Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
File: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft (raw, json)
Hash identifier: nCa94tQUzTBxhdmc2jEACnyvEcVNtSwL4XwRXNA/Xn4=
Subject key identifier: D8:C4:1C:31:36:56:D9:32:AD:7C:0F:DB:2A:9D:F0:9E:73:EE:10:7A
Authority key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
Certificate issuer: /CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Certificate serial: 0199FC58EEA3A3C6AD7B92E6425FC034B704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
Manifest number: 0DC7
Signing time: Sun 19 Oct 2025 12:01:50 +0000
Manifest this update: Sun 19 Oct 2025 12:01:50 +0000
Manifest next update: Mon 20 Oct 2025 12:01:50 +0000
Files and hashes: 1: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl (hash: 19mAGHNFe87Vxbr6WO9DFnpFi03SZXl3vZw4RuijLCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ee:a3:a3:c6:ad:7b:92:e6:42:5f:c0:34:b7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Validity
Not Before: Oct 19 12:01:50 2025 GMT
Not After : Oct 20 12:01:50 2025 GMT
Subject: CN=d8c41c313656d932ad7c0fdb2a9df09e73ee107a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:fd:cc:7d:5d:48:f1:cc:72:e6:fd:c5:2d:
8b:85:a4:45:45:43:cd:ac:5a:56:59:dc:12:7c:28:
a3:68:70:ec:94:52:c4:55:e1:d7:5e:2b:3d:0d:9d:
80:64:c8:5b:51:4d:54:89:85:1a:f5:22:f9:a1:5a:
1e:05:23:9b:8d:70:21:ae:c5:c4:db:59:98:49:95:
26:51:44:32:62:44:31:bb:58:18:48:0a:e1:55:70:
32:eb:53:e4:c0:b8:8e:20:c1:bc:9b:ac:db:74:4a:
48:c7:25:40:d7:b0:21:61:8a:e5:d1:9c:7e:6e:d4:
29:54:19:40:c0:33:6c:e7:47:62:ef:b2:1c:59:7b:
b2:af:58:3a:1c:3e:6a:d4:81:a3:74:d3:6e:81:68:
63:4b:d5:ce:ef:ca:f2:80:e9:09:15:fa:a3:bb:0e:
d6:bb:aa:80:f6:97:0b:16:67:68:ad:37:1c:2b:3a:
eb:57:2a:a6:b5:88:bc:bb:53:7d:fb:47:bf:ab:86:
b4:06:05:70:43:11:28:a4:0c:87:db:bc:a7:40:91:
4f:b6:03:46:e9:67:55:88:c7:ca:08:e2:4f:b3:19:
7d:3e:f6:7f:96:4d:bd:18:9f:62:f4:bf:b4:c2:ee:
d3:73:82:67:32:9c:a8:02:a9:2b:ba:4a:c9:7c:34:
de:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C4:1C:31:36:56:D9:32:AD:7C:0F:DB:2A:9D:F0:9E:73:EE:10:7A
X509v3 Authority Key Identifier:
keyid:F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:a4:2c:75:3e:a8:81:89:06:27:cc:de:d0:7e:76:20:be:df:
64:3c:3f:13:ea:d2:b3:5f:81:6e:19:d1:dd:25:3c:72:38:0a:
f3:22:f3:77:e0:ac:af:73:05:18:d8:ec:17:81:9e:36:e4:3e:
fe:80:5b:c1:eb:8e:71:07:74:ec:ab:64:32:31:25:39:e5:ef:
f7:54:3c:f1:97:65:3b:3b:0a:03:4c:f3:b5:30:74:02:61:94:
4b:6e:fc:1d:69:95:cd:03:07:3a:af:62:87:dd:d8:45:de:e7:
80:f4:81:a1:6d:bd:59:6f:5d:77:d5:3b:bf:fd:fa:d3:d6:ca:
90:89:8c:0d:a5:31:75:c4:89:df:88:be:20:f9:6f:b2:1f:8a:
28:24:b3:47:88:e3:ce:27:5f:55:b2:81:c5:9f:48:3e:77:52:
e6:0c:ca:9c:ff:9d:41:fd:3f:9c:64:98:ab:46:da:d0:f5:ff:
c4:12:e2:0f:f2:9c:d5:4a:7a:0f:b4:e4:37:d9:b5:ec:93:5b:
cf:22:a1:9a:8b:91:a9:e0:6b:a4:c2:54:38:7c:44:eb:b4:0b:
78:21:4f:a7:a9:a4:a5:99:97:23:42:4c:46:83:e1:5c:a3:b8:
3c:3f:c0:aa:0b:67:57:54:42:31:b0:64:08:2c:83:b8:b4:7a:
ed:95:bb:83
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn8WO6jo8ate5LmQl/ANLcEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTc2YzY5MmUyZjM2MTlkZTc5ODIwNTQ4ZWNiNWZhN2Mz
MGExODEwHhcNMjUxMDE5MTIwMTUwWhcNMjUxMDIwMTIwMTUwWjAzMTEwLwYDVQQD
EyhkOGM0MWMzMTM2NTZkOTMyYWQ3YzBmZGIyYTlkZjA5ZTczZWUxMDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR39zH1dSPHMcub9xS2LhaRFRUPN
rFpWWdwSfCijaHDslFLEVeHXXis9DZ2AZMhbUU1UiYUa9SL5oVoeBSObjXAhrsXE
21mYSZUmUUQyYkQxu1gYSArhVXAy61PkwLiOIMG8m6zbdEpIxyVA17AhYYrl0Zx+
btQpVBlAwDNs50di77IcWXuyr1g6HD5q1IGjdNNugWhjS9XO78rygOkJFfqjuw7W
u6qA9pcLFmdorTccKzrrVyqmtYi8u1N9+0e/q4a0BgVwQxEopAyH27ynQJFPtgNG
6WdViMfKCOJPsxl9PvZ/lk29GJ9i9L+0wu7Tc4JnMpyoAqkrukrJfDTeJQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNjEHDE2VtkyrXwP2yqd8J5z7hB6MB8GA1UdIwQY
MBaAFPinbGkuLzYZ3nmCBUjstfp8MKGBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LZHNhUzR2TmhuZWVZSUZTT3kxLW53d29ZRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvY2YwZWQ2LTVkOGQtNDdmZi1iZDg2
LWE1ZGU4NmVkZjgzZS8xLzEtS2RzYVM0dk5obmVlWUlGU095MS1ud3dvWUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzExL2NmMGVkNi01ZDhkLTQ3ZmYtYmQ4Ni1hNWRlODZlZGY4
M2UvMS8xLUtkc2FTNHZOaG5lZVlJRlNPeTEtbnd3b1lFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw6Qs
dT6ogYkGJ8ze0H52IL7fZDw/E+rSs1+BbhnR3SU8cjgK8yLzd+Csr3MFGNjsF4Ge
NuQ+/oBbweuOcQd07KtkMjElOeXv91Q88ZdlOzsKA0zztTB0AmGUS278HWmVzQMH
Oq9ih93YRd7ngPSBoW29WW9dd9U7v/3609bKkImMDaUxdcSJ34i+IPlvsh+KKCSz
R4jjzidfVbKBxZ9IPndS5gzKnP+dQf0/nGSYq0ba0PX/xBLiD/Kc1Up6D7TkN9m1
7JNbzyKhmouRqeBrpMJUOHxE67QLeCFPp6mkpZmXI0JMRoPhXKO4PD/AqgtnV1RC
MbBkCCyDuLR67ZW7gw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:56 2025 by rpki-client