Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
File: kjK4h0AR2AOQr4EijrUHsW0CXdI.mft (raw, json)
Hash identifier: upiCUEK5U3EVjF9pNme+zAGUOfJftHSRPPV0dI5jj74=
Subject key identifier: 6D:6F:2C:6E:6B:EC:DE:C1:8C:6A:6A:31:D9:FB:8D:1B:F4:0E:0F:91
Authority key identifier: 92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2
Certificate issuer: /CN=9232b8874011d80390af81228eb507b16d025dd2
Certificate serial: 0199FC58AD3ABF24F66E0653DAA2F83DABE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 12:01:33 +0000
Manifest this update: Sun 19 Oct 2025 12:01:33 +0000
Manifest next update: Mon 20 Oct 2025 12:01:33 +0000
Files and hashes: 1: kjK4h0AR2AOQr4EijrUHsW0CXdI.crl (hash: Q9r05z6CswGR0c7Dm2XShKsPmoCmMo8SsEL/XlbVQDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ad:3a:bf:24:f6:6e:06:53:da:a2:f8:3d:ab:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9232b8874011d80390af81228eb507b16d025dd2
Validity
Not Before: Oct 19 12:01:33 2025 GMT
Not After : Oct 20 12:01:33 2025 GMT
Subject: CN=6d6f2c6e6becdec18c6a6a31d9fb8d1bf40e0f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:e0:b1:bd:85:00:c9:fe:46:e5:17:2b:e3:
99:c6:66:5b:bd:94:ee:e5:82:1e:3b:57:f6:78:9a:
7b:c0:1a:90:b2:d9:a5:b9:4f:03:43:02:f4:b1:11:
d3:1b:8d:a9:31:b9:1f:1f:d3:13:1b:39:97:ff:4b:
0b:13:cf:0d:9b:c6:cd:06:01:cb:04:5f:c5:e8:75:
19:fc:53:3c:88:ef:8d:ec:7a:88:a4:15:a5:d3:3a:
b6:4b:7f:cc:07:ed:40:e7:a1:69:7c:8e:f9:bc:22:
b1:3c:f2:f0:d4:ed:8c:1d:97:f0:df:6c:5d:ef:02:
90:8d:a5:c7:83:64:3a:c3:72:06:58:9d:2d:6a:e0:
a8:f0:37:eb:65:42:43:00:9f:17:42:93:b1:c8:a8:
fe:9d:5f:bf:97:aa:9a:43:8e:e5:93:88:78:e4:40:
cb:e4:ba:aa:04:39:8d:ff:29:62:8d:e8:eb:1e:83:
2b:cb:e7:cf:04:7d:70:0d:ac:3f:05:e5:0b:1e:b9:
de:73:8d:05:3a:e3:7c:d6:8c:05:72:f8:70:39:de:
82:4f:e3:c2:47:94:5a:4e:75:d7:95:e4:56:24:fa:
e3:d5:42:8e:85:3e:d1:0f:ee:af:e5:c4:c4:93:bd:
5e:9d:08:8f:45:a4:f2:15:55:66:aa:d0:c5:29:1c:
50:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6F:2C:6E:6B:EC:DE:C1:8C:6A:6A:31:D9:FB:8D:1B:F4:0E:0F:91
X509v3 Authority Key Identifier:
keyid:92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:3f:b9:a4:3f:ff:b1:5c:eb:5b:26:2f:45:ac:14:9e:e6:18:
de:50:c2:df:e0:e7:b0:0c:79:6c:24:05:ad:d8:47:86:6c:4b:
28:e0:94:6e:ec:34:75:cb:a3:36:41:0e:60:08:47:87:b9:fe:
32:34:81:45:5b:2b:52:fe:f5:d0:53:a1:46:51:26:62:c6:7b:
27:2e:d1:1e:e3:f2:7f:e7:85:e3:aa:6f:c8:08:aa:93:48:95:
2c:69:7d:ed:6c:49:f4:5e:71:82:5e:a1:90:01:24:47:ed:b2:
c1:73:76:a1:73:1b:6f:6c:51:95:54:f9:39:4b:7b:90:5c:b4:
53:f1:12:3b:b3:f3:d2:61:8e:21:bb:73:04:e3:a7:03:82:fd:
7b:85:4d:7e:00:e7:25:70:30:fa:16:fc:1f:c1:a9:03:92:10:
a4:ba:ba:85:31:76:89:bc:5d:a9:cb:de:47:82:9c:af:48:26:
fd:5b:32:1c:66:30:65:53:ca:ae:4f:54:5d:d3:34:26:16:b3:
41:18:31:0e:24:61:53:47:6f:68:cc:96:2a:dd:f5:5d:9d:08:
4f:ff:6b:d2:f4:59:3a:92:a1:df:56:e7:3e:38:44:1e:da:e2:
11:62:47:21:2f:fc:63:27:f4:5e:1c:96:7b:90:b6:25:8c:ac:
3a:d4:28:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:55 2025 by rpki-client