Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
File: K_L644DF1MHigYEKNNuYg8nZ_y8.mft (raw, json)
Hash identifier: tbexHXPvCse7J0zb82SMZ+2OTGTWrnjdtPJ2yiwLKy8=
Subject key identifier: 8C:37:1F:7A:55:D9:EF:45:45:21:34:6D:97:D4:D3:10:E8:38:53:47
Authority key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
Certificate issuer: /CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Certificate serial: 019A4E868E123A16E75F526301B21358EA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
Manifest number: 0695
Signing time: Tue 04 Nov 2025 11:00:32 +0000
Manifest this update: Tue 04 Nov 2025 11:00:32 +0000
Manifest next update: Wed 05 Nov 2025 11:00:32 +0000
Files and hashes: 1: 8964tiUCrci-dSkDlhkG-ckPcFg.roa (hash: Rx+Y3g/PNyAfTkv/fzvW90GXeVi8TmddmM6ip16OFZg=)
2: K_L644DF1MHigYEKNNuYg8nZ_y8.crl (hash: bbhZMf+cNyTdLyy7cAwBaBW8+HOqDdpP8SPibUFnS/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:8e:12:3a:16:e7:5f:52:63:01:b2:13:58:ea:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Validity
Not Before: Nov 4 11:00:32 2025 GMT
Not After : Nov 5 11:00:32 2025 GMT
Subject: CN=8c371f7a55d9ef454521346d97d4d310e8385347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:e2:52:91:30:71:63:9e:01:88:17:16:3b:
61:8f:5e:1c:6c:ed:e0:57:41:f0:66:47:c2:a4:69:
a3:00:47:4e:1e:6f:10:cc:d8:39:e5:15:6f:18:f2:
c6:61:20:da:95:77:86:0d:9b:2f:83:64:06:df:81:
1e:3f:90:5e:36:0a:cf:3d:3b:7b:9e:c2:e9:02:60:
c1:b7:56:89:42:38:3b:84:e3:38:df:ca:91:bc:8a:
db:fd:bc:d9:1a:80:66:e6:1f:1c:14:c5:a6:39:49:
41:cb:c2:17:de:45:df:05:1d:04:c5:e6:96:f1:97:
04:a1:40:e6:c4:97:35:a7:5b:79:0e:3e:68:ab:b6:
1c:83:5f:7b:0f:c0:0a:c3:44:cf:a3:a7:0e:43:a4:
59:42:30:67:5e:1a:a6:bd:eb:e7:0f:f4:b6:b8:ab:
0d:3b:9e:d3:42:7d:f1:80:ba:bb:30:5b:4d:f3:ea:
d1:2a:f0:01:f3:51:0e:e3:1a:ee:8d:66:83:17:49:
04:51:0f:35:4f:c5:00:e9:7b:ea:d7:44:a7:03:e2:
6c:a7:9e:71:c9:c0:75:c8:70:09:e6:4a:b2:7a:37:
25:1b:f6:0d:81:59:f2:ca:70:b8:da:ce:d6:08:e8:
85:5b:23:b5:08:0c:7a:4d:fc:db:30:c3:4c:22:8b:
88:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:37:1F:7A:55:D9:EF:45:45:21:34:6D:97:D4:D3:10:E8:38:53:47
X509v3 Authority Key Identifier:
keyid:2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:39:b8:1c:7c:b9:a8:a4:dc:ff:b6:e7:af:9f:58:34:a1:13:
e8:b3:9b:b9:ae:57:99:62:a8:47:8c:90:a7:a4:0d:6e:b2:41:
d4:4f:19:39:29:ab:29:47:24:3f:06:95:8d:28:37:87:fa:1b:
8d:a6:cb:94:cf:b6:cb:8b:a9:7a:8e:53:67:a2:25:2f:87:e4:
57:c1:d6:29:56:cf:a1:e8:49:be:60:4c:92:b3:f4:6c:81:d9:
b7:e7:ee:fa:71:68:5b:9a:4c:66:79:e1:e9:8b:da:c9:cc:54:
48:8e:56:c0:ec:fc:ab:f2:06:ef:b5:f9:a4:f3:12:39:0b:b9:
2d:de:30:54:62:d3:e8:26:55:90:2a:a6:1e:7c:94:6c:38:82:
b4:46:c8:21:2b:fa:f2:af:5a:ae:0b:fb:4f:41:47:ba:eb:85:
55:31:c7:46:10:ec:eb:9a:cb:bc:3e:b6:44:74:22:2d:d8:56:
b0:31:04:4e:d1:d0:10:6e:56:71:cc:b9:9b:d1:f6:21:86:3c:
3b:e2:c1:a6:6e:5a:7c:ca:7d:8c:f0:86:23:66:85:5d:5e:af:
b1:d8:53:b5:7d:06:cd:5e:60:16:3e:29:eb:9f:10:d2:1c:64:
da:70:f9:d3:39:07:22:43:cc:e8:2a:a3:23:b3:c9:b8:6a:d7:
72:1b:dd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:28 2025 by rpki-client