Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
File: k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft (raw, json)
Hash identifier: YQqahwOaOmK7UsujFS7CoPb4+iOeHW71dEXJEM/0Mdw=
Subject key identifier: 58:E5:79:3B:11:1D:7A:5B:E5:58:F1:22:EF:FD:F4:29:BA:6E:07:BF
Authority key identifier: 93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52
Certificate issuer: /CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
Certificate serial: 0199FBEBF025E370A97B176B559141066709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:02:47 +0000
Manifest this update: Sun 19 Oct 2025 10:02:47 +0000
Manifest next update: Mon 20 Oct 2025 10:02:47 +0000
Files and hashes: 1: k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl (hash: ElguJLq87rzvdMyh0uAKP7++PWjV6UEPh7Arxd++D0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f0:25:e3:70:a9:7b:17:6b:55:91:41:06:67:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
Validity
Not Before: Oct 19 10:02:47 2025 GMT
Not After : Oct 20 10:02:47 2025 GMT
Subject: CN=58e5793b111d7a5be558f122effdf429ba6e07bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e3:05:95:44:f2:95:7f:92:6f:da:a9:3d:7f:
e4:07:bd:8b:af:30:11:a3:b7:38:56:ca:85:95:00:
87:f6:a2:9f:e6:73:ac:f4:ca:43:3e:5b:7a:d2:de:
71:7b:a1:09:7b:bf:ea:9a:19:90:89:a3:a6:e2:46:
48:83:55:f0:56:ee:d5:86:65:5f:0b:11:62:1f:cc:
da:94:e4:d1:e4:e4:7d:52:55:87:a2:ec:a8:14:1e:
84:ab:8a:71:ab:5c:80:47:bf:4f:2f:e0:12:38:f7:
d9:68:bb:2c:dd:64:6a:f9:cc:83:6f:fd:23:09:61:
43:78:6a:6b:01:94:74:ed:89:0a:63:73:05:34:1c:
b4:54:7a:bd:3c:1c:99:c7:ab:c0:f7:fb:d0:e1:8f:
4e:72:c1:3d:ab:4b:52:3c:96:34:01:2e:7b:4e:4e:
19:95:db:57:52:12:94:c2:69:a1:0a:52:4f:1e:5f:
06:23:26:bd:ad:47:dc:56:c1:88:a0:9f:34:6d:d1:
bf:d9:22:8d:c4:17:6c:70:3e:51:e9:b7:55:f7:5f:
56:4f:c6:80:cb:d3:a7:20:c3:9e:4a:40:72:e2:79:
e5:a5:df:cc:cd:22:d6:fd:b9:95:ae:6a:44:cf:5d:
5a:6b:80:41:f5:f1:04:28:ce:80:d3:0d:18:e3:49:
0d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E5:79:3B:11:1D:7A:5B:E5:58:F1:22:EF:FD:F4:29:BA:6E:07:BF
X509v3 Authority Key Identifier:
keyid:93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b7:12:f0:c6:1f:98:cd:75:bf:af:b2:e4:65:a9:ce:95:a9:
81:fd:9b:39:3d:c1:ee:c7:0f:c7:2c:b9:ee:9a:c0:e1:61:2d:
38:4f:bc:e9:04:cc:3c:f5:41:2b:e1:90:87:de:e0:73:a7:73:
b8:5a:1c:79:09:dc:36:e8:b4:59:92:56:6a:5f:17:99:81:e7:
c2:77:dd:aa:88:66:e2:d2:39:04:0d:19:fc:e0:a6:9c:ab:df:
7d:8d:d9:90:97:8c:75:4f:15:03:a4:79:8f:89:5e:53:de:3b:
d8:26:45:50:cb:86:b3:47:d4:f9:66:6a:cc:c7:db:85:2b:d1:
61:8b:c1:64:8f:40:da:87:95:a8:2e:50:44:41:eb:59:22:eb:
3a:36:b9:62:8a:b1:da:23:5b:1f:ad:1e:e3:aa:6f:72:af:55:
58:45:68:31:24:fa:bf:72:2b:1d:ca:0b:a0:40:73:a6:59:f5:
22:2d:c3:21:53:f3:38:30:99:c7:52:37:ce:60:88:30:a7:17:
48:36:50:dd:73:6d:41:7f:92:e0:b2:5a:9f:91:7f:fe:60:ea:
38:16:ce:dd:d1:6a:7f:ad:80:ce:5d:e1:eb:80:44:f5:cd:6a:
77:a2:de:bb:6a:ea:2a:9c:82:54:35:41:74:f4:22:9b:88:20:
17:ae:61:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:06 2025 by rpki-client