Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
File: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft (raw, json)
Hash identifier: 49D0rWAjOa3sxr8qRpb2VUjcleucgZXNFT4AZCob2rs=
Subject key identifier: 9B:12:FB:71:FB:A4:84:1C:C1:F1:87:2F:BC:80:8A:C6:89:45:5A:17
Authority key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
Certificate issuer: /CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Certificate serial: 0199FBEC3DBC68C5DA0A101F2610BFA1BED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
Manifest number: 1167
Signing time: Sun 19 Oct 2025 10:03:07 +0000
Manifest this update: Sun 19 Oct 2025 10:03:07 +0000
Manifest next update: Mon 20 Oct 2025 10:03:07 +0000
Files and hashes: 1: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl (hash: y+pXldcWp55mzY2YycAwDY2HYkV/Kv89czF6zi1TCsQ=)
2: sdcv864WQrJBi5xKuVwuLH2j6Tk.roa (hash: eFYC5loUXzRtmrgy7poaf0InOUtNFCrHQGg1kdVt86Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:3d:bc:68:c5:da:0a:10:1f:26:10:bf:a1:be:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Validity
Not Before: Oct 19 10:03:07 2025 GMT
Not After : Oct 20 10:03:07 2025 GMT
Subject: CN=9b12fb71fba4841cc1f1872fbc808ac689455a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:2c:59:6f:5a:6d:3f:4d:f1:12:dd:3a:47:
0a:5f:23:5f:45:e4:f4:dc:d8:29:fa:57:9c:c3:82:
fb:71:8b:e8:c4:88:71:1f:cf:c5:43:d9:c7:5a:46:
86:31:cb:05:19:1a:33:12:2d:79:6c:c9:ef:3c:c3:
ff:54:00:73:a4:42:95:94:29:35:2f:42:a5:ef:09:
fc:f0:f9:c7:1d:ea:62:bc:b2:8b:bb:73:dd:19:7f:
6f:67:85:d9:5b:23:f2:76:af:56:8e:31:e0:8d:a5:
8e:23:b4:2d:15:88:b9:df:25:b1:71:e3:f5:b8:e8:
b6:67:be:c2:55:67:89:4a:1d:63:70:ae:c0:aa:c5:
f8:ee:48:7a:8b:82:63:dc:a1:73:16:f5:45:61:c0:
b1:e3:bd:ea:0b:24:ed:05:73:7e:67:26:cc:d2:8c:
86:f8:31:2a:61:d7:48:26:2a:d2:ac:b3:08:0b:15:
1c:65:82:03:05:84:65:4b:bb:5e:09:94:36:ad:10:
a5:48:b4:e9:71:e0:be:6e:d0:9c:f2:d6:22:2d:f4:
97:a1:00:5c:9a:d6:eb:d0:d0:2d:71:cb:fc:70:79:
1d:0b:9d:58:00:67:19:c8:89:dd:77:17:45:91:04:
ed:5f:45:42:e9:a8:3c:0d:74:39:8a:f1:8c:f0:1c:
e1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:12:FB:71:FB:A4:84:1C:C1:F1:87:2F:BC:80:8A:C6:89:45:5A:17
X509v3 Authority Key Identifier:
keyid:FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:05:4e:0e:39:13:e1:cc:a6:54:91:4b:c0:41:09:b7:11:9d:
68:32:94:37:66:60:5b:5c:b3:bb:e5:c4:03:71:b1:c7:ef:d7:
80:75:c5:46:4a:84:35:5f:4a:bc:83:45:1a:f4:bc:08:cd:1f:
3f:e1:12:b3:fc:2a:e2:b1:9a:51:14:45:d7:9d:d9:b3:aa:bb:
48:8a:c5:0e:22:b7:f4:b6:ac:04:f9:b1:10:16:8e:4a:c8:cb:
04:95:af:d4:b5:8a:46:ed:f1:3e:b6:bc:1f:2c:69:b8:7c:c2:
8c:21:71:c8:54:ad:5f:19:1f:53:11:2d:6f:9d:5a:9c:b7:e3:
4c:bb:ba:a5:61:23:0f:71:1a:71:7b:d8:73:7a:41:08:25:00:
ce:7b:b7:39:b3:04:f4:a2:48:e9:31:2d:92:e8:3b:ac:35:d9:
b2:6c:28:5a:ff:ab:6e:da:54:25:af:64:de:4f:fc:ce:36:c5:
7e:1f:6a:50:fa:09:b5:df:53:d3:ff:5e:7d:69:c5:59:59:f1:
46:ea:73:41:96:00:67:a4:f0:71:ed:b9:e7:ad:af:44:2d:b3:
b4:26:21:29:a7:bc:9d:b7:a1:a9:7e:70:0b:f2:d8:16:a4:96:
dc:65:df:18:d7:67:d1:4c:9a:e0:1b:eb:51:85:47:ec:db:3a:
60:5f:7d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:52 2025 by rpki-client