Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
File: CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft (raw, json)
Hash identifier: H8cGYE2usHiKbIJI2bgsoLbp4iMX/wXH1jYwmt0tUog=
Subject key identifier: DF:A9:B3:62:1B:6F:0E:33:9C:6C:0F:95:38:56:E7:85:73:50:EF:94
Authority key identifier: 08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
Certificate issuer: /CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Certificate serial: 0199FDDA5065D61CCD279E0CEA1161390DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
Manifest number: 04F2
Signing time: Sun 19 Oct 2025 19:02:47 +0000
Manifest this update: Sun 19 Oct 2025 19:02:47 +0000
Manifest next update: Mon 20 Oct 2025 19:02:47 +0000
Files and hashes: 1: CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl (hash: 3xZUN7q+OnRNzKquD7dbzfTzHp2OMtLbvdBGb7zGPpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:50:65:d6:1c:cd:27:9e:0c:ea:11:61:39:0d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Validity
Not Before: Oct 19 19:02:47 2025 GMT
Not After : Oct 20 19:02:47 2025 GMT
Subject: CN=dfa9b3621b6f0e339c6c0f953856e7857350ef94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:95:31:18:1c:9c:c5:72:3b:2b:ce:f6:55:1a:
bd:fc:f0:06:cf:02:b7:eb:d6:f7:4a:14:89:fb:62:
5a:01:29:62:36:a7:28:0a:6d:28:5b:c0:df:bb:a0:
63:91:79:46:2a:74:fd:59:e6:1b:ac:1e:06:72:01:
aa:1c:02:19:cc:38:96:f8:c9:a9:bf:8f:a6:0e:67:
55:71:b4:50:14:1d:b6:4e:e9:57:f1:60:f3:35:05:
76:7b:a7:cf:82:32:3c:80:d9:17:7d:3f:5b:d7:ac:
af:7b:50:5a:d6:3c:db:8c:bf:4c:c8:e6:61:49:13:
f3:41:c1:5b:06:0a:03:7c:74:82:0e:bd:2e:4f:de:
2f:9f:29:7b:4d:24:0b:24:f9:4c:60:e3:6f:a3:04:
51:91:7b:0a:a2:ea:b6:64:94:94:e0:9a:13:c6:d2:
bd:f3:bf:8f:06:54:3a:ba:49:a0:45:dd:68:1e:5b:
82:14:b8:f9:65:93:c1:8f:c0:fa:a2:66:24:6d:cc:
bc:e9:02:b0:d4:41:06:b2:51:0b:5a:84:df:22:37:
57:df:98:7b:52:a8:18:cb:1f:e4:e0:d3:da:7d:de:
5e:ae:8c:80:e3:5a:82:58:bf:e2:f7:7b:96:70:0f:
7f:48:38:42:86:dc:1b:49:48:c8:3d:ea:93:d9:ff:
45:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A9:B3:62:1B:6F:0E:33:9C:6C:0F:95:38:56:E7:85:73:50:EF:94
X509v3 Authority Key Identifier:
keyid:08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:97:8f:8e:e8:b8:ab:98:58:51:4f:c8:74:ac:2d:66:e2:52:
5b:63:a5:02:c3:db:a1:04:d8:56:ec:df:49:cb:32:42:4e:e9:
fe:10:f7:68:36:91:db:80:07:b2:c2:57:ca:3f:da:64:26:ec:
53:54:d1:02:a4:5a:f2:21:e5:a5:f8:5c:11:c5:d7:a8:4f:71:
f2:2c:55:e6:2a:59:a1:94:ff:d3:93:61:ba:c3:38:c3:2e:5a:
d7:57:19:bf:07:2b:8e:3f:7d:69:94:9f:c4:ad:54:31:bc:c0:
a5:c2:47:b8:a7:9c:44:b4:cf:33:73:5b:7b:be:39:3f:ac:4c:
23:96:18:86:e6:08:a9:a1:3e:05:36:c0:73:69:e8:82:74:f4:
9d:16:1d:86:f2:c1:d2:24:f7:14:6e:57:e8:d6:4e:01:21:57:
3a:e7:39:43:4c:86:d1:27:d8:32:96:d4:ee:ad:4a:9c:03:4c:
7d:a0:df:2e:dd:0a:ca:ea:fa:99:1c:d5:53:64:97:bc:4a:eb:
c7:5c:f5:7b:7e:60:fd:13:51:d3:fc:69:a8:16:1d:d4:fb:ae:
cc:80:e5:ae:66:69:d0:b4:8b:69:79:a5:22:e4:64:19:f7:72:
58:66:e9:26:7d:95:a7:29:68:eb:20:53:11:17:d9:70:ff:cf:
e6:5a:41:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:17 2025 by rpki-client