Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
File: k0F7oKbrs_OxuCr3UPviioakGzU.mft (raw, json)
Hash identifier: 5R3SVlWuOSab+00Rs65VTXOEoQYF1hfK7hbHYF+wATA=
Subject key identifier: BD:69:E7:E2:08:88:03:E0:82:7A:38:81:23:77:78:1C:0E:E2:88:E1
Authority key identifier: 93:41:7B:A0:A6:EB:B3:F3:B1:B8:2A:F7:50:FB:E2:8A:86:A4:1B:35
Certificate issuer: /CN=93417ba0a6ebb3f3b1b82af750fbe28a86a41b35
Certificate serial: 0199FBEA7BE64D5C01E5ABEF063C8F30FB9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
Manifest number: 0A03
Signing time: Sun 19 Oct 2025 10:01:12 +0000
Manifest this update: Sun 19 Oct 2025 10:01:12 +0000
Manifest next update: Mon 20 Oct 2025 10:01:12 +0000
Files and hashes: 1: k0F7oKbrs_OxuCr3UPviioakGzU.crl (hash: N+v7d0jWAzrwrEvhVIC3gj95kIjnoSqwze4lF583AlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:7b:e6:4d:5c:01:e5:ab:ef:06:3c:8f:30:fb:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93417ba0a6ebb3f3b1b82af750fbe28a86a41b35
Validity
Not Before: Oct 19 10:01:12 2025 GMT
Not After : Oct 20 10:01:12 2025 GMT
Subject: CN=bd69e7e2088803e0827a38812377781c0ee288e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:e5:41:9f:b8:3f:d8:39:2d:ce:86:b2:c5:
f1:ec:fd:52:f2:e1:bb:e8:86:92:41:25:9f:d3:28:
3c:47:91:79:b6:83:be:7f:02:88:cc:34:03:1a:a4:
7c:30:4d:3d:ca:e2:14:80:9f:cb:75:db:3f:af:8e:
56:54:ac:d2:1d:17:84:6a:18:04:bc:ad:55:b2:ea:
d9:fa:c4:df:a4:84:64:a0:ef:c6:88:8f:17:b6:fc:
3c:41:90:c5:ee:bd:41:95:4c:d2:94:dd:65:d4:7b:
21:6b:58:86:7c:f7:fb:f4:bb:0d:b1:bd:d4:68:46:
ff:70:26:2b:65:45:db:d4:0a:fd:5b:79:bf:ff:78:
ce:36:47:97:df:1c:52:53:13:ab:35:30:a9:81:0e:
bd:96:e0:b2:b0:db:fa:ec:8a:71:d2:12:18:11:b9:
28:4a:72:5b:88:5a:41:5e:9a:f5:8f:02:23:cb:dd:
89:a0:e7:5d:3b:76:78:81:11:58:8b:4a:ab:c6:d9:
a5:b4:39:f8:c1:02:f6:4b:8d:77:1d:7e:6b:43:b6:
27:7e:e8:b7:1d:97:05:0b:de:9c:8c:b0:94:fb:76:
2c:5d:ce:bd:ac:31:40:9d:4f:4f:4a:e5:e0:8c:d7:
ac:ae:de:31:60:9c:61:96:dc:af:f7:2b:c8:98:a2:
34:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:69:E7:E2:08:88:03:E0:82:7A:38:81:23:77:78:1C:0E:E2:88:E1
X509v3 Authority Key Identifier:
keyid:93:41:7B:A0:A6:EB:B3:F3:B1:B8:2A:F7:50:FB:E2:8A:86:A4:1B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0F7oKbrs_OxuCr3UPviioakGzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/18c999-b73a-4214-a22c-728fd6babaff/1/k0F7oKbrs_OxuCr3UPviioakGzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c6:cb:00:5e:27:90:dd:52:be:a4:b0:81:0d:2b:a9:4c:4d:
0a:a1:e8:cd:c9:fb:af:77:b9:ec:45:cd:c3:ba:6d:7a:6a:1b:
65:97:ab:2c:9c:8b:2f:8b:df:67:20:58:ea:9a:48:06:e2:78:
07:7c:6c:2a:b6:43:1b:4f:d0:e3:d4:5a:3b:c6:e3:b6:eb:f6:
ae:3d:cb:83:17:80:21:bc:e7:36:70:29:88:2a:dc:68:50:97:
b3:d2:f3:14:ef:ae:ad:c7:17:64:b1:d9:0c:69:91:42:c8:dc:
0a:fe:75:8a:ac:99:80:d9:8b:72:d3:9a:3c:9e:7f:bc:a3:e9:
3f:4f:0c:22:56:8b:03:20:14:a2:76:ed:f9:d4:10:4b:7a:91:
4f:15:05:5c:6f:dc:40:8c:3f:fe:77:65:12:5b:15:39:c1:d0:
e4:12:b2:26:e8:bb:36:a3:66:00:2e:6c:24:bd:d2:68:48:17:
19:69:4f:f6:09:3d:ba:ef:14:e5:12:45:79:73:e2:13:c7:cc:
f9:bd:d1:f5:5d:8e:67:d3:58:88:68:3d:a3:a1:60:20:a2:98:
56:16:35:a1:56:da:7a:31:a6:50:61:76:75:78:72:02:75:94:
b6:4a:e4:3e:86:b2:95:ac:49:77:dc:b7:6c:35:d4:d9:48:bd:
22:eb:1f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:59 2025 by rpki-client