Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
File: MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft (raw, json)
Hash identifier: //ODX4ipsZW3k9DYehgvyZShca5xDI16KlJlciBJScs=
Subject key identifier: 8B:19:61:39:0D:20:82:4A:C1:F6:DF:C3:C8:70:24:4E:DC:68:12:6E
Authority key identifier: 33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97
Certificate issuer: /CN=33229bd682fe0a3410698bdd4c262dc99cc02797
Certificate serial: 0199FC588234037D5602677BB7D8FD21245E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
Manifest number: 0A3E
Signing time: Sun 19 Oct 2025 12:01:22 +0000
Manifest this update: Sun 19 Oct 2025 12:01:22 +0000
Manifest next update: Mon 20 Oct 2025 12:01:22 +0000
Files and hashes: 1: MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl (hash: PIo7CMVOC+ZXhHTKs8YefORYJcL7qAV54WoxoIrLtqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:82:34:03:7d:56:02:67:7b:b7:d8:fd:21:24:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33229bd682fe0a3410698bdd4c262dc99cc02797
Validity
Not Before: Oct 19 12:01:22 2025 GMT
Not After : Oct 20 12:01:22 2025 GMT
Subject: CN=8b1961390d20824ac1f6dfc3c870244edc68126e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bc:a3:91:6d:71:80:17:53:77:eb:14:63:2e:
8f:d8:29:92:90:af:d7:d6:88:eb:a3:c5:a9:4b:76:
ea:f4:3f:45:b5:ff:a4:c7:46:d6:bd:d7:04:09:83:
52:25:1c:bf:6b:2e:59:3c:e9:0f:4c:32:d4:0e:6d:
83:86:32:4f:ed:a7:e5:48:e8:dd:65:ea:17:b6:c3:
89:33:2f:76:dd:ec:7d:56:96:3f:78:7b:b5:35:2c:
de:a4:0a:35:67:2c:b1:55:e7:07:58:f1:ca:67:df:
5c:66:7f:3d:28:46:9a:38:ba:09:1c:cb:6c:0d:7f:
ec:7e:73:26:fe:3d:6d:2c:dd:34:91:77:77:7b:be:
17:fa:69:9d:24:78:6f:2d:b8:76:0e:da:f8:91:a6:
bf:a9:e1:3f:16:1d:aa:ea:28:9b:db:03:b6:5a:4c:
ee:90:b3:54:0a:22:00:55:90:d3:0d:81:3a:6e:b1:
b2:e7:7d:cb:1d:0a:4a:33:99:21:30:fb:b1:6d:f9:
40:14:0c:25:10:2d:fe:1b:e4:70:a4:3e:70:76:fa:
6e:a8:41:7f:7f:68:eb:a4:e5:3a:b4:b1:ba:77:5b:
dc:10:94:94:b3:9a:c4:cc:d9:df:94:88:da:de:e7:
46:53:8c:fe:d4:ad:94:19:f5:a9:ef:11:ab:3d:c3:
29:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:19:61:39:0D:20:82:4A:C1:F6:DF:C3:C8:70:24:4E:DC:68:12:6E
X509v3 Authority Key Identifier:
keyid:33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:43:3f:c4:88:c6:ee:62:2a:6e:2c:3f:4f:f7:81:92:b9:31:
c6:50:69:95:1d:bd:c2:25:13:55:0d:2a:98:ab:c9:d0:8b:05:
ad:25:ac:cd:4d:83:4b:34:68:57:93:07:94:6e:61:ca:aa:b1:
05:4d:45:3d:e3:ec:fd:97:dd:4a:f8:13:9a:e8:c6:de:fa:ec:
26:4a:65:44:21:2f:2b:03:c2:dd:be:9d:ba:a2:47:10:bb:0e:
c8:55:a7:b8:91:9c:a4:de:ff:1b:6a:0e:f1:e6:66:23:03:33:
f2:b6:8a:4e:91:94:02:e3:79:ea:56:c7:ec:43:99:33:b7:89:
a5:9f:c4:0d:07:a3:f2:d8:56:44:76:f7:1d:16:5f:ba:8e:b8:
80:f0:86:e1:09:f1:11:bb:b8:69:1e:d1:4e:7e:7e:cc:2c:ee:
75:ee:eb:ba:fc:34:b1:3e:fa:ac:a5:18:77:3e:c2:98:69:ce:
1f:e5:c2:7f:b9:00:70:65:0a:59:5d:e0:4c:eb:b5:0f:5b:e3:
e2:0c:be:48:6c:d8:86:80:e6:0b:27:a6:4b:97:84:42:d8:dc:
b6:1a:43:31:1b:c4:0d:4e:59:66:b1:e7:6f:8d:dd:c6:96:a4:
ae:30:d2:ef:ae:04:a6:a7:23:96:e8:d0:e2:57:fc:7b:1d:3e:
0c:cf:ce:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:55 2025 by rpki-client