Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
File: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft (raw, json)
Hash identifier: GV5gijotxVsHB+b5JFTSwKgF2Co3ADe3guXzr5P+jnA=
Subject key identifier: C9:C9:06:2A:A9:17:9E:01:EA:F8:74:57:78:BB:56:65:28:F0:DB:E2
Authority key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
Certificate issuer: /CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Certificate serial: 0199FE46FFE08069B65111A59AA93A4E8ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
Manifest number: 12EB
Signing time: Sun 19 Oct 2025 21:01:29 +0000
Manifest this update: Sun 19 Oct 2025 21:01:29 +0000
Manifest next update: Mon 20 Oct 2025 21:01:29 +0000
Files and hashes: 1: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl (hash: mTXFNqRKQaDOMQxXZAP5UBMTn/RSMsDB5liVDbkh0EE=)
2: torroLihTDOA3iF3dz35198q-Ig.roa (hash: vvwQ1xlARrMA7/miZ5paV8AjRUiaiipi3ehp/RAKIwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:ff:e0:80:69:b6:51:11:a5:9a:a9:3a:4e:8a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Validity
Not Before: Oct 19 21:01:29 2025 GMT
Not After : Oct 20 21:01:29 2025 GMT
Subject: CN=c9c9062aa9179e01eaf8745778bb566528f0dbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8b:a7:c2:75:40:8c:04:fa:b0:9c:1f:9e:8a:
b7:f5:b4:a7:dc:59:16:9d:6b:13:9a:a6:5e:09:69:
4e:f4:35:fd:2c:ad:f5:7a:65:22:86:0f:ab:dc:ea:
07:9c:cc:67:2a:d7:0d:d4:67:96:b5:4f:97:b1:c6:
20:f1:67:53:5f:bf:04:7a:fd:a4:79:6d:99:df:47:
f5:e1:62:33:9f:31:a7:4e:a3:3a:1b:fc:03:28:7d:
d6:04:61:ea:07:44:cb:63:c5:64:7a:a7:94:d6:0a:
59:42:1d:98:e7:3e:ca:3c:0e:3d:01:25:60:ed:51:
c7:d8:63:9e:e3:ef:f3:ad:aa:54:1a:34:2c:d0:4d:
38:f1:5f:0a:12:68:07:c0:6d:62:1f:3f:e7:0f:1f:
e2:3d:2b:fc:09:c5:69:c5:af:e5:cd:fe:af:a2:a3:
1c:b4:aa:90:44:c2:62:7a:b5:92:6f:e4:f4:be:fe:
e8:80:dd:92:9c:89:b6:da:72:e5:49:65:dc:49:28:
ae:47:0a:57:5b:c1:8f:5a:5a:6e:d4:4a:7d:07:25:
c8:59:aa:03:00:3f:79:1a:df:d7:ba:6a:df:4c:6d:
d3:a7:62:8c:04:ba:b9:41:27:b4:20:70:0b:14:4f:
5a:6a:9a:c2:c2:8f:b2:8d:4e:79:8f:cf:2b:4c:9f:
4a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C9:06:2A:A9:17:9E:01:EA:F8:74:57:78:BB:56:65:28:F0:DB:E2
X509v3 Authority Key Identifier:
keyid:FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:f5:0c:bc:ad:a9:47:f3:70:a3:71:25:57:3a:3f:5d:44:7a:
b3:5e:47:b8:43:6d:bd:9b:3f:a7:e4:e1:d2:95:55:f6:1b:91:
61:09:2a:2c:ff:a2:6b:11:61:9e:4e:bb:fb:80:58:fa:d1:62:
5a:a5:a8:46:e6:10:7e:7e:b7:7b:c8:e7:43:9e:fe:5b:33:72:
58:66:e7:94:13:9d:56:5b:57:66:c2:7d:e9:1d:9b:7f:56:4f:
79:a8:4b:c1:7d:55:55:43:58:71:97:5c:d3:0e:3c:f5:21:85:
89:c1:7e:84:05:cc:60:8e:3b:21:c1:b9:0e:ac:57:70:3f:16:
9c:f7:ac:3a:46:f4:23:1d:d2:ee:40:24:59:14:74:cb:96:87:
8c:8a:29:d6:e8:3d:f9:94:08:d4:2f:27:e7:36:43:5c:57:6a:
b7:33:85:9a:6d:a7:32:74:98:3f:9c:12:f2:f8:ea:5d:1d:65:
a2:c4:34:2d:56:31:82:a0:7e:ab:d2:52:ce:70:60:90:2d:ed:
dd:aa:83:46:58:68:ba:a5:d4:d6:ed:73:29:5b:f2:b0:73:ee:
e4:13:d5:35:b6:d9:16:7d:b2:ea:b4:4e:30:26:8f:f8:26:10:
8c:c8:c1:a3:ed:9b:44:aa:97:a2:33:55:2d:60:29:77:14:f1:
62:e5:e6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:56 2025 by rpki-client