Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
File: _KXnwS9jZpo_aAySaEpD-ohO0Uw.mft (raw, json)
Hash identifier: ZsWaUJBy77bargy/TyYeGtL0b956TmjnGDmYgQzaiH8=
Subject key identifier: 16:37:72:23:A5:73:1F:F0:EC:27:12:72:4D:D1:F9:8E:AD:3A:BC:DC
Authority key identifier: FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C
Certificate issuer: /CN=fca5e7c12f63669a3f680c92684a43fa884ed14c
Certificate serial: 0199FC5848F4B00A679B7E51848638A4A29C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
Manifest number: 15E4
Signing time: Sun 19 Oct 2025 12:01:08 +0000
Manifest this update: Sun 19 Oct 2025 12:01:08 +0000
Manifest next update: Mon 20 Oct 2025 12:01:08 +0000
Files and hashes: 1: _KXnwS9jZpo_aAySaEpD-ohO0Uw.crl (hash: wkwVmqhFokEd51SmoYbp4JH9GUrX7hSA/RzTzBxtEkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:48:f4:b0:0a:67:9b:7e:51:84:86:38:a4:a2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca5e7c12f63669a3f680c92684a43fa884ed14c
Validity
Not Before: Oct 19 12:01:08 2025 GMT
Not After : Oct 20 12:01:08 2025 GMT
Subject: CN=16377223a5731ff0ec2712724dd1f98ead3abcdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5f:4c:6a:49:9c:62:dd:dc:70:37:38:02:84:
4c:48:7f:e6:0c:1b:d2:2c:01:72:58:88:61:2b:2f:
44:60:76:b7:1a:74:02:c9:a2:ba:43:0c:99:95:02:
d0:00:46:60:d7:65:7e:a3:7d:f3:c9:dc:5a:b5:85:
93:90:81:8b:7a:61:9e:5a:cb:91:88:db:cf:66:90:
81:ac:a3:0a:cf:a9:5c:93:62:39:4b:27:8a:33:3e:
a5:03:48:4d:dc:5d:d4:82:23:cd:d1:eb:5f:fc:f7:
a3:10:51:8e:01:2b:e4:05:23:d9:e5:8c:13:c4:66:
c5:1d:c7:f2:33:78:1f:00:0e:ad:62:75:9a:b8:c6:
14:f2:cb:6a:01:68:39:33:9f:73:0d:c4:34:ff:4a:
77:87:69:ef:13:27:80:ff:aa:aa:5c:95:4d:9c:bc:
f2:0c:97:96:3e:08:de:27:23:40:05:03:c7:45:82:
65:d8:45:87:c8:a4:41:75:f5:25:70:a5:8b:9c:8e:
d1:2a:fa:d6:fc:9f:06:65:6e:09:7b:43:d6:08:ae:
43:a8:06:0d:98:8a:a9:46:ec:84:f0:a7:48:97:b4:
16:d6:36:6f:2a:54:f9:a0:c4:a5:28:da:e6:db:91:
d4:99:0e:5d:32:62:79:26:ac:4a:a2:ed:b7:07:51:
07:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:37:72:23:A5:73:1F:F0:EC:27:12:72:4D:D1:F9:8E:AD:3A:BC:DC
X509v3 Authority Key Identifier:
keyid:FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a3:01:64:1c:2c:12:4f:2b:a9:ec:40:18:68:7e:bf:ee:0d:
0e:ef:e9:23:9f:0c:33:92:d5:36:c5:08:a6:dd:8f:48:47:24:
7f:de:a5:3e:e4:49:c5:b0:19:dc:a7:34:78:9b:7e:ae:fb:de:
fb:c3:7c:da:2d:89:79:12:79:b8:7f:c3:46:9a:9e:39:8c:03:
45:18:5e:b1:ae:9f:60:be:3b:4c:5b:8c:fb:0d:4c:c1:29:3f:
aa:55:6d:8f:66:7d:14:88:b5:13:ba:ef:0c:be:0b:07:a4:e3:
ee:e7:49:d4:aa:2b:d0:85:c2:84:7c:97:d2:19:9a:0c:4f:ec:
20:6f:f4:cd:33:09:0d:b4:78:16:f4:14:7d:a9:02:8e:2f:57:
e4:2f:47:dd:b1:13:bd:d0:d9:00:52:b8:61:91:0d:97:f5:64:
7c:47:d1:fd:31:58:9b:1e:67:36:da:12:81:62:41:76:b3:50:
95:b8:3f:e9:80:8e:24:b5:9a:d2:4f:f7:9c:bd:56:9f:a0:b2:
43:93:d3:b6:96:21:95:fe:a5:10:6f:c1:4b:0d:7d:47:35:e3:
99:1f:f9:fd:0e:97:19:ef:db:f9:30:79:8b:0e:c5:f1:a9:11:
e9:49:fe:1f:64:df:00:0c:13:eb:8e:f5:c9:b1:34:84:18:1e:
aa:35:13:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:32 2025 by rpki-client