Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
File: K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft (raw, json)
Hash identifier: XtaROYV2zvKDC9Y4HxvOIFyQIRTcAuH3kf4hUbu+OGc=
Subject key identifier: 9A:47:44:DF:3B:E2:72:FC:3A:62:FD:AB:60:6A:0F:5C:BE:C6:EE:8E
Authority key identifier: 2B:57:B0:DB:00:16:FE:62:50:95:DF:0C:6E:57:FE:07:F1:CF:28:9F
Certificate issuer: /CN=2b57b0db0016fe625095df0c6e57fe07f1cf289f
Certificate serial: 019A50E3FDA89A9135339E0086661250F70A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
Manifest number: 0827
Signing time: Tue 04 Nov 2025 22:01:50 +0000
Manifest this update: Tue 04 Nov 2025 22:01:50 +0000
Manifest next update: Wed 05 Nov 2025 22:01:50 +0000
Files and hashes: 1: K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl (hash: MRtgRs4mPcbPY/Z5kmWS/5cj/fTUnjMjIXYCAYNmPKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:fd:a8:9a:91:35:33:9e:00:86:66:12:50:f7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b57b0db0016fe625095df0c6e57fe07f1cf289f
Validity
Not Before: Nov 4 22:01:50 2025 GMT
Not After : Nov 5 22:01:50 2025 GMT
Subject: CN=9a4744df3be272fc3a62fdab606a0f5cbec6ee8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:68:40:c0:71:48:17:8f:f9:7b:85:d9:aa:b1:
3a:69:ec:01:ab:87:44:e2:55:ea:76:5e:9c:08:c7:
aa:0a:b6:16:af:85:c0:28:5e:0d:be:d0:cf:f2:6a:
7f:0e:80:31:f4:1a:e2:19:e8:3f:7d:0b:d2:86:ed:
d8:95:07:33:1d:b6:13:f0:56:e3:a7:3c:1a:c6:d6:
73:69:48:92:b0:60:17:0e:f5:5a:66:e6:c5:23:20:
58:57:ca:63:be:05:cf:a3:7e:15:1b:cb:60:5a:80:
4d:f3:3a:32:03:89:72:f8:ba:a5:0b:0c:f7:84:80:
ad:58:bb:05:13:d6:31:3b:3b:09:dc:80:4a:7b:87:
fe:61:0c:dd:7e:47:39:d4:d6:1d:94:5e:06:08:7f:
7b:7e:46:71:92:51:3b:4e:0e:c0:dd:1f:cc:c7:e4:
5b:35:94:c5:91:b0:68:b9:de:af:dd:88:32:00:01:
a1:85:7e:30:49:8d:a5:8e:da:0c:34:bb:7f:a2:d4:
3f:0f:d8:a9:08:50:19:26:03:f0:b9:aa:6d:db:62:
1a:f2:2d:99:fc:fb:7b:9f:1b:02:20:d7:e7:96:ad:
2d:cc:f9:9f:e5:2f:24:00:75:7a:3e:17:0a:78:2e:
06:41:1a:88:8c:e8:6b:87:bf:25:31:34:34:6e:97:
ed:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:47:44:DF:3B:E2:72:FC:3A:62:FD:AB:60:6A:0F:5C:BE:C6:EE:8E
X509v3 Authority Key Identifier:
keyid:2B:57:B0:DB:00:16:FE:62:50:95:DF:0C:6E:57:FE:07:F1:CF:28:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:2c:b7:e3:7b:47:75:d6:de:66:58:48:2c:e8:51:fe:ef:d0:
8c:a7:dd:50:84:2a:c3:69:81:ea:e9:21:98:9a:8f:78:3f:6a:
4f:5d:5a:99:01:05:35:63:4e:0c:b8:9c:77:e6:61:a5:75:4d:
8b:29:86:b4:11:df:fe:39:90:5a:1c:aa:81:5c:ce:29:8f:65:
cb:c2:ed:be:2f:64:84:36:e2:0e:79:fc:63:48:82:5c:a4:bc:
21:6e:a8:f5:aa:33:84:15:44:62:54:8a:d0:cb:ea:85:4e:4a:
91:aa:4a:88:69:d0:f9:60:ec:f2:34:14:37:92:bf:df:6c:5d:
42:c1:27:56:52:d7:31:88:9d:39:0c:4c:e0:2c:d6:9e:2d:96:
ec:be:9a:99:19:74:15:db:4a:b2:ef:5c:f7:67:82:db:ef:bb:
df:02:87:d0:e9:8e:ef:64:7c:f2:5f:64:be:b9:eb:77:23:05:
30:7f:5d:15:5f:a0:bc:fb:21:f9:0f:e8:9f:93:66:79:d5:49:
ba:33:26:3f:5a:3d:a3:71:92:db:61:d6:6f:27:88:05:91:50:
b7:03:d1:2e:78:02:f8:52:12:8a:1b:ab:b6:20:5e:0a:5a:bb:
05:de:64:70:52:c9:a9:1f:0f:14:4e:2b:c5:47:d2:45:e2:04:
85:cb:d7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:27:13 2025 by rpki-client