Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a94c18-15ca-4b9e-8380-2afc98afdcc7/1/kc04OOdPhNIERp3vJ7j-ehQAFLo.mft
File: kc04OOdPhNIERp3vJ7j-ehQAFLo.mft (raw, json)
Hash identifier: dug0buqTex8f+DQKEYoRO3FqKEgCWkZZ/TU+u4KNFPI=
Subject key identifier: 90:D4:E9:E1:25:D2:A7:B4:73:A2:79:35:90:69:56:EA:93:16:69:03
Authority key identifier: 91:CD:38:38:E7:4F:84:D2:04:46:9D:EF:27:B8:FE:7A:14:00:14:BA
Certificate issuer: /CN=91cd3838e74f84d204469def27b8fe7a140014ba
Certificate serial: 0199FB45D146ACB86C83BC3107B12A4B6B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kc04OOdPhNIERp3vJ7j-ehQAFLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/a94c18-15ca-4b9e-8380-2afc98afdcc7/1/kc04OOdPhNIERp3vJ7j-ehQAFLo.mft
Manifest number: 5B
Signing time: Sun 19 Oct 2025 07:01:20 +0000
Manifest this update: Sun 19 Oct 2025 07:01:20 +0000
Manifest next update: Mon 20 Oct 2025 07:01:20 +0000
Files and hashes: 1: kc04OOdPhNIERp3vJ7j-ehQAFLo.crl (hash: f6ebpKj+FyPFyv4tRyVf1fxsVOCHYL+CAhQbytxvZRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/a94c18-15ca-4b9e-8380-2afc98afdcc7/1/kc04OOdPhNIERp3vJ7j-ehQAFLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/a94c18-15ca-4b9e-8380-2afc98afdcc7/1/kc04OOdPhNIERp3vJ7j-ehQAFLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kc04OOdPhNIERp3vJ7j-ehQAFLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:d1:46:ac:b8:6c:83:bc:31:07:b1:2a:4b:6b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cd3838e74f84d204469def27b8fe7a140014ba
Validity
Not Before: Oct 19 07:01:20 2025 GMT
Not After : Oct 20 07:01:20 2025 GMT
Subject: CN=90d4e9e125d2a7b473a27935906956ea93166903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3c:7b:ed:5a:f0:db:c5:b7:6c:ca:cd:4c:34:
d1:18:b3:5b:dc:5f:16:a2:bf:18:24:96:47:87:9d:
7e:25:bf:cd:71:6b:8f:35:50:9d:90:8d:a7:90:77:
1e:de:bb:1f:6e:64:65:47:25:2a:67:0b:1b:b0:2b:
a4:79:0d:40:b3:da:ab:43:5d:8d:8a:86:85:87:de:
63:64:89:bd:1d:a7:7d:85:9f:6e:18:c8:82:d1:94:
67:25:3c:85:fd:5c:4b:34:ce:eb:c4:7a:33:55:5f:
ce:71:1d:37:a9:27:f7:5a:d9:53:c3:a5:af:0f:ef:
35:e3:74:c7:1c:e9:47:37:33:b7:9b:fe:d0:3a:fc:
95:b2:bf:39:c3:82:df:9f:3d:c4:3e:4b:04:a5:b0:
29:b8:93:0d:9a:c8:92:48:60:88:5c:b3:e1:88:88:
20:20:32:2e:82:51:ed:74:03:71:79:56:7a:8f:0d:
ef:bc:e8:44:49:79:8e:a0:bc:3a:3d:39:50:27:8a:
d2:d9:ad:b4:d5:94:59:b1:d5:4c:da:48:42:29:f5:
80:e4:6f:d1:9b:5a:a6:f1:f0:15:5d:0e:cf:8a:b7:
76:59:f7:51:f9:8f:d9:52:5f:c2:42:70:b9:5e:5d:
06:2e:dd:3a:da:0b:fa:fe:d6:0d:a3:ed:5b:ce:92:
d9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D4:E9:E1:25:D2:A7:B4:73:A2:79:35:90:69:56:EA:93:16:69:03
X509v3 Authority Key Identifier:
keyid:91:CD:38:38:E7:4F:84:D2:04:46:9D:EF:27:B8:FE:7A:14:00:14:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kc04OOdPhNIERp3vJ7j-ehQAFLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a94c18-15ca-4b9e-8380-2afc98afdcc7/1/kc04OOdPhNIERp3vJ7j-ehQAFLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a94c18-15ca-4b9e-8380-2afc98afdcc7/1/kc04OOdPhNIERp3vJ7j-ehQAFLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f4:06:8e:eb:94:62:a6:38:d1:1d:0c:d6:23:a2:98:fc:78:91:
72:07:3c:34:ef:bd:0b:0f:fd:98:17:0b:17:26:a5:8f:dd:d8:
5a:6d:fd:bb:71:bf:f4:d4:90:ac:0b:79:70:e9:1f:03:06:6c:
0b:0d:65:c9:c1:b5:63:a0:4c:18:a9:bd:26:c0:4c:64:da:2b:
d0:2b:c3:ee:4d:6c:e5:1b:75:d6:83:4c:bc:96:a8:43:1f:e7:
11:a8:9a:a2:5b:67:58:d8:a9:14:2e:6c:cb:73:98:18:d1:ec:
f4:89:af:06:31:58:20:7e:3c:0d:b0:0b:3a:34:38:ad:f7:62:
1a:fd:c6:7a:ac:f8:88:d7:c5:0c:b6:d1:29:c0:c0:36:31:04:
e4:08:c8:ed:5b:d0:5b:b5:e9:f3:f3:25:69:3b:ff:5b:42:59:
e0:c3:07:a9:16:ee:fe:0b:ab:d9:dc:fa:5f:36:ac:c1:f5:6c:
f3:f4:ae:25:a0:7b:a9:1a:c4:d4:cc:61:38:fd:02:59:52:df:
e1:d7:01:e7:4c:34:c1:d0:20:3e:7f:b1:df:30:86:00:58:1b:
5f:2d:cc:dd:b5:1c:15:1f:39:f3:03:0c:76:57:02:8c:5c:d8:
05:ed:c1:31:9f:fd:1f:52:94:37:b8:6f:48:41:ae:72:bb:94:
d7:ab:33:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:45 2025 by rpki-client