Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
File: K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json)
Hash identifier: 7cQOgHbOcsVxWbMc07+X5ADnqqTPwZYwgz5FEsapSpk=
Subject key identifier: EE:E2:9A:E8:DC:67:A4:4A:09:19:20:43:4C:C9:2B:70:E8:D9:B7:9A
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial: 019A4EBD59CA904D57460BA4FBD6EF6A5E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
Manifest number: 0B25
Signing time: Tue 04 Nov 2025 12:00:23 +0000
Manifest this update: Tue 04 Nov 2025 12:00:23 +0000
Manifest next update: Wed 05 Nov 2025 12:00:23 +0000
Files and hashes: 1: 553lKMIKwThYw8AISbuyrXf1Y3Y.roa (hash: nZE4YzzK77LLVsV2aH36whqra+m62dlwzfCf/rC05r0=)
2: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: 2z+Qe7F1DQngCavrm7lJJJdYNvTggc5M0rZrmMFLVMI=)
3: TzLZprRfeCh-Gvmzs5DuhB2A4E4.roa (hash: yX71+JwnuGNFxVBhBEfM6BQUby7eWkoWKbcUG9ykDEE=)
4: eAJf1shLltuAdbTmGWti91t3LTg.roa (hash: 8/RHu353a+jymfpXxCoIOn3xjWTjYdrxghHFteMflfs=)
5: gtgQ_ekA3bJACMevsOtUHfK0VcE.roa (hash: zrHM5OvfHbRJdC+cVcDeqn1NqWi0xhX/yY641YqUbM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:59:ca:90:4d:57:46:0b:a4:fb:d6:ef:6a:5e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Validity
Not Before: Nov 4 12:00:23 2025 GMT
Not After : Nov 5 12:00:23 2025 GMT
Subject: CN=eee29ae8dc67a44a091920434cc92b70e8d9b79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:1f:c4:50:18:d7:4e:50:dc:36:90:f4:59:
99:a5:5d:36:fa:2f:38:e5:79:c4:33:b1:bc:a7:de:
0d:1b:6f:d5:21:83:4d:1e:e4:bd:20:9e:a0:43:91:
ae:25:fe:18:c9:2b:18:c9:06:c4:85:f7:dd:da:bd:
ec:2e:cc:c4:a8:63:15:cd:ee:62:47:43:d7:cd:80:
a8:1f:cb:57:cd:b3:c0:e1:f5:b2:18:f1:f9:f9:d0:
b8:41:b8:5f:82:d8:06:c8:55:c8:04:87:ea:4f:80:
74:6a:6b:15:78:d9:bb:4d:95:3a:cc:d6:5a:95:b8:
db:d2:20:53:b9:d1:c7:24:c8:f1:27:15:72:2d:e5:
ce:1c:ca:b3:56:b6:f9:df:23:2f:63:ab:2a:9a:08:
9a:2d:07:d9:3b:ca:a8:81:6a:62:2f:f7:ee:ea:94:
30:f2:08:e4:78:94:9f:4a:96:76:a5:c9:50:70:c4:
87:7d:3d:92:d8:9b:f1:78:f3:cb:a9:7a:c3:42:b6:
4b:49:20:a6:0c:ee:12:f7:5e:48:65:6e:d6:09:24:
6c:e8:ee:ab:48:f3:82:1b:5f:bb:03:0f:1b:16:c3:
52:7a:ee:a5:de:23:7a:7a:5b:24:fd:3c:78:5d:e8:
7b:d8:16:32:ed:6b:ee:fc:0b:10:5c:56:7b:fa:95:
b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E2:9A:E8:DC:67:A4:4A:09:19:20:43:4C:C9:2B:70:E8:D9:B7:9A
X509v3 Authority Key Identifier:
keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:23:a2:53:c6:4d:4d:22:1a:7b:bd:0b:2c:29:e5:0d:72:f1:
e0:c7:ee:ef:99:7c:2c:1f:90:d1:d9:33:ae:39:3c:bc:70:cf:
e6:56:ac:db:ef:30:79:07:b1:4c:81:b7:38:0d:27:fe:d9:74:
62:7d:91:12:ad:4b:a3:4c:fd:31:a7:e0:34:90:a7:80:0e:e7:
f5:20:81:ad:6a:2e:0d:22:97:36:e8:a2:2f:ed:fa:b6:3b:ef:
07:4e:c7:0c:7b:b8:9e:06:4e:2c:68:15:52:c2:26:98:7f:e3:
79:fa:6c:7a:0e:a5:e2:26:df:0d:4e:4f:70:bb:e8:12:3c:ec:
a2:78:70:94:69:7b:f7:a1:2d:c2:cc:bf:37:21:95:04:47:b8:
e6:37:6a:8e:c1:4b:4b:7c:aa:e9:ff:84:8a:bc:a2:a2:df:91:
05:ed:21:05:c4:b8:42:34:7e:01:b8:4a:8d:a3:dd:36:2b:fd:
17:04:44:b0:2f:74:bb:cb:da:70:62:9a:39:b2:d4:17:53:bc:
67:e2:c8:fd:b7:b8:cd:d0:1b:ae:a0:fd:72:8a:15:f0:f9:d0:
99:0c:d9:2c:e9:e2:17:c0:d0:4f:3f:e7:a3:2c:68:0c:ee:e5:
ea:9d:3d:32:61:61:d8:57:7c:ad:dc:9e:ae:1d:17:37:fc:2e:
df:ec:84:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:36 2025 by rpki-client