Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
File: RK1W7mAdrD36Yd_lLL9bALe3opA.mft (raw, json)
Hash identifier: 4rQtbSMwpPVvtiuj3fAQYf4gxnaNJhS4C5pNHkm/ZDs=
Subject key identifier: D0:CE:C9:A7:B9:E0:38:06:B7:1D:11:F8:8A:C1:7A:31:C0:DE:A1:C3
Authority key identifier: 44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
Certificate issuer: /CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Certificate serial: 019A00A31369C55187AB0F626E99CB2F7B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
Manifest number: 0AD4
Signing time: Mon 20 Oct 2025 08:01:18 +0000
Manifest this update: Mon 20 Oct 2025 08:01:18 +0000
Manifest next update: Tue 21 Oct 2025 08:01:18 +0000
Files and hashes: 1: RK1W7mAdrD36Yd_lLL9bALe3opA.crl (hash: WPWpm99BSnoPB57Z3FBV+bhEL+lSF9wdqUS0yu32uxk=)
2: lbF_l02xwlPuqyIyhvc-CUJUU3g.roa (hash: 7hIs2Gkxh47foaseC5DC1sFgdBVuaxJrQVf2xLhJkbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:13:69:c5:51:87:ab:0f:62:6e:99:cb:2f:7b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Validity
Not Before: Oct 20 08:01:18 2025 GMT
Not After : Oct 21 08:01:18 2025 GMT
Subject: CN=d0cec9a7b9e03806b71d11f88ac17a31c0dea1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:9e:0a:0d:f4:6f:5a:00:dd:95:72:5e:19:
33:4d:00:9d:6a:9f:8b:b1:b3:01:77:bf:e6:37:f1:
3a:67:68:34:fe:5e:92:d9:47:88:af:d3:e1:18:f1:
d7:2f:82:23:19:6a:52:0d:44:13:9d:18:9a:82:85:
fa:a0:c2:fa:7c:8f:58:98:37:d2:8c:a1:b3:53:05:
a1:86:7b:df:13:25:db:a1:0f:9e:30:e7:ad:fe:3d:
8e:c4:b8:25:89:0c:0e:bb:36:d6:cc:52:d9:7f:2c:
b7:ba:79:85:9f:82:12:47:92:fd:52:c1:90:89:f3:
06:90:57:79:92:13:2f:17:e2:01:bb:fa:87:d5:16:
b1:0a:7f:66:33:bf:9c:70:50:46:06:20:1a:8e:91:
e7:8f:bd:ee:5d:60:f0:56:8e:9a:70:93:d2:1c:4c:
28:05:3b:59:95:29:e0:c1:24:fd:ac:88:15:f9:50:
19:12:af:08:6f:db:09:3d:4b:ba:02:17:d7:5f:66:
4c:8b:6f:0c:a1:50:92:ef:94:c3:a1:1e:8a:de:0b:
15:f8:e0:8b:30:83:8c:77:bd:59:fd:6e:e2:53:d5:
20:30:df:4a:44:36:60:d1:df:a1:b6:42:92:6b:a3:
54:6f:05:59:c1:8a:66:93:5a:7e:13:a3:48:19:dd:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CE:C9:A7:B9:E0:38:06:B7:1D:11:F8:8A:C1:7A:31:C0:DE:A1:C3
X509v3 Authority Key Identifier:
keyid:44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:04:a7:7d:99:2e:08:6c:c9:af:e5:8c:87:e5:04:8a:83:ca:
44:8b:1b:78:8d:46:a4:44:f3:c3:c4:68:04:e2:55:86:9c:43:
d9:46:95:bd:e5:4a:02:64:3c:c0:3c:aa:8e:b9:94:7e:eb:cf:
64:74:95:ee:e6:9c:86:5e:75:4a:0c:d4:5d:2c:c5:2a:12:c0:
2c:e6:ca:97:30:ad:23:6e:46:3f:a9:91:6e:03:55:9e:8d:33:
5d:1d:25:b8:67:01:11:74:bb:2f:36:2f:60:b8:0b:70:e7:92:
8c:20:95:13:a9:ea:25:bb:6c:bd:89:eb:42:41:c1:61:9f:69:
58:e2:8c:99:20:91:70:2c:99:0a:2a:2b:d9:5d:74:76:22:74:
d5:db:ca:0d:c5:a8:d1:d5:bb:48:8a:bf:45:c4:b1:2f:9c:50:
f6:32:61:f0:2c:6d:cf:02:ab:4e:46:ea:ec:f0:bc:42:e4:65:
43:d3:35:bd:43:73:60:78:e7:39:27:72:94:ac:64:fe:f4:8c:
af:5d:5b:8d:8b:ec:e2:6f:84:01:e4:bd:85:a4:ac:85:77:cd:
a0:85:78:38:99:74:66:07:9a:f6:7f:72:5a:e9:90:ea:e7:1b:
54:47:32:58:06:dc:c8:55:e7:de:8f:7f:85:7f:b1:ac:c3:f8:
ef:79:91:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:54:25 2025 by rpki-client