Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
File: K0ro4PiNDIw530T_pB4ywmJ8OhU.mft (raw, json)
Hash identifier: esCTi/cmkVqEgFbl0ygrO0/Gn1pDJOTHWWnL3JA+N+c=
Subject key identifier: 2C:8B:07:1B:AF:DB:34:3F:F5:5D:61:02:4F:31:E2:C3:7C:E7:AA:73
Authority key identifier: 2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15
Certificate issuer: /CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
Certificate serial: 019A50072E12312DC0CDBDBBC92EB6E2303B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
Manifest number: 0427
Signing time: Tue 04 Nov 2025 18:00:39 +0000
Manifest this update: Tue 04 Nov 2025 18:00:39 +0000
Manifest next update: Wed 05 Nov 2025 18:00:39 +0000
Files and hashes: 1: K0ro4PiNDIw530T_pB4ywmJ8OhU.crl (hash: VZjgBbZPO4Ajt7Tzs83pdy4P051owFc9d9fNKTCG/0Y=)
2: RewjGr43EG1iIMj1c-4pVfpQCtU.roa (hash: yXODa8RGa/7nz4mBNAxVv6ZScKn5IPa0tTC093Zhd9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:2e:12:31:2d:c0:cd:bd:bb:c9:2e:b6:e2:30:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
Validity
Not Before: Nov 4 18:00:39 2025 GMT
Not After : Nov 5 18:00:39 2025 GMT
Subject: CN=2c8b071bafdb343ff55d61024f31e2c37ce7aa73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:96:20:14:26:e1:e0:b9:81:79:da:82:56:
0b:d2:f2:2b:17:2f:97:80:6b:cf:6a:bf:cb:59:71:
d3:06:2b:bd:49:ad:bc:46:21:91:8e:6c:5b:b4:87:
ed:da:86:63:a5:16:79:98:48:1d:75:ba:00:c5:db:
86:44:ff:8a:89:d3:4b:1a:c0:43:64:60:24:88:e0:
94:d3:9b:13:2a:74:dd:75:4a:7b:5f:86:22:63:f6:
99:a7:53:4d:3a:cd:57:71:1e:66:37:52:d0:63:13:
05:46:a5:36:e1:36:3d:21:5b:71:45:1e:64:d3:09:
f5:57:84:b5:6c:97:18:f5:43:c6:d2:73:58:a2:af:
0b:46:2b:71:fc:d1:dc:41:29:ad:14:99:89:9b:93:
7e:85:0c:e0:04:41:07:e4:9b:90:d8:61:5f:58:26:
fc:bf:11:39:66:3b:58:2a:20:37:b7:5d:3d:ef:08:
a4:ea:0c:31:57:5c:c0:11:67:95:04:fa:bf:ea:21:
77:e6:22:4a:61:0a:c4:44:6a:dd:de:bc:ba:df:e0:
07:63:5d:81:3a:88:f0:ec:dd:76:f9:27:b5:c9:fa:
9e:b9:97:6d:0e:07:5f:e1:78:08:3d:8e:2c:5f:23:
69:a1:86:05:47:29:b4:ad:4e:37:5c:11:dc:c9:33:
0f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8B:07:1B:AF:DB:34:3F:F5:5D:61:02:4F:31:E2:C3:7C:E7:AA:73
X509v3 Authority Key Identifier:
keyid:2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3f:e5:f1:08:45:f3:a4:63:ed:56:8e:ea:b6:e3:83:09:58:
6f:67:ff:55:0f:fc:76:1e:39:94:47:a3:33:d7:c0:06:62:f3:
d9:32:5e:c5:d9:19:44:7c:3f:df:4c:7f:e1:70:5c:d0:b0:fd:
97:6b:8f:91:e2:3c:64:4e:88:34:91:3d:25:73:7e:10:15:5b:
c0:df:57:d6:0c:9e:77:4d:06:45:df:e4:35:dd:0e:bd:96:36:
91:a9:dd:df:c3:93:68:92:44:e7:d5:7a:ac:5b:7c:3b:c0:52:
62:d1:aa:15:61:98:41:ec:56:c8:e4:00:97:a6:32:0b:47:46:
b7:97:9c:7b:18:10:ec:a3:e4:3e:40:c8:21:f9:38:5c:df:f8:
7b:47:7f:ee:3e:0c:56:df:bb:4c:40:85:1e:f3:14:03:be:98:
ce:c8:11:1b:59:48:59:98:5c:68:9f:b4:3b:66:87:d4:e3:1a:
98:3e:1f:b0:65:79:99:93:52:2e:27:2c:8f:d8:d5:4a:35:c5:
ea:08:a9:b7:5a:9c:d5:a9:de:0f:74:b4:b6:a5:b4:da:7e:3d:
1d:8f:54:c2:0c:9f:84:6f:e5:a6:b7:ed:7b:1e:c3:01:90:74:
e3:34:ae:8d:d6:f7:db:30:35:d3:8a:ad:6a:4e:4f:8a:f7:f3:
2b:e4:bd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:23:22 2025 by rpki-client