Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
File: 1-kak8RQ6vjrfxLaDX6E0498srDQ.mft (raw, json)
Hash identifier: +nfx3KvfnONWJ724JutsyObg2MnOdNa0+hmxkLTXVzk=
Subject key identifier: 0B:01:D3:8C:20:5F:57:0A:EE:3C:2E:21:09:5A:D0:20:64:67:77:BF
Authority key identifier: FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
Certificate issuer: /CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Certificate serial: 0199FE7DE45533CE2CA215A91929E0900328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 22:01:27 +0000
Manifest this update: Sun 19 Oct 2025 22:01:27 +0000
Manifest next update: Mon 20 Oct 2025 22:01:27 +0000
Files and hashes: 1: 1-kak8RQ6vjrfxLaDX6E0498srDQ.crl (hash: yXoLKH97Ww8Ji0XK1Y9FT66DoqqYpbTGAz2Ma3wGfWU=)
2: 3uEhAk6Wx4KcEg0MVVsAAyyADBw.roa (hash: FqSkeFfRf148LCqtNv59QOP75egaClJCY4HAjWTWGX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:e4:55:33:ce:2c:a2:15:a9:19:29:e0:90:03:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Validity
Not Before: Oct 19 22:01:27 2025 GMT
Not After : Oct 20 22:01:27 2025 GMT
Subject: CN=0b01d38c205f570aee3c2e21095ad020646777bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:fe:9f:5b:32:d8:f9:4c:94:ac:f6:0a:86:
b8:8b:22:67:30:63:8e:a7:a0:8b:61:21:8d:de:39:
76:df:85:44:be:24:df:03:75:47:94:4f:0b:3e:d6:
2e:94:3b:bb:8c:ac:d6:14:c5:78:62:ff:3e:ac:32:
9d:d0:eb:59:d4:1c:5c:5d:a0:c8:ed:0c:b5:fa:2c:
55:0d:7a:ad:94:33:40:91:bd:ae:50:9d:54:b2:bf:
43:e9:8b:9a:66:4f:5d:2b:99:c9:fa:47:17:47:bb:
47:6c:7b:cc:46:5b:0b:3e:b6:0e:17:27:cb:17:6b:
27:83:b9:07:81:ad:59:94:94:bf:bc:fe:5e:74:00:
19:bc:9e:65:32:f7:d2:61:9a:4d:00:27:35:88:89:
31:3c:d4:d4:5a:14:11:7c:9e:48:05:db:06:b4:8a:
84:7f:55:50:3c:16:f8:7e:aa:a8:f2:24:e6:af:29:
8f:b0:46:e2:e1:29:19:76:32:6f:9a:af:d3:19:7e:
0c:ff:89:2f:61:35:b7:34:8a:ff:b6:d6:74:60:c4:
ab:e0:5e:8e:01:51:75:14:8f:ec:25:fc:d6:f9:71:
fe:a0:0d:92:6e:87:fa:9f:88:3c:cc:ff:09:49:e9:
8b:06:4d:bb:d9:11:7b:77:4d:b9:45:f5:28:f4:24:
24:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:01:D3:8C:20:5F:57:0A:EE:3C:2E:21:09:5A:D0:20:64:67:77:BF
X509v3 Authority Key Identifier:
keyid:FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d8:0e:80:6d:85:13:b7:54:ac:01:76:4e:61:95:df:5c:0d:
95:0e:11:43:44:9e:91:35:2b:a1:16:44:96:8f:ba:44:d4:e7:
5d:10:3e:9d:66:fb:45:65:4a:82:e2:58:64:7e:14:3a:ef:2c:
d0:b6:f0:bb:fa:27:83:b9:75:96:c5:1c:a6:d6:dc:b7:f5:fa:
23:0f:d3:6d:16:44:30:8b:62:05:0f:31:94:cf:bc:57:66:3e:
6d:84:36:c5:a6:c4:e6:a4:65:25:c3:b7:2e:8f:51:2d:d9:3f:
d1:73:8c:8a:86:15:34:0c:fb:75:94:0e:ef:06:18:98:a8:5e:
d3:0a:df:e9:6e:78:bf:5b:e4:ce:35:b9:b8:39:b9:29:2f:83:
67:e0:49:a4:f3:20:fa:f2:06:12:b6:b7:dc:e1:cd:8e:6e:6d:
27:47:47:e5:f7:99:43:0c:31:35:ec:8a:bf:5d:e2:56:a1:4e:
09:81:5b:cb:af:62:0d:52:48:80:c9:25:26:09:7f:5b:de:68:
cd:a6:7e:af:ce:e9:9c:47:4b:c5:f9:45:50:45:26:39:1b:cc:
93:47:cc:d0:b4:51:7b:5a:ca:07:81:a7:2a:2a:c1:9e:1d:72:
6e:e9:57:b2:6b:f7:64:ee:4e:fc:b3:ee:5f:38:7d:6b:f7:4b:
5d:b4:97:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:38 2025 by rpki-client