Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/389fbf-dfb5-4a0b-b846-4328429bd374/1/kfikmw1lM9BnmVaH-u49tzqqCLE.mft
File: kfikmw1lM9BnmVaH-u49tzqqCLE.mft (raw, json)
Hash identifier: 1A/wyl3vnVlOU6pXJZw4J3JCtauYcXfd8jyYk6DikAA=
Subject key identifier: 3C:24:23:71:48:EA:40:C8:66:8B:75:2C:2A:5C:35:FC:3B:37:53:98
Authority key identifier: 91:F8:A4:9B:0D:65:33:D0:67:99:56:87:FA:EE:3D:B7:3A:AA:08:B1
Certificate issuer: /CN=91f8a49b0d6533d067995687faee3db73aaa08b1
Certificate serial: 0199FBEBCDC50F9EC8D75B03318D7CE6609B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfikmw1lM9BnmVaH-u49tzqqCLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/389fbf-dfb5-4a0b-b846-4328429bd374/1/kfikmw1lM9BnmVaH-u49tzqqCLE.mft
Manifest number: 05F4
Signing time: Sun 19 Oct 2025 10:02:38 +0000
Manifest this update: Sun 19 Oct 2025 10:02:38 +0000
Manifest next update: Mon 20 Oct 2025 10:02:38 +0000
Files and hashes: 1: kfikmw1lM9BnmVaH-u49tzqqCLE.crl (hash: gnrYecKgTPOTceutQI6EpKE0UEHJlQGUihEo2SIavw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/389fbf-dfb5-4a0b-b846-4328429bd374/1/kfikmw1lM9BnmVaH-u49tzqqCLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/389fbf-dfb5-4a0b-b846-4328429bd374/1/kfikmw1lM9BnmVaH-u49tzqqCLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfikmw1lM9BnmVaH-u49tzqqCLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:cd:c5:0f:9e:c8:d7:5b:03:31:8d:7c:e6:60:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f8a49b0d6533d067995687faee3db73aaa08b1
Validity
Not Before: Oct 19 10:02:38 2025 GMT
Not After : Oct 20 10:02:38 2025 GMT
Subject: CN=3c24237148ea40c8668b752c2a5c35fc3b375398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:89:d0:7e:a6:11:71:0f:5c:b9:f9:0f:a0:
fe:a7:c9:7b:70:36:f8:3c:67:28:87:ec:9b:4e:11:
97:c0:74:b7:99:30:2a:dd:b4:5c:95:1e:d6:5e:92:
41:f8:b0:9e:68:07:ce:33:06:62:5b:df:97:e3:fe:
8a:73:05:28:5c:39:57:5e:58:7b:71:1b:a5:3c:d5:
8d:b0:5b:9e:2c:f7:1f:5d:df:40:b9:f9:e7:2c:49:
48:de:99:f7:1c:4a:bc:cc:7b:bc:c5:ea:eb:3b:c4:
d0:a6:92:df:2a:68:e3:16:be:28:af:fb:94:35:87:
e8:bd:cf:20:5c:51:df:06:fa:a8:1d:1d:15:67:21:
78:37:94:a1:cd:84:ce:01:e4:85:8a:b9:cd:0d:c2:
1c:67:69:c9:f4:87:15:a2:eb:ed:0e:0d:91:4a:43:
f3:d2:83:be:b0:a7:b7:75:84:33:58:09:53:21:cc:
a6:21:f3:7f:20:58:25:10:73:e9:55:8b:9e:f0:a6:
28:f8:4b:bd:bb:82:36:87:8f:ad:cc:f9:28:73:6a:
12:65:70:19:3e:7c:af:79:b5:84:9b:44:b2:82:82:
78:e1:e1:6a:c2:79:36:31:ec:4d:c8:60:b1:ce:27:
82:6e:4b:cb:fe:0f:bc:14:18:5f:66:61:67:51:90:
f4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:24:23:71:48:EA:40:C8:66:8B:75:2C:2A:5C:35:FC:3B:37:53:98
X509v3 Authority Key Identifier:
keyid:91:F8:A4:9B:0D:65:33:D0:67:99:56:87:FA:EE:3D:B7:3A:AA:08:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfikmw1lM9BnmVaH-u49tzqqCLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/389fbf-dfb5-4a0b-b846-4328429bd374/1/kfikmw1lM9BnmVaH-u49tzqqCLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/389fbf-dfb5-4a0b-b846-4328429bd374/1/kfikmw1lM9BnmVaH-u49tzqqCLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d4:c7:2f:7e:6f:64:9a:92:5f:4f:86:87:3c:0c:03:90:4d:
24:86:93:21:f0:a9:07:b0:0d:3a:78:4a:0d:5a:1e:b3:3d:b5:
22:1f:a1:c0:0e:4f:16:75:45:cc:8d:01:a0:b4:62:5b:2c:bf:
a7:4a:38:05:62:ae:4e:83:48:25:b0:b8:1e:18:ca:4a:d9:d3:
fa:f8:c3:ad:2a:ff:a4:db:ae:6a:98:7e:43:fe:a5:12:eb:84:
50:0a:85:0a:68:1f:89:f1:b0:10:da:04:0d:c3:69:61:c3:49:
71:0c:04:36:95:a2:4e:68:57:65:77:01:73:80:dc:85:08:5f:
66:a9:46:e4:a4:63:77:77:f6:c9:13:1b:2b:e0:70:fa:81:28:
35:27:91:24:2c:ae:3d:4d:24:43:53:61:f4:07:c9:fa:4a:9a:
ec:6e:96:98:4d:24:c4:70:d7:4b:78:f6:dd:c2:e9:c4:e1:1c:
3b:75:36:c6:ec:17:ee:a6:ef:ff:29:0b:b5:77:62:37:b5:42:
52:f4:d7:d5:e7:f9:b5:c0:48:96:53:a0:2f:64:4b:49:0a:a2:
a5:b2:4e:e7:0f:cc:27:56:91:22:56:f7:59:e2:33:a0:1c:c6:
15:e2:2b:cb:63:44:c5:d8:0f:16:fe:b1:76:ad:95:55:fb:34:
9d:ca:e0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:46 2025 by rpki-client