Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
File: K1ATo25hvsQKEqDkHEjxkYYwca8.mft (raw, json)
Hash identifier: IUjc4b4/j1dl7oHEKmk8Nels5djpqH4s68oeIovu5eo=
Subject key identifier: 8F:AB:B2:95:0C:51:1E:FB:D8:19:94:E9:36:73:C1:4D:06:1F:6D:A5
Authority key identifier: 2B:50:13:A3:6E:61:BE:C4:0A:12:A0:E4:1C:48:F1:91:86:30:71:AF
Certificate issuer: /CN=2b5013a36e61bec40a12a0e41c48f191863071af
Certificate serial: 0199FBEB5D12E04788A646E832808F0620DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:02:09 +0000
Manifest this update: Sun 19 Oct 2025 10:02:09 +0000
Manifest next update: Mon 20 Oct 2025 10:02:09 +0000
Files and hashes: 1: K1ATo25hvsQKEqDkHEjxkYYwca8.crl (hash: EZmDk9553wFDhV0Lp4BQq3u3GHyDmNzYlnKyKjeiXzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:5d:12:e0:47:88:a6:46:e8:32:80:8f:06:20:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5013a36e61bec40a12a0e41c48f191863071af
Validity
Not Before: Oct 19 10:02:09 2025 GMT
Not After : Oct 20 10:02:09 2025 GMT
Subject: CN=8fabb2950c511efbd81994e93673c14d061f6da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bb:49:b3:b7:c5:8e:8b:20:6b:a6:5c:95:a6:
3c:80:34:ae:75:dc:59:94:8b:ef:e3:43:2e:25:f4:
d5:e1:37:50:82:06:fa:e8:7e:7c:a4:29:6e:9c:34:
10:91:63:cb:11:70:8e:74:33:0c:86:1d:55:2e:48:
b1:ea:72:63:aa:c2:31:dc:e2:53:da:1a:19:60:90:
37:0b:b3:53:ea:d7:08:d0:ab:f4:b8:6f:02:2c:72:
8e:f1:74:f9:9f:f8:cd:d6:75:e0:21:ea:c0:33:e5:
4d:55:c1:84:0c:21:cd:df:2d:bc:58:f6:e1:b1:7a:
21:6c:13:5f:c3:c2:51:29:b0:8f:71:60:ea:0f:ee:
28:04:d2:a5:d7:f3:a4:c3:8a:5e:02:11:09:43:0a:
16:ee:a6:f2:5e:62:58:c6:b0:ff:eb:47:d1:cb:4a:
b1:10:67:18:51:97:a5:2c:6a:32:6b:53:12:c1:fd:
93:56:05:bc:1e:72:51:71:ca:13:e8:5b:89:66:46:
18:d6:e7:d4:f5:f2:15:56:3b:81:e0:fb:ee:9e:28:
1e:48:5c:2f:7f:96:70:bc:dc:84:fa:8d:79:f6:4a:
e7:1b:7e:c3:b9:4a:a7:d8:86:df:b5:f7:9f:3d:4d:
20:f0:d0:08:79:34:15:89:6f:f9:90:96:98:f0:10:
6a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AB:B2:95:0C:51:1E:FB:D8:19:94:E9:36:73:C1:4D:06:1F:6D:A5
X509v3 Authority Key Identifier:
keyid:2B:50:13:A3:6E:61:BE:C4:0A:12:A0:E4:1C:48:F1:91:86:30:71:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b4:74:09:5f:9f:6d:88:58:9e:4a:a4:cf:3c:2f:92:1b:9e:
ce:3c:51:a7:78:c7:be:5f:90:65:3b:73:60:38:71:50:58:09:
ca:83:c3:27:66:79:9d:c3:7e:73:97:e1:d3:03:0f:6a:08:a8:
a9:fc:9c:7d:d6:1b:91:ad:4d:da:ce:96:70:12:1c:96:ca:ac:
25:1c:79:c3:36:70:f1:12:da:ee:4d:00:44:0a:22:68:14:19:
97:af:36:8f:83:b7:8d:14:50:1b:da:07:fe:e1:53:91:ff:9b:
8d:53:7e:a4:be:53:59:43:85:94:fb:0b:68:4d:03:df:d6:ae:
f2:35:5e:3d:67:a6:4d:89:d3:b4:b9:4f:fb:d2:74:23:b6:7f:
63:d3:45:e6:41:31:98:5b:60:97:4e:8b:1f:d6:7e:6a:69:a4:
e3:3c:f5:3c:40:39:b0:54:76:60:9c:ce:cb:9f:77:d1:8b:a3:
df:5f:f8:a3:83:ae:50:8f:a9:b4:ac:de:ec:b8:ab:66:a4:fa:
0a:dc:0c:05:57:cf:fd:f8:0f:c8:38:16:24:a6:94:d6:46:e9:
34:a7:28:50:e6:4d:44:b6:bf:80:28:cc:b7:5a:fd:d6:20:6d:
87:5a:89:a7:3c:86:90:09:41:1f:26:ae:9e:f5:07:bf:95:a4:
d0:6a:47:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:09 2025 by rpki-client