Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
File: k0UD3V9q0KYOe0A6WmQq3kYZljw.mft (raw, json)
Hash identifier: /oMy5zYtPZ56X2pqPIJux2FlD0h0b5P5J/TJdwHKduA=
Subject key identifier: B4:F6:AD:2E:6B:B1:7D:2D:56:4F:EB:78:39:64:87:C8:C8:A9:FC:36
Authority key identifier: 93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
Certificate issuer: /CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Certificate serial: 0199FB460EAD45040907DAFD9E3E05D910C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
Manifest number: 11E0
Signing time: Sun 19 Oct 2025 07:01:36 +0000
Manifest this update: Sun 19 Oct 2025 07:01:36 +0000
Manifest next update: Mon 20 Oct 2025 07:01:36 +0000
Files and hashes: 1: k0UD3V9q0KYOe0A6WmQq3kYZljw.crl (hash: S2udZBB6wuijCr9Yko2PiAwdM6XGZGYmZ3R2r4CcHc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:0e:ad:45:04:09:07:da:fd:9e:3e:05:d9:10:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Validity
Not Before: Oct 19 07:01:36 2025 GMT
Not After : Oct 20 07:01:36 2025 GMT
Subject: CN=b4f6ad2e6bb17d2d564feb78396487c8c8a9fc36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:da:d4:b7:c5:6f:98:6d:e7:07:8b:77:72:9a:
08:40:8a:c0:7d:b7:3d:02:ac:67:42:ff:1a:2e:c7:
ed:72:13:6c:e4:33:84:f2:db:0e:98:d0:b1:16:bc:
c3:07:42:b2:0f:12:54:6f:d3:05:88:6e:02:e6:b2:
9d:dd:71:83:be:27:be:ed:c5:84:56:99:76:f9:e2:
67:ee:2c:a0:50:52:df:7e:1b:26:90:9a:92:94:a1:
2f:8b:ce:30:b1:cc:c3:fb:af:22:fa:7d:5b:8f:12:
44:b4:bf:ef:0f:43:b0:6c:63:a3:20:b8:c0:66:79:
f0:ca:e6:98:2f:07:d4:3f:a1:ea:2a:e3:e7:1b:ff:
46:6f:da:9f:ea:86:f0:3c:ad:75:a9:77:7a:f5:24:
80:f2:30:f3:90:4b:e5:b3:a2:61:f9:97:10:26:d4:
d7:e3:ce:7e:76:ba:01:1d:f9:20:a8:05:cf:9d:3f:
e7:95:6c:e3:de:f1:a7:ab:f4:f7:24:0c:43:03:ed:
96:2b:44:f9:fc:b6:e4:21:cc:e5:57:90:0d:a1:1e:
ff:ee:34:20:41:cd:a0:8e:6a:0f:69:5d:44:a2:3b:
1c:59:9b:35:41:11:05:4c:2c:46:35:e7:46:1e:7b:
58:a0:af:82:d6:99:e7:22:8a:0e:62:18:05:67:c8:
74:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F6:AD:2E:6B:B1:7D:2D:56:4F:EB:78:39:64:87:C8:C8:A9:FC:36
X509v3 Authority Key Identifier:
keyid:93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c6:d1:41:8d:ee:1a:f3:e7:9e:90:6b:fc:47:15:3f:b1:5b:
c9:2f:3e:af:51:7c:d3:c0:18:fc:59:97:fc:47:40:34:4b:7e:
fe:e1:a6:74:ad:4b:eb:d5:9b:0f:d5:3a:cc:da:b2:c1:dd:46:
e5:f4:11:f8:11:45:7a:0c:71:41:53:39:77:5a:78:25:73:75:
0f:69:b8:df:4b:04:08:44:67:68:15:30:00:7b:2f:c1:07:5f:
d6:07:aa:e9:44:56:31:c3:7a:c8:03:67:d4:75:86:32:1b:80:
76:d3:5e:f9:25:04:56:5c:7e:b4:24:2f:1a:e8:bb:c0:62:4c:
3a:d0:64:c7:43:58:ca:82:83:a9:48:1a:f9:ac:d4:2e:31:5b:
d1:b1:99:de:97:5a:9c:d8:13:fc:e7:de:38:2f:de:be:d7:11:
32:3e:59:77:04:59:d0:b8:fd:61:cd:13:41:e2:17:e4:de:9f:
a7:94:ae:fd:7b:8a:39:cf:d0:86:3d:0a:47:ed:5c:f2:b7:8e:
77:9b:e4:03:4b:71:f6:44:e5:7b:8f:51:84:3a:f3:bd:5b:ba:
98:f1:8c:8c:d9:68:a4:23:eb:c7:92:17:3e:87:96:eb:9f:a8:
7f:c0:04:54:88:af:17:1d:b1:b6:8b:5d:8c:ce:5b:ad:62:cc:
e3:33:c4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:59 2025 by rpki-client