Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
File: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft (raw, json)
Hash identifier: l1PBrwtodjYTm2SO0v6jrcCIbcbV3EEFjJvzME64rHU=
Subject key identifier: 05:51:A1:1D:06:56:A8:B8:59:11:67:25:2A:E4:DB:D7:42:3D:12:5F
Authority key identifier: F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
Certificate issuer: /CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Certificate serial: 019A00DA4ECDBE79A2DE08A6B8011E79E961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
Manifest number: 01CE
Signing time: Mon 20 Oct 2025 09:01:38 +0000
Manifest this update: Mon 20 Oct 2025 09:01:38 +0000
Manifest next update: Tue 21 Oct 2025 09:01:38 +0000
Files and hashes: 1: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl (hash: qGqFo98imQXaXabb05VCYi+Mi8XbOzzB+qsooXHHNKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:4e:cd:be:79:a2:de:08:a6:b8:01:1e:79:e9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Validity
Not Before: Oct 20 09:01:38 2025 GMT
Not After : Oct 21 09:01:38 2025 GMT
Subject: CN=0551a11d0656a8b8591167252ae4dbd7423d125f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c9:31:ca:ab:34:50:f0:5b:fa:be:81:f8:57:
23:20:94:27:7f:91:32:99:be:1b:59:2e:60:ab:4e:
d6:02:6c:6a:e5:4c:91:f6:a4:c1:6c:97:62:42:58:
37:1c:27:f0:fa:63:3a:ba:5f:33:a6:bf:ad:17:2a:
e4:ae:7b:11:69:0e:26:9d:0c:1b:34:3b:19:15:1e:
8c:51:0d:fa:bc:37:32:fe:fc:82:c8:e0:27:5c:77:
2d:c6:c6:67:75:69:8c:a4:cb:bb:f1:52:18:ff:d1:
07:4c:85:2d:5e:ba:b0:2d:e6:fc:21:30:21:5c:35:
88:e1:a1:a2:a4:46:49:92:2d:92:aa:46:4a:4b:c8:
c0:1d:96:43:d0:d2:d1:ba:50:1c:67:03:ad:41:35:
24:f2:1b:1a:9f:05:34:4e:8f:f6:1a:e4:d2:ef:86:
5b:20:83:75:69:ce:ca:f1:61:08:13:6a:80:9a:7b:
40:90:d3:62:f0:87:b7:38:78:63:bc:89:48:94:27:
8a:24:dc:9a:a2:a5:f8:46:ad:3c:3c:8f:2d:23:8b:
67:66:31:b9:45:e1:60:26:20:4c:12:7a:dd:ff:7d:
c4:bb:76:37:a3:2f:05:3e:f3:bb:fa:06:d5:95:9c:
54:57:39:6a:24:67:a1:cd:a9:de:7b:2d:40:39:94:
ce:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:51:A1:1D:06:56:A8:B8:59:11:67:25:2A:E4:DB:D7:42:3D:12:5F
X509v3 Authority Key Identifier:
keyid:F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e5:11:cd:52:98:3a:19:1f:2a:a7:68:92:bc:88:42:48:d8:
e8:ae:a6:07:d6:dc:6b:45:56:f5:d4:84:c7:18:ed:7e:cf:12:
e9:df:ad:e5:c0:dc:cb:a0:92:9a:cf:12:ab:55:5c:50:8f:ba:
40:ae:cb:31:50:9e:f9:1e:7f:de:da:4a:af:d3:b7:20:37:34:
63:0d:93:1d:18:92:7c:12:3d:fb:7c:3c:04:61:64:84:66:b8:
68:b4:ba:59:e2:26:b7:a4:b2:c8:43:5a:f2:d8:09:fd:4c:a0:
48:23:bc:51:d2:cd:06:6c:74:34:71:d5:15:cc:4b:7a:91:89:
7c:90:dc:c8:f2:f2:1d:69:8e:0e:43:2e:0b:a3:10:bd:76:bb:
f7:81:84:58:89:aa:2e:0f:57:8d:0d:81:b2:0f:ce:6d:e2:76:
eb:bc:f3:c3:05:03:f9:a6:df:9a:8f:9b:9d:06:a7:f2:93:61:
76:1d:48:77:02:fe:19:6f:54:5a:5d:ab:5a:93:e5:bd:e8:4c:
8d:82:ff:55:eb:a0:a6:94:63:5f:87:2e:d6:42:53:d7:96:dd:
38:66:13:f2:32:81:72:d1:9d:9f:27:23:a6:f2:fb:3f:a7:f7:
46:a1:f3:6e:0e:c1:4f:4f:63:65:76:65:4d:58:7d:dc:98:92:
cf:2c:03:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:27:11 2025 by rpki-client