
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
File: kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft (raw, json)
Hash identifier: +8SFkeI/2mABMKLxnsK6UKmy60/Pd7HqReHjQfT461c=
Subject key identifier: 05:06:81:B2:0E:5C:48:5B:58:67:C4:37:F7:99:5C:9B:74:EA:81:BD
Authority key identifier: 90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F
Certificate issuer: /CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
Certificate serial: 0199FBEAF7988542F4F48A2D3B0FAE0BC42B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
Manifest number: 1482
Signing time: Sun 19 Oct 2025 10:01:43 +0000
Manifest this update: Sun 19 Oct 2025 10:01:43 +0000
Manifest next update: Mon 20 Oct 2025 10:01:43 +0000
Files and hashes: 1: kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl (hash: TJWPekfwjML4E4iH9cTnGeEs+UFUQecShrRUoifGgPY=)
2: ygERJqcQ4QTw-4htxExNNa3ryrY.roa (hash: oHYECnW1S/Ihx44EhZXx30t95YlwKaYqRwWqZ5uqDnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f7:98:85:42:f4:f4:8a:2d:3b:0f:ae:0b:c4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
Validity
Not Before: Oct 19 10:01:43 2025 GMT
Not After : Oct 20 10:01:43 2025 GMT
Subject: CN=050681b20e5c485b5867c437f7995c9b74ea81bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:17:61:e1:46:3c:6d:75:76:0b:e1:05:c5:2a:
c5:16:b5:30:fd:13:14:a6:e8:db:ae:23:1a:27:91:
95:45:5a:ab:c8:55:fb:58:df:2b:51:a0:22:bf:3d:
ed:f5:1b:d1:e1:8c:a1:22:e8:8f:20:78:c7:54:ee:
7b:b9:a1:75:fa:f4:49:3b:35:5f:ea:13:ff:1d:7e:
31:f8:d2:f7:ed:1f:87:3f:83:ca:29:95:1a:82:c0:
5d:51:44:1b:16:63:bf:e0:f4:56:74:ed:9b:3f:08:
22:83:59:c5:08:1a:5e:1b:ef:de:49:dc:95:29:8d:
72:e0:64:51:be:d3:64:7b:f4:c0:ff:42:0a:94:d2:
66:a8:b9:84:0c:84:61:80:44:47:c3:ee:c4:67:38:
82:b6:76:bd:fa:38:c0:88:da:fe:ee:d2:b2:15:c6:
f7:a1:df:e7:1a:50:57:af:1e:63:5f:a5:14:2e:25:
1b:61:38:52:cb:12:fd:fe:e5:c9:26:1c:85:61:c3:
c3:e6:69:39:09:1f:57:09:c7:62:f9:4c:ab:98:0d:
b9:12:47:d8:f6:81:50:c4:e0:e8:31:61:a8:37:19:
8d:b2:fa:75:92:07:04:e2:db:6e:b6:6d:ed:64:08:
21:25:2f:d9:67:a6:f1:23:ac:aa:c3:f4:85:1b:54:
0e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:06:81:B2:0E:5C:48:5B:58:67:C4:37:F7:99:5C:9B:74:EA:81:BD
X509v3 Authority Key Identifier:
keyid:90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c2:98:8b:6f:ef:ab:82:f6:59:11:26:c8:14:cb:58:3e:54:
06:cb:1e:5c:85:15:37:f1:da:ab:7c:ae:67:b2:a9:e5:0a:9e:
59:41:27:07:ab:de:f0:8a:47:d5:89:4b:36:8b:e0:20:8b:40:
a3:34:37:cb:d6:5c:22:96:ac:8e:ab:54:85:d3:dd:a3:75:70:
90:9c:54:a4:c3:a6:26:b6:00:f4:be:07:07:c6:b7:ad:5f:a7:
27:02:fd:57:7c:d8:fd:3d:66:b0:b8:94:42:6e:c4:7b:c6:6b:
32:45:4f:ee:1e:fd:db:8b:a2:c6:de:09:3e:d5:b5:d0:c5:1a:
ac:9e:00:cf:76:c5:60:37:30:62:3d:e7:30:0c:66:28:e5:57:
9d:39:85:ed:88:6c:a5:ac:21:0e:c7:96:42:b1:cb:01:73:1c:
17:89:ad:67:95:db:28:56:79:83:f9:b0:b5:e3:3f:8c:19:4a:
6c:5b:1a:33:de:24:f1:3f:ec:0d:cf:9b:58:a5:36:38:f1:66:
73:1f:12:6b:cd:e5:cf:74:be:8c:f7:b0:04:2d:c9:bf:12:cb:
a7:2a:51:df:14:fc:d4:a1:cc:12:be:82:24:7d:21:a4:4a:35:
df:3d:47:bf:98:bc:da:e8:77:07:1a:8c:bb:51:13:5c:67:bf:
db:e6:e3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:24 2025 by rpki-client