Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
File: fkL5qpHFODs-cnVy67GVWRqHYM4.mft (raw, json)
Hash identifier: V8+2A5LKmjBcJlR6mTQsUcryfgQoyen7Dmw27jVHDhw=
Subject key identifier: 84:92:65:CE:E9:56:8D:01:4D:2F:46:B0:B2:DA:E5:FD:1F:88:05:C0
Authority key identifier: 7E:42:F9:AA:91:C5:38:3B:3E:72:75:72:EB:B1:95:59:1A:87:60:CE
Certificate issuer: /CN=7e42f9aa91c5383b3e727572ebb195591a8760ce
Certificate serial: 0199FBEADA71E1811ED150A0FAD9414A8BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
Manifest number: 0779
Signing time: Sun 19 Oct 2025 10:01:36 +0000
Manifest this update: Sun 19 Oct 2025 10:01:36 +0000
Manifest next update: Mon 20 Oct 2025 10:01:36 +0000
Files and hashes: 1: fkL5qpHFODs-cnVy67GVWRqHYM4.crl (hash: d+b2CtpjEes8XUxJDo2+he1PqDlL95jR8RfvbxzIv1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:da:71:e1:81:1e:d1:50:a0:fa:d9:41:4a:8b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42f9aa91c5383b3e727572ebb195591a8760ce
Validity
Not Before: Oct 19 10:01:36 2025 GMT
Not After : Oct 20 10:01:36 2025 GMT
Subject: CN=849265cee9568d014d2f46b0b2dae5fd1f8805c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:4e:1f:b0:c7:5e:a8:2d:2f:86:72:2e:fb:
fd:9b:1a:7d:18:7c:55:08:bd:cc:dd:f0:d9:99:db:
9f:a3:f6:2e:07:d8:da:4f:90:c9:2e:be:aa:b0:c3:
e2:dd:97:c0:95:bd:84:ed:84:12:11:d5:1a:07:94:
89:0e:ae:24:67:1f:64:89:2f:50:01:4f:38:f4:f1:
4c:da:32:53:42:b7:2b:0a:e8:c7:e6:f2:e9:06:53:
2d:6d:ed:ee:df:ce:2e:cb:b7:5a:ff:9a:2e:b1:1f:
9b:9b:dd:31:d3:f1:94:6a:ea:7c:0b:3d:e0:bf:24:
80:3b:30:48:ae:3c:4c:27:86:d2:94:c8:c6:06:1f:
30:ba:73:ca:c1:1e:a5:7a:73:07:42:4a:af:06:da:
08:21:32:ae:93:46:1f:a9:2b:03:ae:65:0d:aa:84:
31:12:5c:e1:a2:eb:4b:1f:98:cb:c2:72:8f:cf:4f:
b2:89:7c:f5:4b:e3:a8:88:af:91:f9:c3:66:a1:3d:
20:6c:ea:af:15:4f:31:13:6a:0d:c8:ca:0f:db:41:
6d:b4:cc:10:7a:87:57:6f:0a:8d:19:67:73:ac:2d:
ae:31:cd:8a:d7:3c:38:e0:c2:b7:9f:a2:5e:90:c1:
a9:23:71:f1:c3:a8:24:70:b7:2a:83:1f:d7:f0:35:
2a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:92:65:CE:E9:56:8D:01:4D:2F:46:B0:B2:DA:E5:FD:1F:88:05:C0
X509v3 Authority Key Identifier:
keyid:7E:42:F9:AA:91:C5:38:3B:3E:72:75:72:EB:B1:95:59:1A:87:60:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0f:0e:77:0b:c9:c9:60:ef:e3:dc:7f:a1:9f:9b:ca:62:1f:
7e:df:2a:e3:17:86:1c:9d:06:de:47:55:41:88:03:e1:b9:85:
80:10:83:c4:3d:4a:30:11:a6:86:2f:ef:40:86:e6:03:47:7e:
6f:c6:73:4b:ac:43:bc:a8:7a:9b:21:39:e7:15:37:c2:84:ac:
91:c8:d8:4c:3f:2a:a2:fe:c1:c0:3b:0e:b5:93:01:91:d3:ca:
be:1e:01:97:36:68:b9:b7:a3:b4:bc:22:6b:12:23:f0:85:b7:
31:22:cd:0b:83:16:41:3d:d7:e4:20:e0:04:26:6e:ba:eb:35:
02:27:b1:c5:48:ee:f0:b2:51:1b:25:f4:5e:c0:e4:ba:70:be:
ea:8f:77:3a:01:ba:bc:4d:b1:ed:ab:86:a7:b3:fd:cd:fe:95:
b2:de:10:de:7a:89:83:9a:37:60:51:63:b4:55:c3:74:fe:0b:
ef:90:3a:ff:35:ec:44:2d:92:94:8b:d9:a8:1c:83:e7:6b:11:
17:78:78:ee:d8:9d:e4:28:a1:a2:3b:37:61:a0:ea:e0:b3:26:
e0:78:71:49:36:66:b4:47:85:5f:f5:5f:40:fe:09:26:f1:19:
73:7c:a3:2c:2e:12:b7:a6:6a:bf:50:2e:1a:29:84:c5:95:16:
1c:f9:24:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:42 2025 by rpki-client