Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
File: K-U9NAqL9Hwb800yVeEC77GBrRk.mft (raw, json)
Hash identifier: Va9xfc/CrICJBfN2nir/EctyVDNno/MglTTvgWgluBc=
Subject key identifier: 51:FE:35:FF:57:FB:15:52:01:5D:9A:24:B4:A6:DA:9A:F2:93:C8:F9
Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Certificate serial: 019A5119C71E36F6C9C21A0C9E9BC652589D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
Manifest number: 0B64
Signing time: Tue 04 Nov 2025 23:00:34 +0000
Manifest this update: Tue 04 Nov 2025 23:00:34 +0000
Manifest next update: Wed 05 Nov 2025 23:00:34 +0000
Files and hashes: 1: K-U9NAqL9Hwb800yVeEC77GBrRk.crl (hash: yt2t25yMM+I39RhofiNrpVvalfHbUHDDxG5jZPeh49Y=)
2: QmDTegVSmEYF6fnpKbqY_97oaSM.roa (hash: tHb5J/NaAqeZ3yJpUfHC3cRpeW6+mrRMysLZDeKxz2M=)
3: _tQcgZijvm9qlNfbL3oLbTBqXKw.roa (hash: xWDEvLw1mwcjLwMZNAz8Pf0/GCXvJ3lHopahWXf20MA=)
4: y4GLfgEHHvh7-yMgUWBtC7KLuEc.roa (hash: dQpKnxbZerxvWzLT4LUfokJhZeXYIR/y034iOg9NMks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:c7:1e:36:f6:c9:c2:1a:0c:9e:9b:c6:52:58:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Validity
Not Before: Nov 4 23:00:34 2025 GMT
Not After : Nov 5 23:00:34 2025 GMT
Subject: CN=51fe35ff57fb1552015d9a24b4a6da9af293c8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a0:28:de:aa:20:71:70:ad:3f:e2:31:79:d2:
c2:96:0d:b8:94:0d:46:37:00:4b:4c:8a:25:50:01:
3a:ab:77:bc:62:b1:64:b6:de:08:23:93:87:fb:bb:
29:8d:7a:84:96:23:55:a6:c5:13:4c:68:f9:52:67:
24:6e:08:a1:8d:30:82:88:cc:4d:a0:60:9e:2b:ea:
b7:22:12:cb:95:29:dc:ec:1d:a5:db:73:32:cd:34:
43:59:5a:6f:b1:08:44:8e:e0:cb:87:7b:e7:cd:65:
99:2c:22:a5:85:da:f7:81:5b:e7:a2:78:85:72:a7:
27:53:ba:6d:47:cc:e1:d7:49:e9:9a:1f:0b:77:87:
0a:0e:f4:bd:b6:b8:ec:9a:ce:ff:58:17:af:e8:89:
32:12:1a:22:d5:12:b2:6d:c2:81:6f:ef:b6:6c:e7:
96:45:63:93:f6:1b:7b:c4:11:f6:76:22:d8:b1:72:
48:fe:82:c6:f8:17:4a:b3:1b:cb:55:bb:66:64:b3:
94:83:9d:23:55:83:ae:bd:05:41:04:54:bd:48:4e:
07:c6:65:d8:20:c5:cb:0e:27:85:a1:e3:ba:97:a4:
fc:4a:9e:8e:5a:8b:8b:fd:bc:cb:2d:9f:b8:93:a9:
7c:88:cd:51:b8:21:6d:80:2a:a4:54:e7:ff:4e:5f:
b5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FE:35:FF:57:FB:15:52:01:5D:9A:24:B4:A6:DA:9A:F2:93:C8:F9
X509v3 Authority Key Identifier:
keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9f:65:d8:1b:9b:c2:e5:64:79:5e:34:b8:f0:81:3e:9b:e0:
14:ac:f3:23:6a:27:c0:bc:f5:d1:31:49:41:ed:b2:eb:cb:54:
ab:a2:49:60:b1:a9:99:32:c8:97:1c:23:b1:dd:a5:00:da:36:
c9:25:5f:67:44:8f:cb:0d:be:8e:e5:9a:c0:78:64:1e:dc:00:
c7:05:96:40:f2:f7:cc:ab:6a:a6:25:df:2d:57:ff:a1:b7:99:
72:52:df:67:e7:70:63:30:05:50:3d:12:c0:8a:6d:5b:1f:3e:
5c:f3:49:d4:24:f3:2d:92:8e:13:99:fd:b5:5a:1f:20:7e:6e:
bf:ee:38:6a:a4:81:d2:34:57:73:3a:9d:df:e0:af:b3:61:75:
74:0d:bc:4e:cd:0a:ef:fb:98:9d:9d:de:27:2e:b0:3e:74:87:
9a:87:bc:5a:0e:f4:c8:c7:84:67:ce:20:e6:a5:df:89:0b:62:
5f:99:72:cf:fa:e7:84:ac:10:51:d1:23:8b:68:df:a1:7f:26:
51:f7:2d:63:ff:06:b5:3e:7f:23:f4:33:7e:1c:60:81:dd:82:
68:21:eb:91:42:2b:66:f8:86:f4:d2:5a:50:51:26:36:bc:01:
eb:b9:73:22:cd:93:11:43:8a:ef:b0:a7:1e:b5:9f:92:08:a6:
0d:4f:c2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:08:20 2025 by rpki-client