Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
File: rkyfGKFH6zVjDiNFxUAOFop8icE.mft (raw, json)
Hash identifier: 9lCoarToFpu6Yax7EWFkSOdH/9QYqTs6TuEhkrXl9O0=
Subject key identifier: C9:55:40:90:CE:BC:61:68:7E:49:6F:1B:FE:38:7B:81:85:BC:04:4A
Authority key identifier: AE:4C:9F:18:A1:47:EB:35:63:0E:23:45:C5:40:0E:16:8A:7C:89:C1
Certificate issuer: /CN=ae4c9f18a147eb35630e2345c5400e168a7c89c1
Certificate serial: 0199FBB378FB8EF8C35C520D0A9D89166447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
Manifest number: 0C29
Signing time: Sun 19 Oct 2025 09:01:06 +0000
Manifest this update: Sun 19 Oct 2025 09:01:06 +0000
Manifest next update: Mon 20 Oct 2025 09:01:06 +0000
Files and hashes: 1: rkyfGKFH6zVjDiNFxUAOFop8icE.crl (hash: LPsRNuA0Q6VrnTJun2gG+cvP+qwHc2Myq8dX5LVZ47I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:78:fb:8e:f8:c3:5c:52:0d:0a:9d:89:16:64:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4c9f18a147eb35630e2345c5400e168a7c89c1
Validity
Not Before: Oct 19 09:01:06 2025 GMT
Not After : Oct 20 09:01:06 2025 GMT
Subject: CN=c9554090cebc61687e496f1bfe387b8185bc044a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0a:ec:8b:1d:fd:cd:9f:2f:f0:52:60:70:da:
6a:89:c2:73:00:bb:78:de:eb:45:33:c0:9a:b2:47:
03:15:36:85:78:02:7f:9a:8a:f1:e8:cc:5f:e5:78:
43:73:e3:14:40:94:4b:e2:a5:02:de:10:79:06:5c:
ac:45:f1:05:c5:01:9b:77:b3:da:ee:0e:3a:bd:06:
4e:bd:89:ba:3b:8e:3c:61:ae:ae:6f:80:5a:c3:7f:
29:e0:4b:47:57:53:6d:71:4d:f6:4e:73:e7:c5:91:
5b:68:f4:c2:cc:f3:91:94:5c:07:82:ff:a9:ef:cf:
b8:d6:4f:f2:d9:9c:c5:ac:be:0f:9e:37:b2:b6:d6:
2b:91:dd:96:22:96:d5:30:5d:f9:43:b9:e3:f7:54:
1b:4b:a4:38:0d:80:cd:c4:2e:bc:a7:04:6b:dd:0b:
47:78:d0:c6:8f:dc:f7:5a:d9:89:9f:7d:80:3c:a1:
0b:9c:51:7e:66:69:a5:21:bd:86:48:85:3e:01:f4:
4a:be:b8:50:8e:fe:fb:d8:0e:88:16:33:98:a4:29:
84:36:fe:9b:d8:64:b5:2e:df:d4:07:b3:df:c7:ac:
f6:df:a2:cd:b4:38:ab:97:66:fc:84:c7:7e:8f:33:
6e:8c:52:8a:7e:31:25:72:1e:07:8f:36:e5:0e:f6:
a3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:55:40:90:CE:BC:61:68:7E:49:6F:1B:FE:38:7B:81:85:BC:04:4A
X509v3 Authority Key Identifier:
keyid:AE:4C:9F:18:A1:47:EB:35:63:0E:23:45:C5:40:0E:16:8A:7C:89:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkyfGKFH6zVjDiNFxUAOFop8icE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d96b82-58dd-4dda-bfd3-da05b37c8e24/1/rkyfGKFH6zVjDiNFxUAOFop8icE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:f1:12:dd:07:5e:00:54:d7:33:68:f0:0c:e7:6d:ec:a5:1f:
a4:10:5f:59:9c:c3:69:3b:b4:9a:f4:26:39:05:f3:aa:f5:4a:
92:6a:81:9e:f6:6e:b3:9e:c3:7a:62:cd:29:df:41:02:aa:bc:
c1:2d:d9:40:84:8e:19:be:4b:a0:9f:c9:ae:51:92:71:0d:2e:
8d:3b:2d:1a:2a:b7:b8:57:b6:cc:9b:6f:9b:aa:3d:93:d8:01:
36:18:75:e1:f7:e3:99:4d:81:45:d8:4a:aa:fd:82:2c:f9:f9:
95:fa:ad:d2:41:23:19:6f:2e:eb:20:ec:ab:33:9e:0f:68:49:
a5:46:3f:05:f6:f0:5d:e6:d1:ec:30:a7:72:24:73:58:68:b5:
29:ea:af:92:96:db:98:ce:9d:04:e3:a0:8f:c6:d1:ea:c3:f1:
22:73:52:75:26:e2:7b:9d:75:79:0b:d9:8c:ed:12:4b:14:0d:
66:e2:c6:b6:30:2a:88:c2:e4:a2:b8:cc:46:dd:43:b4:46:cb:
a8:98:25:3e:54:99:1b:e6:17:f4:df:c7:f1:04:f9:3e:86:f9:
de:d0:d0:57:a3:d3:7f:f3:91:dc:cb:0f:c7:9a:c3:0e:d5:b6:
3f:df:cd:b4:f1:62:30:34:43:ee:7a:5b:cf:25:d7:cb:2b:55:
0c:f7:a5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:46 2025 by rpki-client