Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
File: 1-KMdLu62epN-LofXatn50Xzal_A.mft (raw, json)
Hash identifier: E1JYll8pT4sR8CFFRUWRwjL4hentZBMc2w53w1ayGa8=
Subject key identifier: 8B:96:3E:86:8E:BB:CC:70:80:02:34:AB:B4:77:B4:F7:0B:DA:53:3B
Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Certificate serial: 0199FD3448782924F118C2401EF0C5ECFF61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
Manifest number: 0E83
Signing time: Sun 19 Oct 2025 16:01:25 +0000
Manifest this update: Sun 19 Oct 2025 16:01:25 +0000
Manifest next update: Mon 20 Oct 2025 16:01:25 +0000
Files and hashes: 1: 1-KMdLu62epN-LofXatn50Xzal_A.crl (hash: n2g2ki9bWi8cJ8SIv/LcC+NTkIFU+g1PmbgTryIKgvo=)
2: 39Bk5qZTsKQMFFHFGYz2jXcUTL0.roa (hash: yuPdwUCFZLhlTho5KUzDTwTUnjWxu1cEHPF0b38FGK8=)
3: AzSrLJFmfeHq4hW1Qf7AEyHb8Pc.roa (hash: eCVsXCjLEvLJa9+iW+ysDbya4Y+X231ugmswa/aHdwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:48:78:29:24:f1:18:c2:40:1e:f0:c5:ec:ff:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Validity
Not Before: Oct 19 16:01:25 2025 GMT
Not After : Oct 20 16:01:25 2025 GMT
Subject: CN=8b963e868ebbcc70800234abb477b4f70bda533b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:aa:9d:85:cb:06:27:95:df:31:55:54:3d:33:
0f:80:b2:28:bf:f4:cb:89:39:6a:f4:5a:45:f2:08:
49:a2:79:0a:2d:47:19:6d:02:10:b5:6a:f0:2a:f9:
7a:cd:c2:30:05:7a:c8:bf:cc:0c:b5:80:02:7d:6d:
24:8a:b9:22:0b:0b:2c:95:e4:57:02:8c:20:21:3c:
0c:04:0e:59:6b:27:fa:04:c0:15:fd:71:c9:b8:d8:
f3:6b:39:d2:83:b2:76:99:89:ef:93:a9:e2:1e:c0:
82:ad:19:0c:db:7f:5a:5e:3c:17:e8:f9:49:0d:8d:
8b:2c:f0:38:41:d3:0a:37:28:46:b5:88:e2:fc:7d:
cd:8c:57:35:16:ce:70:13:df:92:f5:df:c7:99:15:
df:ee:81:f0:17:77:69:ed:65:10:b3:03:ea:08:26:
b0:37:31:2b:8b:0a:91:1d:6d:b9:01:b8:25:dd:b9:
9e:66:7a:79:fc:73:98:db:9f:f6:f0:cc:22:a8:67:
32:86:59:64:59:4c:15:a6:b0:bc:55:20:3e:9d:05:
e9:3f:64:55:11:37:66:0c:df:45:21:9a:9b:f4:bc:
82:1d:0f:93:c9:0e:3c:6c:a7:c1:8d:c6:68:73:e5:
94:3f:b9:4c:64:13:33:1f:16:7c:ad:bc:2b:15:e6:
55:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:96:3E:86:8E:BB:CC:70:80:02:34:AB:B4:77:B4:F7:0B:DA:53:3B
X509v3 Authority Key Identifier:
keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f5:ae:8b:ff:42:88:31:1a:29:92:c3:17:43:8d:e9:d0:6f:
08:01:e6:82:09:aa:97:b2:a5:29:43:7b:78:6d:6e:77:78:47:
d2:76:5e:c9:b2:04:da:ab:62:64:ac:4b:8a:09:dd:0a:f0:a4:
e0:4d:38:a0:90:a5:66:66:74:43:5d:63:98:0b:a6:73:1b:5d:
e8:92:a3:f8:78:25:86:a8:b2:32:d0:41:70:09:6b:3b:48:6a:
b6:a6:00:10:90:48:ee:9a:6e:1d:99:07:d6:36:84:66:5f:b6:
0d:45:d0:99:7c:03:ca:bb:f3:a9:7d:04:fb:c5:96:cc:8e:98:
de:fc:7f:55:19:cf:96:50:4f:3d:f2:06:d8:61:cf:8d:f8:ec:
e2:df:2c:ed:07:15:08:08:4a:95:90:a6:2e:95:6d:5d:cd:6d:
19:88:d5:6a:a5:8b:8d:76:a7:5a:dd:86:e3:03:e6:70:f9:79:
e1:c8:9e:8c:02:1d:bb:f7:38:18:2c:b5:90:74:47:68:08:78:
2f:24:bc:93:7a:9e:93:ce:a0:b4:06:a9:02:40:01:34:4d:f0:
fa:ed:80:8d:9d:84:46:ca:d3:e1:2c:4b:8b:47:b8:6f:f0:0b:
8a:46:8e:c7:42:62:c3:fe:dc:80:91:a2:1b:89:88:a1:2e:42:
3f:cd:91:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:57 2025 by rpki-client