Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft
File: k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft (raw, json)
Hash identifier: 7UBdpJ2xCdHEQfHvTqCWZH4xG0Mybknik4bfK/Isfn0=
Subject key identifier: D3:99:4F:EE:BC:18:89:43:8B:E4:6A:54:E9:2E:21:EC:C1:1A:73:EF
Authority key identifier: 93:44:49:92:36:48:06:2D:79:43:3D:C8:6D:32:EF:E4:2C:AC:B3:DB
Certificate issuer: /CN=934449923648062d79433dc86d32efe42cacb3db
Certificate serial: 0199FFC861329CD14D989E41FA7185DBC306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0RJkjZIBi15Qz3IbTLv5Cyss9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 04:02:26 +0000
Manifest this update: Mon 20 Oct 2025 04:02:26 +0000
Manifest next update: Tue 21 Oct 2025 04:02:26 +0000
Files and hashes: 1: k0RJkjZIBi15Qz3IbTLv5Cyss9s.crl (hash: 8nv1urtz48fuhx0JPMtXLdVQYTkwvtaW7HVQtfCY/MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0RJkjZIBi15Qz3IbTLv5Cyss9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:61:32:9c:d1:4d:98:9e:41:fa:71:85:db:c3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934449923648062d79433dc86d32efe42cacb3db
Validity
Not Before: Oct 20 04:02:26 2025 GMT
Not After : Oct 21 04:02:26 2025 GMT
Subject: CN=d3994feebc1889438be46a54e92e21ecc11a73ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:ed:b2:5a:8d:ac:d0:c0:b3:af:b7:4c:53:
4a:86:fc:93:51:ae:5a:a0:d2:e6:77:20:76:53:a7:
d0:6c:cc:23:48:3a:26:a7:c2:b7:3d:c4:8b:a2:2d:
39:5d:43:cf:63:66:c5:3f:b6:5f:54:34:42:cc:c2:
ee:9a:1b:7f:a6:1e:06:64:af:f3:22:77:5c:fd:18:
74:24:e3:15:bd:cb:fe:95:08:13:62:89:07:76:6e:
c2:ef:e7:ce:21:b6:92:3d:b5:d5:cc:f2:35:71:da:
3e:5c:75:ca:9e:c2:89:48:92:0c:2c:d1:4c:0b:e6:
98:3c:2a:f3:81:ab:4c:82:f2:23:71:cd:78:52:37:
85:a0:d5:3a:91:83:55:86:f3:dd:f0:fa:85:6b:70:
0a:b9:bf:11:06:2b:27:b2:86:0d:d8:5e:1e:71:b5:
8a:17:2e:2b:d1:e1:06:ed:88:f2:4d:72:3e:33:37:
98:e2:f8:f0:66:6e:1b:a1:f2:2a:4f:d4:ed:ba:18:
d3:d1:d6:0f:e3:f5:88:d5:95:44:e0:16:fd:ec:92:
87:1d:24:50:51:87:f9:35:8a:00:c5:42:a3:eb:f1:
5b:9f:5e:d3:b6:2c:62:45:db:69:37:f4:23:09:41:
7d:ab:42:28:91:5d:68:cb:08:4d:a5:8d:c8:8f:58:
4d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:99:4F:EE:BC:18:89:43:8B:E4:6A:54:E9:2E:21:EC:C1:1A:73:EF
X509v3 Authority Key Identifier:
keyid:93:44:49:92:36:48:06:2D:79:43:3D:C8:6D:32:EF:E4:2C:AC:B3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0RJkjZIBi15Qz3IbTLv5Cyss9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/182b18-65af-4325-95b3-1d95f6d554ca/1/k0RJkjZIBi15Qz3IbTLv5Cyss9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:16:8d:2c:7a:cd:79:57:f9:04:dd:35:9d:60:3d:64:88:a5:
2e:e4:dc:c9:8e:cc:23:a7:0a:a1:f2:d5:d7:a0:c0:35:f6:0f:
fc:f6:69:3f:28:c4:0e:25:fa:a3:56:59:11:e7:40:15:6b:9d:
f9:b3:1b:98:1f:7d:13:58:2f:54:41:3c:4a:fd:60:a1:51:ae:
f8:ed:67:f5:2c:1c:fc:8f:c1:03:d0:d9:2f:55:6c:97:a9:1c:
c8:8f:69:f8:a8:1c:50:7c:b9:6a:38:46:6c:c1:65:c5:00:05:
2c:15:65:81:02:fa:fc:e3:68:b3:c8:ad:18:33:fb:99:c7:44:
22:ca:ea:b9:14:fa:6d:de:c2:6a:f8:5b:80:c4:19:a5:a1:f7:
8b:a4:d4:b9:7d:36:ac:45:61:5d:d2:ae:5a:13:8b:04:ca:6c:
4f:4f:00:4c:f8:66:c1:f8:b3:20:4a:c6:7d:be:42:43:e4:0d:
aa:fc:24:2e:09:03:91:bc:72:fd:cc:1f:8a:a7:81:9f:d0:be:
87:f8:e5:77:9d:b9:54:2e:03:a0:df:32:58:1e:ba:e8:ba:d6:
59:b1:45:14:3c:99:e3:a6:a7:fd:b8:7d:0f:29:7a:0e:d6:70:
9c:9d:16:c4:c4:70:e7:20:cb:f1:fa:64:cf:fc:7d:84:8f:aa:
f3:1c:3b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:02:17 2025 by rpki-client