Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
File: K_CgGXhoxtjDTdFrP0TezF5CNvU.mft (raw, json)
Hash identifier: CVJ8pNxu1U3mc1x8Vxsk+DxPDAarH3nCnCVGVOwUDR8=
Subject key identifier: FD:EE:7A:EA:A2:C4:34:B1:3C:6E:D1:73:84:8B:E0:D4:14:4D:29:AA
Authority key identifier: 2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
Certificate issuer: /CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Certificate serial: 019A4EF4BDDD2EE113C15C2F81DE5E562899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
Manifest number: 0EC5
Signing time: Tue 04 Nov 2025 13:00:53 +0000
Manifest this update: Tue 04 Nov 2025 13:00:53 +0000
Manifest next update: Wed 05 Nov 2025 13:00:53 +0000
Files and hashes: 1: K_CgGXhoxtjDTdFrP0TezF5CNvU.crl (hash: jf9u7FL2uN8xL8QKY1TMnw/s4i1MJjbKC9C0YWRXklM=)
2: cwewYqqUz_DTY7N101NBNvby5-A.roa (hash: 12Ilbr32JYBfPHCal30nzRY5XUe8GWiDmB7OIucWhgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:bd:dd:2e:e1:13:c1:5c:2f:81:de:5e:56:28:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Validity
Not Before: Nov 4 13:00:53 2025 GMT
Not After : Nov 5 13:00:53 2025 GMT
Subject: CN=fdee7aeaa2c434b13c6ed173848be0d4144d29aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:01:c2:00:66:f5:99:d2:83:7f:31:a0:43:40:
1d:2d:2b:fd:84:8a:5e:e3:a7:9f:53:a6:67:a9:d0:
5b:32:35:df:ad:b9:86:54:92:97:c7:4d:37:59:4f:
29:d4:b4:7d:62:bf:51:f6:0c:e3:d6:08:a7:e9:79:
57:27:4f:a6:d4:1d:73:8c:dc:3d:5a:90:c5:9b:49:
1a:c4:39:0f:b1:cb:e5:22:8e:9c:d9:0e:a1:c4:10:
2a:f1:12:be:32:cc:d9:2c:c2:da:21:b2:41:25:42:
84:a5:5a:e0:dc:5f:5e:e8:e3:b1:7a:48:2b:41:42:
11:5c:25:35:ab:a3:7f:c4:e6:2e:53:60:9e:f6:7f:
cd:22:78:82:2c:4e:78:47:68:91:b9:be:cd:df:d4:
b7:05:00:2c:fb:3a:7a:bd:43:06:3e:a2:a7:c9:1b:
2f:ff:d1:f3:ce:c8:4f:41:db:f9:44:50:29:4a:1e:
52:cb:bf:49:f1:24:88:86:4e:a0:55:78:de:65:b6:
03:8b:d5:a2:7e:96:3a:95:ce:dc:e7:9e:8f:b8:f2:
33:db:ea:10:5c:5e:28:a0:45:8f:1e:69:a7:09:d4:
39:0c:9e:bc:ae:74:d9:16:2f:83:2b:44:5c:11:dd:
b8:18:cf:a6:2f:8c:ef:28:34:b9:56:ca:ae:7a:4a:
53:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EE:7A:EA:A2:C4:34:B1:3C:6E:D1:73:84:8B:E0:D4:14:4D:29:AA
X509v3 Authority Key Identifier:
keyid:2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6d:e6:e3:e6:4a:a4:9d:63:70:02:47:71:77:45:c2:cf:71:
86:31:64:bc:94:88:5b:ee:bd:e3:12:80:5e:09:2f:f9:47:cb:
c3:bb:0c:8b:28:42:bd:88:03:5b:c4:2f:c3:64:cf:2e:e9:48:
ad:34:db:a4:32:5a:b0:12:1f:3f:6d:0b:eb:92:1d:5b:5e:21:
4b:de:09:60:42:cd:05:9b:98:76:d2:dd:7c:fc:27:53:02:24:
ab:2b:ac:eb:48:d5:be:b5:ad:25:c6:c4:71:fb:fc:dc:97:30:
50:52:33:7b:52:3f:c2:f5:0d:82:c4:b8:db:5d:bb:22:e3:27:
52:f2:d4:88:91:53:b0:00:8c:53:97:49:33:85:f3:b4:d0:81:
1e:2d:f6:97:9a:c8:3c:a3:5b:33:8a:c0:b3:95:36:19:63:39:
d8:18:29:54:72:44:b2:d4:ee:d2:7b:9b:0e:c4:fa:1e:f3:47:
3a:27:f1:ac:fd:72:a3:86:58:2c:0f:54:4d:48:9c:1c:fa:e9:
45:71:37:98:c0:65:83:85:30:fd:40:7b:9d:5f:25:2f:e3:a5:
d3:d5:6d:11:d5:fd:03:83:37:c1:f5:33:e6:b2:c9:60:f5:fe:
79:19:6b:9b:6b:00:4e:59:57:3b:1e:74:6a:85:5c:88:b4:17:
4d:d9:c0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:53 2025 by rpki-client