Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
File: Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft (raw, json)
Hash identifier: rL0971pt+EO40mo1sEQnx867bKmIcKgU4sAnHzCOau4=
Subject key identifier: BC:F0:D6:B0:14:77:E5:9F:F4:31:C3:8A:AB:A7:39:91:3E:04:98:D4
Authority key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
Certificate issuer: /CN=2a7df35d41b4062c10fc118189de47da27096db8
Certificate serial: 019A4F2B2564D83DF2E4319825F9F349F7A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
Manifest number: 07F2
Signing time: Tue 04 Nov 2025 14:00:18 +0000
Manifest this update: Tue 04 Nov 2025 14:00:18 +0000
Manifest next update: Wed 05 Nov 2025 14:00:18 +0000
Files and hashes: 1: Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl (hash: NIAM7VtunODnOVMvScTYz4faxYx4RVV7nbs+7HANPQI=)
2: Wky7GIO48q5Am7lt9_maGgpqgJU.roa (hash: zVs1sI4WsKaD65jBAnhtkrYGwGsMw1WHVF/3i95RTn0=)
3: fEeq-E1sxHOFQUJWiqwG8VrB7mI.roa (hash: /r8rCHZ/j6Q+/dPG2IPSlLzNTFQayT8a7Qiqlbqm++I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:25:64:d8:3d:f2:e4:31:98:25:f9:f3:49:f7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7df35d41b4062c10fc118189de47da27096db8
Validity
Not Before: Nov 4 14:00:18 2025 GMT
Not After : Nov 5 14:00:18 2025 GMT
Subject: CN=bcf0d6b01477e59ff431c38aaba739913e0498d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:6f:79:12:3d:de:b4:11:83:76:d6:30:91:
30:43:0f:5f:a0:4f:ad:fa:81:b3:7b:86:08:71:f8:
36:41:9e:90:4d:9a:03:af:ef:96:c7:2a:ae:19:66:
cd:67:1b:c0:9c:22:3f:d5:a4:51:09:5d:f4:3f:56:
36:bf:52:d1:4c:74:e9:aa:ec:a3:ec:73:94:35:a3:
a6:d7:a2:6b:7a:ea:e1:8a:ee:30:1e:e9:47:b3:08:
e1:f8:04:f7:19:9b:d4:71:3d:77:1d:1b:bf:5a:f5:
3a:ee:28:9b:45:7c:23:86:dc:49:3f:5c:88:79:49:
ee:fc:f4:77:07:26:4c:d6:e6:5a:4f:0e:aa:f3:03:
09:2e:9d:4e:79:5b:08:25:5a:81:1b:97:95:16:b0:
fe:e4:36:04:ce:0a:bf:e3:da:e9:b2:a6:e8:2d:6b:
5b:31:05:4a:c3:d8:b7:6a:99:6d:30:d4:09:bd:99:
5b:5c:2b:e6:59:25:f9:29:9d:c2:e7:c0:ad:37:10:
26:e4:7c:72:0a:81:80:eb:70:8d:de:99:d3:29:48:
c0:50:86:e4:27:ae:c1:21:b2:82:cf:71:06:1f:a9:
ea:31:6c:75:32:2f:2a:d8:05:08:fa:84:97:85:7a:
a8:bb:9d:02:98:08:da:6e:56:41:11:5b:92:bd:11:
ff:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F0:D6:B0:14:77:E5:9F:F4:31:C3:8A:AB:A7:39:91:3E:04:98:D4
X509v3 Authority Key Identifier:
keyid:2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0e:cd:1a:af:e3:69:7e:f9:b6:f3:1e:ac:78:26:7f:c2:f9:
41:ff:95:7e:b7:0b:dd:85:b1:7d:6f:36:89:f0:ab:27:a5:34:
7c:32:ab:64:89:6d:10:c6:e4:f0:c9:cb:d0:a3:b5:b2:f3:7c:
91:8c:53:f5:a2:ac:06:d7:c2:6e:b3:ae:72:ad:d9:ab:78:ad:
d1:d5:74:76:2c:50:78:7c:6d:db:9f:5c:1b:d1:36:9e:f8:f0:
9a:87:54:80:c2:10:f6:d4:65:d6:cb:17:60:a9:6d:55:a7:85:
c8:81:e9:fc:f4:06:64:37:96:db:e5:f9:d1:73:4f:5d:c2:ed:
6b:2c:5f:85:de:1c:6a:48:c3:a7:d6:57:54:16:09:1c:d4:d6:
e5:39:fe:ef:bc:94:ae:2f:5d:bc:c1:7a:78:9f:3f:c3:70:f8:
d4:5b:9d:95:62:5b:3c:8d:b0:19:d2:dd:8b:85:cc:20:8e:ea:
1f:08:51:af:c8:47:f0:70:99:82:76:9c:e2:b4:2b:cb:e3:37:
44:b0:4e:2b:a7:ae:f5:65:08:d6:57:08:6b:55:3e:6d:af:69:
22:b6:c8:a1:66:75:ac:73:b1:26:19:5a:5c:bf:03:32:3e:11:
81:9f:bc:11:8b:c9:48:cc:b9:2e:7f:bc:fd:31:72:81:bb:86:
db:87:14:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:41 2025 by rpki-client