Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
File: rkIjS6xhcScD45im1b8EjFyfQDI.mft (raw, json)
Hash identifier: NxalVSKqw/EjUB82Hfx7RFc2sEtc0XTxNCtiMUmzogI=
Subject key identifier: 5A:CB:2E:24:F6:EC:3E:B8:73:6B:91:3A:AE:29:5A:ED:56:1D:67:76
Authority key identifier: AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32
Certificate issuer: /CN=ae42234bac61712703e398a6d5bf048c5c9f4032
Certificate serial: 0199FCC6AE4DE6269BBB8187F01AD4D4C402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
Manifest number: 0814
Signing time: Sun 19 Oct 2025 14:01:43 +0000
Manifest this update: Sun 19 Oct 2025 14:01:43 +0000
Manifest next update: Mon 20 Oct 2025 14:01:43 +0000
Files and hashes: 1: rkIjS6xhcScD45im1b8EjFyfQDI.crl (hash: wHaZEmzIszGWmREVsTaEs0B8AC2YUJWZaAYUDN8QXpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:ae:4d:e6:26:9b:bb:81:87:f0:1a:d4:d4:c4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae42234bac61712703e398a6d5bf048c5c9f4032
Validity
Not Before: Oct 19 14:01:43 2025 GMT
Not After : Oct 20 14:01:43 2025 GMT
Subject: CN=5acb2e24f6ec3eb8736b913aae295aed561d6776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:52:d6:90:4d:bf:ad:00:68:1d:4a:f4:bc:0b:
44:53:fd:67:dd:7b:86:d2:c9:b2:25:7d:2a:e6:13:
db:ed:f4:d7:2a:e9:1d:42:b0:7d:67:78:4d:9f:da:
e6:be:30:64:b3:f2:f8:6b:c6:37:84:56:b0:9e:6d:
89:32:39:9e:4b:31:0c:ed:a5:1c:d8:45:50:af:32:
d7:8a:26:cb:aa:35:80:06:81:ec:42:78:a4:47:5a:
fa:5f:08:94:40:47:d4:9e:fd:f0:a6:b9:d3:d2:3c:
cd:ce:29:ed:4a:5c:6f:90:c8:a9:ba:8c:38:51:8c:
a4:48:06:21:12:b0:3b:55:d2:37:8e:76:10:47:11:
83:43:ca:0a:0e:6c:42:28:2f:80:70:5a:ad:91:d3:
45:48:63:e7:46:d4:63:0c:ec:52:4d:91:68:f2:89:
c3:4b:36:ed:a9:92:6b:1d:30:2a:7b:11:39:6b:31:
3d:ff:dd:39:21:b5:78:62:c1:67:a4:97:54:67:d7:
e9:82:a2:00:95:73:dc:71:34:94:df:d4:27:00:c3:
94:87:9f:2b:c4:c8:66:8f:fd:33:f8:83:ba:32:95:
b7:03:f1:76:05:2a:7e:25:ef:c2:9f:b2:dd:a0:eb:
1e:bf:f0:d9:34:bc:42:13:56:56:1c:90:46:c5:bb:
24:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CB:2E:24:F6:EC:3E:B8:73:6B:91:3A:AE:29:5A:ED:56:1D:67:76
X509v3 Authority Key Identifier:
keyid:AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a3:a3:9c:39:4a:0f:a8:b4:42:8b:7d:05:27:7e:c2:b4:59:
a8:ad:ea:df:68:08:d6:d2:0c:82:f6:75:3f:e7:d5:32:ed:db:
e3:a2:46:93:21:e6:4f:ff:27:ac:05:63:cf:5c:36:d6:f2:0e:
89:80:e9:26:54:1f:6c:5b:49:af:4b:9d:2a:b3:ca:8e:ac:bd:
53:e8:1c:72:05:aa:eb:2c:be:9b:de:dc:cc:50:7c:d2:3b:6c:
8f:86:42:0e:45:fb:00:93:58:74:3b:29:77:29:1c:fe:44:8e:
78:46:40:6c:0f:a0:ed:3c:2e:13:bf:af:08:e7:df:3d:d7:b2:
99:ed:4b:e9:54:b5:7f:9e:dd:f3:0f:75:a0:4c:6a:5e:25:3b:
db:c9:3f:7e:be:25:f2:03:05:5e:d6:da:46:e4:b8:79:dd:ce:
e9:9f:be:b8:38:0e:d0:c6:51:11:f2:07:95:a3:6a:07:4d:81:
fa:76:f9:a7:a5:0d:1f:ed:2b:45:13:9b:6e:c5:c6:9d:5a:9c:
3c:a4:80:75:c5:bc:d4:ae:02:69:d6:6e:e3:1a:fa:6f:3c:a6:
4b:df:94:08:78:28:25:c1:f5:bb:0c:bd:09:4b:9d:16:34:6f:
77:23:73:fc:cf:6d:2b:d0:19:f7:b4:f6:0d:6d:12:09:07:71:
7b:90:28:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:23 2025 by rpki-client