Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
File: kFHan04DQdDI3l6sVMY6EenvW18.mft (raw, json)
Hash identifier: kSalChSYbz3sRlF69Gm3gykKJlmFTcgSpPBtEpriHVY=
Subject key identifier: 4B:7B:DD:E9:FE:4A:F2:86:53:8C:BA:C8:B7:0D:40:20:62:FB:5A:8A
Authority key identifier: 90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
Certificate issuer: /CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Certificate serial: 0199FC58F20A125D3AB5B79E4A05A23559CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
Manifest number: 0D9F
Signing time: Sun 19 Oct 2025 12:01:51 +0000
Manifest this update: Sun 19 Oct 2025 12:01:51 +0000
Manifest next update: Mon 20 Oct 2025 12:01:51 +0000
Files and hashes: 1: kFHan04DQdDI3l6sVMY6EenvW18.crl (hash: +TvxGCW62t50z7neD3t4FM1xfAyNBkGtS5Y/5QLcogY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f2:0a:12:5d:3a:b5:b7:9e:4a:05:a2:35:59:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Validity
Not Before: Oct 19 12:01:51 2025 GMT
Not After : Oct 20 12:01:51 2025 GMT
Subject: CN=4b7bdde9fe4af286538cbac8b70d402062fb5a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:15:c2:10:64:4a:f3:aa:17:01:df:bf:e7:8f:
83:23:ee:b9:82:7e:f8:5d:54:f1:cd:a0:12:76:b0:
03:f5:04:0f:ef:22:dd:e4:fa:0b:50:68:2e:bf:0a:
3f:54:71:68:76:0b:e4:5e:57:ba:ed:92:10:8c:c6:
23:5a:72:cd:29:31:af:9b:ae:dd:66:19:9c:a4:2a:
5b:2f:7f:a2:75:06:a9:11:d7:02:ca:ee:31:97:1f:
2d:9e:58:63:d7:08:ee:37:5d:3f:2c:82:8b:51:e5:
cb:e3:ab:de:69:66:cc:41:75:33:fd:bf:9c:6e:01:
79:a8:7d:f2:57:38:4b:d8:2c:75:a0:d0:57:76:9c:
73:86:d3:5e:19:a0:5e:5e:89:24:6b:ca:14:5d:f1:
4b:60:d1:1b:8a:fa:bc:c6:19:62:ee:07:5f:9b:b6:
43:b6:ee:aa:0a:ae:05:47:92:5b:58:4e:64:70:37:
19:ca:42:29:28:b2:3a:19:db:42:00:49:77:b5:5e:
a0:80:5c:d8:1f:b3:74:cd:0d:46:81:b4:70:d2:cf:
e1:76:b3:3d:ff:03:e9:42:f5:25:2d:0f:ca:6e:20:
89:05:86:ad:7e:19:4b:f6:41:38:c7:4a:47:64:65:
34:c7:ec:76:65:80:d8:d0:87:e0:7e:00:2b:f5:c5:
09:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7B:DD:E9:FE:4A:F2:86:53:8C:BA:C8:B7:0D:40:20:62:FB:5A:8A
X509v3 Authority Key Identifier:
keyid:90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c4:c9:aa:7f:be:30:4f:d3:a9:33:d7:16:1c:c7:03:81:79:
19:6a:58:07:4f:31:b9:9c:98:4d:e9:5a:a3:47:3d:76:0c:d2:
38:4c:75:d9:46:e0:90:9c:39:a8:fc:4b:88:43:7e:f6:67:b0:
82:e8:cc:ca:8a:47:7b:4c:a2:3d:0e:d5:16:64:19:e7:a5:91:
fe:80:07:ce:2d:00:af:f4:8b:ec:de:97:42:cf:3c:1a:cf:08:
6e:95:72:4b:91:30:b0:65:12:61:66:70:da:2c:77:84:5a:cc:
fa:fe:94:86:11:c5:9b:82:8f:c3:2e:49:25:f2:6b:00:1c:27:
89:35:16:21:e6:05:85:8d:b7:f6:e2:c5:07:3f:50:a7:fa:e9:
ad:9c:68:30:19:91:eb:c0:88:d1:a2:60:ac:3b:85:25:86:7a:
ec:e0:c2:76:c1:5f:d6:04:d5:2b:b3:e3:8b:36:03:6b:3c:d7:
85:04:57:b6:9f:fc:d0:7e:26:87:c2:14:58:0a:d0:0c:f0:1c:
4d:eb:e0:0b:eb:cb:fe:72:0e:41:9e:2d:d4:73:ac:64:59:33:
23:9f:22:9c:c3:9f:dc:4e:c7:ac:01:8b:31:26:77:d0:b1:96:
b5:82:c5:e4:f7:bb:e8:e1:f8:a9:11:81:78:53:77:b2:09:23:
2a:ee:db:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:14 2025 by rpki-client