Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
File: kFHan04DQdDI3l6sVMY6EenvW18.mft (raw, json)
Hash identifier: HFh3yigd/tfLrA8FW0aetChegYpMf5RwxIvF7HhBeTA=
Subject key identifier: FF:2A:B5:FD:03:25:54:17:85:2E:05:A3:61:08:86:12:5A:01:31:37
Authority key identifier: 90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
Certificate issuer: /CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Certificate serial: 0198D4E05C0B835F60B9083889B3B1FB0792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
Manifest number: 0D06
Signing time: Sat 23 Aug 2025 03:02:10 +0000
Manifest this update: Sat 23 Aug 2025 03:02:10 +0000
Manifest next update: Sun 24 Aug 2025 03:02:10 +0000
Files and hashes: 1: kFHan04DQdDI3l6sVMY6EenvW18.crl (hash: IGtf6VeT1t8WuqfPisJrcbtRNsQ5F9MO9/OSRYEEkUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:5c:0b:83:5f:60:b9:08:38:89:b3:b1:fb:07:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Validity
Not Before: Aug 23 03:02:10 2025 GMT
Not After : Aug 24 03:02:10 2025 GMT
Subject: CN=ff2ab5fd03255417852e05a3610886125a013137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:db:98:f2:03:46:74:c9:a5:7b:d9:5d:16:
91:12:d2:ac:4c:99:80:31:2a:1e:2c:8c:e8:1e:05:
85:a8:a7:51:a1:1b:e0:c4:c1:60:f6:7f:68:4c:7a:
8a:69:f0:90:9f:8d:c4:67:a6:cf:d0:e5:33:b6:21:
53:53:46:bb:28:46:b3:1e:0c:a7:58:ee:27:0b:fc:
ca:49:df:66:b2:7f:98:70:40:14:44:48:ca:88:08:
8f:87:54:52:7e:84:61:d5:7e:90:34:7c:5d:d6:1e:
a6:47:4e:f7:48:2e:d4:f3:c8:fd:26:e5:b2:80:53:
16:45:98:8b:3b:77:25:e7:40:ba:75:f8:d6:12:e3:
07:fc:63:05:7b:fc:57:47:eb:5b:2e:e1:f9:4d:87:
0d:38:ae:f0:5f:52:78:24:d4:c6:13:85:be:a6:12:
77:24:82:bb:6e:66:b3:85:e0:b1:8f:7b:cf:01:e2:
58:96:07:6c:08:54:fb:21:e6:1a:49:27:18:50:c0:
50:0f:c8:d3:e5:98:d7:4e:7a:38:95:9f:56:08:17:
e6:a9:1b:7d:82:5f:e5:d9:9d:47:a4:7e:35:61:a8:
83:4b:9c:dd:54:62:95:d8:ac:15:3b:d8:3a:c7:26:
bd:1f:9d:cc:75:10:9e:27:44:34:57:43:67:10:d9:
7d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2A:B5:FD:03:25:54:17:85:2E:05:A3:61:08:86:12:5A:01:31:37
X509v3 Authority Key Identifier:
keyid:90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:39:49:cc:51:7c:85:99:e7:71:f3:80:f4:94:85:c7:9b:4b:
fc:8e:12:b8:cb:b2:8a:23:73:99:39:a2:3b:25:c6:24:eb:d1:
6a:b0:ee:a3:d5:1d:31:86:24:3c:c9:55:bf:0f:1d:25:d2:51:
49:51:1d:23:6f:08:34:39:70:0c:29:8d:69:79:da:c2:7a:5d:
bb:a6:91:b9:80:65:82:40:e7:ef:17:01:50:90:86:f7:5f:3c:
11:17:e7:71:a8:94:e2:0e:75:88:da:8f:c3:55:a0:fb:85:88:
42:7e:38:b7:f6:a8:78:f8:c4:20:40:3b:44:ae:e2:8a:1c:46:
8a:47:27:e8:4d:5b:56:6a:4e:44:08:d8:3d:3c:07:3d:8c:c3:
55:ce:ee:8f:71:19:e8:27:dc:cf:20:34:d5:a1:65:d7:5a:cb:
bf:ef:28:75:41:79:79:7e:80:df:a7:2e:f2:be:de:96:bb:5b:
95:a6:ec:4c:d3:54:69:77:a7:0b:4f:bc:58:23:8c:36:a4:4d:
9c:60:69:2f:ab:c5:fd:b9:92:a6:4d:eb:90:bb:43:c6:7a:0b:
6f:5d:67:cb:1a:03:25:c0:d6:a0:54:f9:55:4f:ad:62:14:32:
c7:76:87:b3:a8:19:f5:0d:3d:cc:3e:78:9d:d5:9c:db:a6:08:
75:3b:e6:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4FwLg19guQg4ibOx+weSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNTFkYTlmNGUwMzQxZDBjOGRlNWVhYzU0YzYzYTExZTll
ZjViNWYwHhcNMjUwODIzMDMwMjEwWhcNMjUwODI0MDMwMjEwWjAzMTEwLwYDVQQD
EyhmZjJhYjVmZDAzMjU1NDE3ODUyZTA1YTM2MTA4ODYxMjVhMDEzMTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo7bmPIDRnTJpXvZXRaREtKsTJmA
MSoeLIzoHgWFqKdRoRvgxMFg9n9oTHqKafCQn43EZ6bP0OUztiFTU0a7KEazHgyn
WO4nC/zKSd9msn+YcEAUREjKiAiPh1RSfoRh1X6QNHxd1h6mR073SC7U88j9JuWy
gFMWRZiLO3cl50C6dfjWEuMH/GMFe/xXR+tbLuH5TYcNOK7wX1J4JNTGE4W+phJ3
JIK7bmazheCxj3vPAeJYlgdsCFT7IeYaSScYUMBQD8jT5ZjXTno4lZ9WCBfmqRt9
gl/l2Z1HpH41YaiDS5zdVGKV2KwVO9g6xya9H53MdRCeJ0Q0V0NnENl9wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8qtf0DJVQXhS4Fo2EIhhJaATE3MB8GA1UdIwQY
MBaAFJBR2p9OA0HQyN5erFTGOhHp71tfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0ZIYW4wNERRZERJM2w2c1ZNWTZFZW52VzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zYmMxYzQtMmI3Yi00MGVlLTkxODEt
OWIzNDQyOGVkNDI0LzEva0ZIYW4wNERRZERJM2w2c1ZNWTZFZW52VzE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zYmMxYzQtMmI3Yi00MGVlLTkxODEtOWIzNDQyOGVkNDI0
LzEva0ZIYW4wNERRZERJM2w2c1ZNWTZFZW52VzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTlJzFF8
hZnncfOA9JSFx5tL/I4SuMuyiiNzmTmiOyXGJOvRarDuo9UdMYYkPMlVvw8dJdJR
SVEdI28INDlwDCmNaXnawnpdu6aRuYBlgkDn7xcBUJCG9188ERfncaiU4g51iNqP
w1Wg+4WIQn44t/aoePjEIEA7RK7iihxGikcn6E1bVmpORAjYPTwHPYzDVc7uj3EZ
6CfczyA01aFl11rLv+8odUF5eX6A36cu8r7elrtblabsTNNUaXenC0+8WCOMNqRN
nGBpL6vF/bmSpk3rkLtDxnoLb11nyxoDJcDWoFT5VU+tYhQyx3aHs6gZ9Q09zD54
ndWc26YIdTvmzQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:00 2025 by rpki-client