Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
File: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft (raw, json)
Hash identifier: Q0fMQnsUXtmxWfexF+oXHJB9ZPCUL5tfRrorha22too=
Subject key identifier: D7:D7:12:E6:C8:ED:30:80:5B:0B:72:E4:93:30:5C:5F:1E:81:38:47
Authority key identifier: F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
Certificate issuer: /CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Certificate serial: 0199FBEB39932576DB863C46F3033EA4B99D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
Manifest number: 0A11
Signing time: Sun 19 Oct 2025 10:02:00 +0000
Manifest this update: Sun 19 Oct 2025 10:02:00 +0000
Manifest next update: Mon 20 Oct 2025 10:02:00 +0000
Files and hashes: 1: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl (hash: a4YkRmhqiZSToNHe23vz0Vm2exxkuJU1EbdODKJ8qqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:39:93:25:76:db:86:3c:46:f3:03:3e:a4:b9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Validity
Not Before: Oct 19 10:02:00 2025 GMT
Not After : Oct 20 10:02:00 2025 GMT
Subject: CN=d7d712e6c8ed30805b0b72e493305c5f1e813847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:32:5b:90:40:03:f4:ad:37:64:a8:17:d6:
3e:1f:71:fa:3d:3e:65:a4:a1:0f:29:10:0b:25:fb:
da:5e:1b:14:4e:ca:2e:50:44:ad:e8:b6:59:08:a3:
9e:32:5b:73:0c:6d:cd:b0:ee:c8:d3:17:02:47:18:
f7:34:a3:33:10:23:37:97:66:c1:0c:d7:51:79:8c:
93:63:77:6f:82:b6:cf:3e:76:c7:47:e5:56:cf:1d:
f4:59:10:b7:60:fc:73:4c:ca:a9:7a:cd:45:60:e1:
77:dd:16:c7:5b:94:33:e1:8c:be:0d:d9:d5:a1:27:
7c:2e:ec:8d:11:04:16:3c:74:80:ea:e9:40:d0:f1:
d6:83:88:09:ef:08:a0:b5:57:9c:d8:5c:14:d9:4e:
ba:51:a2:df:71:98:47:32:81:3d:8c:22:d4:02:94:
2c:70:6b:45:17:89:3d:d4:81:53:ae:49:23:a7:2a:
2c:f3:43:15:10:6e:52:6f:11:cc:af:7e:28:c5:25:
22:fa:19:53:5e:0c:91:b9:4c:01:5a:84:db:94:b3:
d2:e7:4e:14:e2:cd:c3:56:78:ca:4c:89:7c:c2:d4:
11:49:c9:84:be:41:4d:2c:81:e4:d2:78:6b:2b:6a:
ad:16:7a:11:02:8d:e1:29:74:3d:9d:35:9b:6a:6c:
2f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D7:12:E6:C8:ED:30:80:5B:0B:72:E4:93:30:5C:5F:1E:81:38:47
X509v3 Authority Key Identifier:
keyid:F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f5:86:5f:29:bc:24:80:cd:00:fd:4d:07:b6:89:ad:1a:5f:
e8:2f:65:7f:5e:15:b0:6d:8d:85:53:8d:cf:6f:b7:6f:53:22:
88:b9:28:b3:67:c1:64:2c:d2:dc:34:ea:6a:aa:4f:2b:f0:92:
dd:c3:c5:ec:a9:5a:48:0b:28:f4:ff:17:bc:0d:26:96:45:c7:
e3:42:91:9b:c7:27:bc:6f:38:64:0a:b3:fc:3a:61:9c:9d:4a:
a3:f6:e2:30:19:94:25:21:e6:45:6e:05:1b:7c:bf:a5:32:61:
8a:da:26:e1:b3:cb:35:e7:e1:90:e4:c1:50:49:fe:03:ac:1f:
a8:91:da:68:a2:76:5a:e4:b3:49:06:bc:67:52:a3:e4:5b:1b:
e4:ee:90:98:8b:49:53:cc:f4:1d:94:f8:45:9e:8f:9b:ae:a2:
ff:b2:f8:f3:98:30:4f:48:15:46:72:9b:f0:36:4a:7c:bb:9c:
96:23:db:f8:94:32:99:95:52:15:cd:9f:82:f9:5a:db:0f:19:
f6:51:e5:ba:11:7d:79:c3:1f:a1:01:01:d7:82:87:2e:11:af:
28:6a:dc:fd:f1:59:a9:c1:57:ed:28:c7:b2:31:4c:8a:0b:69:
2e:1d:8a:95:19:4d:e2:06:42:b3:54:44:4d:36:71:85:83:06:
eb:23:f8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:13 2025 by rpki-client