Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
File: k0UD3V9q0KYOe0A6WmQq3kYZljw.mft (raw, json)
Hash identifier: PuUkQ1ETvgtRjw+xlOBNIoXulo4zzgDzxwf+qFn4aN4=
Subject key identifier: FC:72:05:1C:3D:FE:C7:42:97:82:66:48:4B:1A:69:6E:91:60:9A:37
Authority key identifier: 93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
Certificate issuer: /CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Certificate serial: 0198D5BBF43716558251ECC4489602D586AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
Manifest number: 1148
Signing time: Sat 23 Aug 2025 07:02:01 +0000
Manifest this update: Sat 23 Aug 2025 07:02:01 +0000
Manifest next update: Sun 24 Aug 2025 07:02:01 +0000
Files and hashes: 1: k0UD3V9q0KYOe0A6WmQq3kYZljw.crl (hash: fk8OONC4INXGT5G7+M+EFhH7qOPt7RGG3ST+NvyOiow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f4:37:16:55:82:51:ec:c4:48:96:02:d5:86:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Validity
Not Before: Aug 23 07:02:01 2025 GMT
Not After : Aug 24 07:02:01 2025 GMT
Subject: CN=fc72051c3dfec742978266484b1a696e91609a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:2a:a5:12:ac:49:c3:9d:a2:26:18:ba:c3:
a1:0c:a9:65:e8:68:e7:fb:3d:c5:ff:e6:c9:e9:79:
78:20:5b:3f:40:75:60:b7:41:86:79:c0:c8:d0:ed:
a5:67:81:ca:6c:be:57:71:1c:0d:3d:2f:c7:d2:e8:
0c:ff:25:b1:db:b1:d6:97:7d:b6:58:67:c0:3d:20:
07:c2:16:40:e6:0d:bd:d1:49:79:c5:50:64:1c:47:
b4:09:58:ce:f5:b9:4c:65:c0:42:1a:60:6a:9c:d7:
f4:af:35:a8:6b:a9:f7:f8:2e:df:37:76:66:d8:61:
22:c8:a5:ef:e1:6f:a9:07:5e:7d:22:73:17:ec:e7:
8d:1a:72:8f:45:ad:00:6b:a3:1c:0c:a5:be:3e:c9:
27:c3:13:84:57:8a:30:25:f0:89:35:d8:7a:b1:7c:
89:0e:d2:91:31:56:8e:9c:51:50:7c:0c:9a:d3:38:
77:4f:48:18:52:39:14:40:2b:c3:f8:dc:74:f1:af:
41:7e:2a:8e:25:c1:65:e7:8c:ed:2c:9b:94:05:01:
32:6e:2f:3d:76:14:c4:44:87:7c:39:51:aa:2b:b2:
20:da:b5:aa:dc:1e:43:fb:66:d2:36:e0:cb:70:09:
43:41:68:ef:6b:f1:ef:8a:d2:c8:2f:d0:50:8e:a1:
35:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:72:05:1C:3D:FE:C7:42:97:82:66:48:4B:1A:69:6E:91:60:9A:37
X509v3 Authority Key Identifier:
keyid:93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f9:4e:4e:32:6f:f6:31:42:85:22:19:f3:8c:e4:28:9c:26:
a8:90:ed:a8:87:52:b5:39:ea:5b:ca:97:12:2f:9e:d7:09:6f:
7d:4d:63:58:58:e4:e1:e7:f6:02:5d:34:f2:dd:35:37:0b:42:
ca:3f:f9:0b:70:23:61:b6:e5:ce:b7:21:59:87:cd:f4:fc:0b:
25:39:f2:33:24:30:ee:e2:7d:04:97:61:6a:e8:7b:12:60:e5:
80:ed:cf:e6:f2:29:3b:04:0f:c3:12:a3:9f:10:78:c7:c0:44:
b6:89:18:6a:79:3a:62:fc:ab:f8:d6:84:9e:77:86:7e:26:03:
5b:2e:6b:6f:d8:c3:5a:75:6d:26:be:ca:99:61:35:38:58:42:
b6:5c:8e:6b:b3:2e:a2:ef:cc:b6:4b:99:89:f8:74:7b:0d:8e:
2e:69:2d:0c:16:33:c6:bd:d7:bc:59:f4:e7:4e:fe:b3:e8:81:
41:b2:fe:ce:19:d2:ec:99:29:5b:a6:9f:ca:58:ea:ee:85:2b:
40:91:ab:3d:cb:20:d0:ed:7f:5e:06:2a:e6:13:df:4a:7c:1f:
21:d1:87:00:8b:cb:d6:be:ff:59:90:2c:e1:79:82:4e:96:0a:
c4:cf:38:69:f8:74:58:f4:5b:1a:aa:ca:26:6c:f2:41:9d:6e:
26:dc:f8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:18:47 2025 by rpki-client