Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
File: _kK02grqV4yifyXesM_tYagLnqI.mft (raw, json)
Hash identifier: Xas028jpXqlsmWlFt9I1lRjwei2FYV0LN2ysMRLztOI=
Subject key identifier: 51:87:83:D7:70:95:BB:19:98:80:E2:A0:EA:2E:E0:54:5E:9D:F5:AF
Authority key identifier: FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2
Certificate issuer: /CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
Certificate serial: 019A0035C9F0F33D468D3E80E226FA824433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
Manifest number: 0A21
Signing time: Mon 20 Oct 2025 06:01:56 +0000
Manifest this update: Mon 20 Oct 2025 06:01:56 +0000
Manifest next update: Tue 21 Oct 2025 06:01:56 +0000
Files and hashes: 1: _kK02grqV4yifyXesM_tYagLnqI.crl (hash: +bKWnGZD4L+LcFoGdEuWJMNuIr774oWhxer/IdW1Mwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:c9:f0:f3:3d:46:8d:3e:80:e2:26:fa:82:44:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
Validity
Not Before: Oct 20 06:01:56 2025 GMT
Not After : Oct 21 06:01:56 2025 GMT
Subject: CN=518783d77095bb199880e2a0ea2ee0545e9df5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:59:63:d5:0c:fb:40:84:15:74:78:84:0c:
58:85:05:b9:37:9f:77:0b:40:c1:03:c6:ea:bf:cd:
1e:df:10:37:f8:3a:d2:27:03:31:bd:07:a7:d3:2a:
4b:19:9b:6d:1f:7a:15:2b:a1:41:4b:56:41:9e:02:
d7:59:26:48:a1:d2:9a:76:71:5b:6e:c5:5c:bd:dc:
4a:fb:a8:ee:d0:c5:23:68:2c:f6:f1:55:d8:0a:4a:
bc:5d:3e:b5:c1:22:1b:91:49:eb:e4:e5:f3:d0:5c:
11:27:ce:96:6a:15:25:4f:3b:65:56:a3:39:5a:7d:
16:52:6c:2a:01:8e:4a:34:45:dd:d8:41:f8:e4:4f:
30:3b:b3:db:dd:99:fc:4d:84:76:21:c5:e5:07:85:
a5:bb:dc:04:c9:c2:c1:4d:90:b0:28:9c:e8:c4:a3:
72:3b:89:be:66:98:9c:5c:c8:b3:81:ac:27:e9:e2:
a4:4c:be:b1:66:ff:7d:fb:b6:86:7f:d8:0f:69:64:
7a:31:4b:d0:b7:c3:5a:a4:df:bf:3f:e7:4e:65:51:
16:0a:68:92:ee:9d:6f:4e:f8:fb:0d:a8:7a:cb:1b:
5e:cc:a1:38:3c:0d:1b:33:3a:da:d5:39:58:70:70:
c3:8f:3c:3f:b6:9c:2e:07:40:1d:37:8f:ed:4f:2d:
30:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:87:83:D7:70:95:BB:19:98:80:E2:A0:EA:2E:E0:54:5E:9D:F5:AF
X509v3 Authority Key Identifier:
keyid:FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0a:15:b7:ff:5d:d6:7a:f9:08:f0:4a:ef:9e:cd:7c:58:af:
68:95:e2:b7:9b:18:58:5b:e4:a9:4e:bd:11:e9:09:9f:fc:d9:
b4:7a:c6:aa:cd:c9:cb:bb:99:16:d7:bc:c0:57:ab:9d:a3:3a:
0c:f5:a5:14:fc:75:83:b7:75:db:70:39:86:72:46:e0:70:c5:
fe:f2:19:12:40:29:f4:03:cc:27:a9:5d:f1:27:a1:47:4e:26:
cc:23:c4:10:45:af:46:91:f4:b2:19:78:62:d3:83:db:65:78:
54:fc:7f:33:ca:30:cf:23:4b:00:5a:4b:48:1b:19:7e:e6:5f:
e4:31:4f:86:c6:7f:8a:d2:22:ba:e6:5f:be:76:1c:a8:25:5d:
6c:c0:91:c6:af:b8:1c:33:97:46:d8:d0:9b:fe:9b:4c:23:26:
eb:fa:38:d5:39:bd:18:2b:75:99:ca:4e:78:44:bb:21:96:a1:
9f:8e:e6:6d:4c:a8:5d:f2:1e:1c:7c:75:b2:fb:ed:a2:2a:35:
7e:e7:1b:95:2c:70:9b:43:21:67:de:b1:04:9f:6a:92:2f:1a:
16:78:82:37:7f:8d:d2:c8:02:2b:ae:57:10:15:81:2b:93:99:
7e:b4:91:e1:90:2d:7a:ff:da:c3:9b:8f:35:85:99:ee:7c:69:
ed:17:b8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:08:10 2025 by rpki-client