Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
File: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft (raw, json)
Hash identifier: Bi7Sd3VrdzX/Uft4TdkMaQnFEoesiBOCLIOtT3l/s8I=
Subject key identifier: 96:0A:D3:D4:5A:81:F9:80:A2:64:0D:DB:F1:DD:0A:8F:B8:93:62:1A
Authority key identifier: F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
Certificate issuer: /CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Certificate serial: 0199FCC63B3DEA5E8E430FA84360EC52A018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
Manifest number: 09F4
Signing time: Sun 19 Oct 2025 14:01:13 +0000
Manifest this update: Sun 19 Oct 2025 14:01:13 +0000
Manifest next update: Mon 20 Oct 2025 14:01:13 +0000
Files and hashes: 1: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl (hash: 5vsrYsJLNdY3jdjLMkxAaPwgCyqiIuWiM7ShMFtzadY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:3b:3d:ea:5e:8e:43:0f:a8:43:60:ec:52:a0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Validity
Not Before: Oct 19 14:01:13 2025 GMT
Not After : Oct 20 14:01:13 2025 GMT
Subject: CN=960ad3d45a81f980a2640ddbf1dd0a8fb893621a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:68:e9:e2:a4:ff:3d:dd:03:3c:8b:b4:79:8b:
1f:67:40:d2:84:46:8e:b0:80:1b:29:3c:c5:a9:a0:
8f:fe:de:03:66:df:b6:41:9d:10:17:33:f7:02:a3:
31:90:74:1c:9d:2c:85:9d:c7:bf:4d:08:81:ba:e5:
9d:24:00:fb:8e:9b:99:fc:77:fd:ad:f6:54:5e:ad:
f4:e3:7f:35:28:49:49:ac:da:6a:29:d7:22:65:cd:
b4:9b:a1:ed:ed:30:81:79:55:b5:db:0c:b9:73:e9:
57:4a:5a:b1:df:6b:ae:e3:99:d9:65:e9:c8:a6:24:
c0:0e:22:15:64:d0:73:b3:62:ec:47:94:ae:f5:89:
ff:32:97:4d:4d:12:48:0c:b2:1d:ff:2e:d9:76:72:
66:7e:8b:1d:a2:16:de:1c:2a:0b:cc:f3:c7:a4:52:
f9:a9:0b:f1:9d:b2:cf:58:3c:ec:28:a0:45:b1:33:
b2:e9:57:bc:f5:2f:94:39:c3:9b:74:65:45:59:91:
ae:83:92:a0:57:27:a5:7e:1d:bb:1f:e1:0f:86:28:
92:f6:e8:e0:ea:f5:fc:e7:e2:77:a5:8f:8e:09:b9:
4d:65:5e:74:a0:8a:43:a0:6e:cc:63:fc:a4:e0:f1:
1f:13:0e:6a:60:37:15:15:59:e1:c7:70:5f:89:d8:
a4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0A:D3:D4:5A:81:F9:80:A2:64:0D:DB:F1:DD:0A:8F:B8:93:62:1A
X509v3 Authority Key Identifier:
keyid:F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9e:0a:23:59:02:79:0d:4b:35:ab:db:bb:40:1f:a1:de:61:
6e:2c:ea:dd:5b:f3:65:7d:fc:13:62:72:a6:52:41:fe:7f:85:
b2:97:79:59:66:c4:a2:0f:4d:4a:e0:e1:29:5b:66:ea:0a:c8:
91:6a:4f:b0:01:47:99:fd:19:34:e0:bb:20:dd:43:b5:5a:84:
93:06:8b:e2:01:8e:21:be:a2:51:c1:cd:b8:99:2e:c5:15:f4:
2c:4d:21:b2:8f:da:3c:98:c3:6f:8a:e7:ff:90:c2:94:cf:47:
be:4b:27:fb:02:8f:f2:6a:cd:be:7a:f1:ba:32:78:97:7d:31:
b8:e3:7b:c2:21:36:1f:b1:6b:7a:1c:23:b7:d2:63:98:3b:7b:
eb:9a:fa:af:ea:1d:ba:7c:5d:3c:d1:a0:0e:8c:4f:a2:d6:6f:
97:52:dc:84:71:69:e4:ce:4a:53:38:59:e4:41:0a:8c:0b:17:
57:8b:c1:7c:17:47:72:8c:5b:87:2b:04:d4:a1:1d:40:71:01:
97:ef:19:ee:ba:c8:09:49:b3:35:0a:46:2b:9f:b9:f6:8d:ea:
71:cd:6f:60:cc:7f:e2:a9:d2:54:d4:f0:4d:df:20:c4:1d:59:
df:ba:7c:b1:45:67:78:0d:97:fb:63:88:de:a1:ae:ee:18:34:
85:87:54:26
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn8xjs96l6OQw+oQ2DsUqAYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Y2ZhNDdkYzA4MjUyZTg1NDg2NWRkOGU1MjhjZmY4NGVl
NjM2OWMwHhcNMjUxMDE5MTQwMTEzWhcNMjUxMDIwMTQwMTEzWjAzMTEwLwYDVQQD
Eyg5NjBhZDNkNDVhODFmOTgwYTI2NDBkZGJmMWRkMGE4ZmI4OTM2MjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGjp4qT/Pd0DPIu0eYsfZ0DShEaO
sIAbKTzFqaCP/t4DZt+2QZ0QFzP3AqMxkHQcnSyFnce/TQiBuuWdJAD7jpuZ/Hf9
rfZUXq304381KElJrNpqKdciZc20m6Ht7TCBeVW12wy5c+lXSlqx32uu45nZZenI
piTADiIVZNBzs2LsR5Su9Yn/MpdNTRJIDLId/y7ZdnJmfosdohbeHCoLzPPHpFL5
qQvxnbLPWDzsKKBFsTOy6Ve89S+UOcObdGVFWZGug5KgVyelfh27H+EPhiiS9ujg
6vX85+J3pY+OCblNZV50oIpDoG7MY/yk4PEfEw5qYDcVFVnhx3BfidikvwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJYK09RagfmAomQN2/HdCo+4k2IaMB8GA1UdIwQY
MBaAFPjPpH3AglLoVIZd2OUoz/hO5jacMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1NLWtmY0NDVXVoVWhsM1k1U2pQLUU3bU5wdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvNGQ0MDBhLWY3NzktNDcwNC1iMTEx
LWNhOGQ3ZDhmYjljMS8xLzEtTS1rZmNDQ1V1aFVobDNZNVNqUC1FN21OcHcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNhLzRkNDAwYS1mNzc5LTQ3MDQtYjExMS1jYThkN2Q4ZmI5
YzEvMS8xLU0ta2ZjQ0NVdWhVaGwzWTVTalAtRTdtTnB3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZ4K
I1kCeQ1LNavbu0Afod5hbizq3VvzZX38E2JyplJB/n+Fspd5WWbEog9NSuDhKVtm
6grIkWpPsAFHmf0ZNOC7IN1DtVqEkwaL4gGOIb6iUcHNuJkuxRX0LE0hso/aPJjD
b4rn/5DClM9Hvksn+wKP8mrNvnrxujJ4l30xuON7wiE2H7Frehwjt9JjmDt765r6
r+odunxdPNGgDoxPotZvl1LchHFp5M5KUzhZ5EEKjAsXV4vBfBdHcoxbhysE1KEd
QHEBl+8Z7rrICUmzNQpGK5+59o3qcc1vYMx/4qnSVNTwTd8gxB1Z37p8sUVneA2X
+2OI3qGu7hg0hYdUJg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:53 2025 by rpki-client