhJB5jE6klOE+yAqe3fo5NUPZfL5
jl6lkowDQ8DPzWkXJtPqebLoGxYi/iOC3JNz69/cHpo82SS2zGBZFXKGUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1SDdqvXznhhLSN2Y01zAYQWZQ/MB8GA1UdIwQY
MBaAFCtp5t9gidTYYTaHF+pm57YWx5DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jOGRhZGMtOGUyNy00YmJlLWFlZTUt
MDViM2U0MzFjMWVhLzEvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9jOGRhZGMtOGUyNy00YmJlLWFlZTUtMDViM2U0MzFjMWVh
LzEvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+nSSck1
uPPYct9iaO5Rp98mqrPbIZfdB184Uy5LSyRnGH2BHeZLgVo0Ogd40Y28hIp0LV8o
TV0B8D2CP0Dknf00x/HquuptC5CCgpZ+YtjixsH4io0QVpV3XY65/06BwotyvWv7
ZqfiBQwyNcQEBDLMpOcOnzi4h4yrZ1oMaPpouP1queApA8O5ysV3RaOGsw4lYKBx
WtjPb57whjr9vuHYXWaDP2TawD9UeZqyLoojlBjxARZ3MdYTRcOypqSZLtp4JFos
v2a+hq2gu7aN9ZDsGzhmuv20jNk1uU46dwVFtnEuz9WOLmTNxEHxRPO9G8PGhbez
jTPMAJQtJt8b8A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:53:06 2025 by rpki-client