
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
File: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft (raw, json)
Hash identifier: lFozrPGPQiK7fOFxCMj9XDREc+6OP/B4pUShq7JXcns=
Subject key identifier: BE:33:F7:46:28:E7:AD:42:FD:4E:8E:75:ED:6F:BD:9B:FC:07:6A:9A
Authority key identifier: AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
Certificate issuer: /CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Certificate serial: 0199FB7CC39E8D159AA82E918813C8255397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
Manifest number: 05A9
Signing time: Sun 19 Oct 2025 08:01:21 +0000
Manifest this update: Sun 19 Oct 2025 08:01:21 +0000
Manifest next update: Mon 20 Oct 2025 08:01:21 +0000
Files and hashes: 1: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl (hash: SRaRcFAq6R+3B5n2v2M16/Te2EZcOpxVNr5cIQ6ECg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c3:9e:8d:15:9a:a8:2e:91:88:13:c8:25:53:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Validity
Not Before: Oct 19 08:01:21 2025 GMT
Not After : Oct 20 08:01:21 2025 GMT
Subject: CN=be33f74628e7ad42fd4e8e75ed6fbd9bfc076a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d7:fa:15:1a:75:e3:31:a1:8d:12:68:37:d8:
46:db:56:b2:56:c8:66:6b:4c:1b:8c:6c:49:03:54:
f2:a0:ca:26:11:c2:1e:b5:51:ab:c4:82:a8:7d:5f:
06:d6:7b:61:12:a0:fc:cc:d5:b5:9a:01:82:7e:7c:
62:19:a9:ac:9d:d6:69:5f:6a:3f:ee:ec:35:4e:74:
17:06:7b:dc:39:d3:a6:78:21:07:c3:4f:00:65:c0:
b4:fa:52:bd:e0:10:74:c8:45:7e:e6:e7:cc:9e:32:
4b:9a:a8:09:8f:8e:a0:2f:ce:cf:e9:d3:1a:dd:bb:
5b:ad:ab:35:45:1a:41:c9:ed:9d:f6:40:5a:15:d4:
a8:11:5a:61:67:b9:31:9c:e6:63:23:6b:be:d8:23:
8c:14:a1:7a:86:bb:ff:bd:cc:eb:c6:a7:a0:56:15:
97:57:55:b7:27:0f:4d:73:ec:26:99:f0:4d:2f:81:
10:da:af:2d:49:f8:7f:72:aa:a7:16:56:84:f7:e6:
37:a3:af:43:c1:cf:fa:33:2d:80:ad:a1:4a:0f:f6:
31:94:74:45:b5:33:47:52:75:4e:e9:e1:d7:9d:22:
51:83:86:a3:37:4c:d4:b6:1c:81:ae:38:41:44:1a:
82:6e:55:1c:94:ff:60:3c:67:27:76:6b:ac:c6:0c:
c5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:33:F7:46:28:E7:AD:42:FD:4E:8E:75:ED:6F:BD:9B:FC:07:6A:9A
X509v3 Authority Key Identifier:
keyid:AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d0:75:a1:bb:e2:53:66:b7:f3:51:29:48:cf:e0:f0:1f:4b:
15:e1:c5:92:a1:b3:50:97:ad:d4:3b:9f:fc:a6:28:fe:9c:67:
ec:b6:6f:2e:96:7c:b8:f3:1d:2b:d4:44:5f:4e:9c:19:f9:52:
0f:b6:8f:d2:12:2d:4a:c3:cc:8a:25:35:2a:87:c1:ee:35:4a:
13:7e:b0:42:0e:a6:e3:67:12:82:97:57:bc:8f:fd:0c:2b:70:
eb:86:d2:ca:2d:ac:92:e6:0c:2d:be:21:28:fc:67:e7:3b:63:
13:7d:2d:dc:70:6f:a0:1e:bd:f4:c1:40:1c:0b:70:3d:69:27:
33:6c:96:04:48:e1:2d:f5:d4:e5:ee:bf:db:98:d8:80:dd:58:
bc:04:ae:2c:4d:2a:f9:df:75:39:df:42:53:4b:5b:27:83:a5:
3f:e3:b0:2d:59:99:7f:6f:1f:28:fe:26:db:5e:e5:73:13:09:
31:ab:48:6c:6d:c6:87:7d:16:16:c0:62:f4:b9:45:5c:99:72:
9a:c0:41:36:ac:ba:05:d9:2a:2f:66:9d:77:27:4d:f0:c8:68:
25:fa:c3:9e:d5:98:54:c9:1e:56:20:dc:68:12:e8:c3:be:bc:
93:fd:ae:81:91:d1:5a:ab:98:a9:e1:2c:1f:f6:e6:78:76:78:
0b:16:7c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:16 2025 by rpki-client