Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
File: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft (raw, json)
Hash identifier: pU7JUaW1+kvzaTgtEaz0Ov1pCMHXhCBBQzEURDxfnsY=
Subject key identifier: CF:01:4B:E4:CD:8C:0E:8E:35:6C:6B:23:87:F7:7A:97:64:7D:CD:8D
Authority key identifier: F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
Certificate issuer: /CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Certificate serial: 0199FCFD3FB465D0A5142DC3FE4D68BEE5DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
Manifest number: 12ED
Signing time: Sun 19 Oct 2025 15:01:19 +0000
Manifest this update: Sun 19 Oct 2025 15:01:19 +0000
Manifest next update: Mon 20 Oct 2025 15:01:19 +0000
Files and hashes: 1: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl (hash: ozgy8nhiFy8Iagla9TpvAcGtQGpKuUCJzGU0e3vZbzk=)
2: kgzoK8BF6aDaCA7s2y2-oNomvaU.roa (hash: thv0x/fHxG1HTXAqa1M1DqYuduWmIxV8jm8IAHJKruM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:3f:b4:65:d0:a5:14:2d:c3:fe:4d:68:be:e5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Validity
Not Before: Oct 19 15:01:19 2025 GMT
Not After : Oct 20 15:01:19 2025 GMT
Subject: CN=cf014be4cd8c0e8e356c6b2387f77a97647dcd8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8d:5a:f9:64:9a:cf:fb:92:f0:c4:84:0f:74:
6e:d5:04:a5:9f:e8:be:13:70:7a:dc:07:6b:c6:80:
61:d0:b0:0d:df:1f:be:f2:3e:89:36:c8:a0:41:c3:
03:14:6a:6c:ba:65:52:57:5f:b2:6a:94:ab:4f:5f:
1b:cf:f6:77:d9:9a:35:7b:02:94:b9:d4:39:65:9a:
17:81:63:02:50:94:2e:1d:33:a1:52:2e:ef:02:dc:
7c:65:c7:96:82:92:da:a1:45:39:35:4f:3c:e2:90:
66:4b:ec:96:30:48:c7:01:9d:a2:c3:87:11:f1:b9:
aa:a7:f7:cb:7d:49:dc:37:4a:95:bf:ec:fe:b4:88:
cb:27:93:ff:f0:fa:12:98:86:f9:19:95:ca:5d:c8:
6f:60:08:d6:f4:fc:54:a1:79:b6:21:fa:c5:96:6c:
04:47:1b:82:8f:99:45:ea:01:33:8d:de:2f:d2:69:
4d:34:67:2a:73:99:1a:9c:f7:f3:a8:d3:a4:e8:14:
da:6f:9e:86:ad:1a:ca:45:a5:af:4b:3e:b1:22:fa:
85:8a:21:d7:83:8b:3f:1a:56:39:8e:fc:a0:89:25:
9f:ab:78:8d:97:b6:02:d4:d0:df:da:98:45:57:68:
cd:cb:0f:26:1b:fb:c5:a7:28:9c:22:c1:c1:fa:9e:
f2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:01:4B:E4:CD:8C:0E:8E:35:6C:6B:23:87:F7:7A:97:64:7D:CD:8D
X509v3 Authority Key Identifier:
keyid:F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:32:69:3e:db:1f:38:85:36:ff:2a:7a:93:70:17:a6:5d:06:
fe:2a:5c:9e:d9:67:68:86:4f:06:25:31:de:65:7b:42:1a:bd:
2b:a5:43:ad:22:f2:92:94:03:40:4f:5f:8d:45:40:90:80:ac:
39:e7:bb:b4:24:ca:6e:7d:0a:3f:4c:ad:a0:07:2f:ab:bb:82:
77:fb:9f:44:13:f6:6d:23:24:b8:2b:c2:46:d7:d6:df:83:09:
cc:3c:24:93:7b:33:ea:0a:4e:09:91:a2:ca:0a:11:e4:aa:10:
17:b4:35:03:ab:1b:a2:b6:52:f2:12:51:11:29:df:f6:fe:1e:
e2:6b:b6:ac:4e:97:5a:3e:cb:d9:a9:40:c5:4c:d5:bc:00:81:
59:b9:24:48:66:d3:31:9e:f5:9c:67:3d:11:52:6f:40:36:4c:
97:f3:3e:85:04:8e:7b:61:fc:7b:c6:21:ca:96:ea:50:7a:c3:
48:1f:32:e0:22:d4:70:cb:2d:b5:c4:55:c9:47:19:56:c3:cb:
d5:8c:72:39:07:a4:71:03:1a:e9:29:f8:3d:89:0e:67:09:21:
b7:71:73:f9:df:1b:21:f9:36:a5:7f:4a:16:9a:0c:ad:56:53:
61:7e:da:64:98:1d:00:63:e0:de:fb:5c:b2:8d:bc:2e:28:bd:
36:2e:c0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:31 2025 by rpki-client