Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
File: 1KAH7S_gjUM-DwoC9DynrLJvWg4.mft (raw, json)
Hash identifier: spVbcB2/Xsh4mLsiKYZ+YmQlcwSb0Y3RPmduQhT4q1M=
Subject key identifier: 10:68:6E:A9:60:63:41:6B:CE:5A:6E:0B:8B:3A:C4:50:55:F4:85:8C
Authority key identifier: D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
Certificate issuer: /CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Certificate serial: 0199FE0FD850F0521767610D8ECB11CC2267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
Manifest number: 0527
Signing time: Sun 19 Oct 2025 20:01:15 +0000
Manifest this update: Sun 19 Oct 2025 20:01:15 +0000
Manifest next update: Mon 20 Oct 2025 20:01:15 +0000
Files and hashes: 1: 1KAH7S_gjUM-DwoC9DynrLJvWg4.crl (hash: 5EOJsU71bSKQwcZQANn8hXiFrUmCfozmfjLm7hCO/+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:d8:50:f0:52:17:67:61:0d:8e:cb:11:cc:22:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Validity
Not Before: Oct 19 20:01:15 2025 GMT
Not After : Oct 20 20:01:15 2025 GMT
Subject: CN=10686ea96063416bce5a6e0b8b3ac45055f4858c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b7:28:a3:65:e9:7f:52:d8:89:07:79:cc:1a:
ba:fc:8e:eb:89:6b:4c:7e:0a:f3:27:e6:37:91:42:
aa:f5:65:1e:e4:69:be:5a:64:d4:b0:f4:7a:75:ce:
d2:5e:6b:82:5d:0c:0d:fc:6d:10:c8:c0:d4:e4:2d:
9a:f4:5a:ea:8d:a7:6f:4c:fa:53:e3:20:af:87:c2:
45:22:11:d4:22:41:6d:e9:91:bc:49:9c:4e:56:6c:
72:06:4c:88:71:e0:74:3f:b6:9b:98:84:16:f2:65:
52:73:22:50:b7:8a:46:f3:12:96:e8:80:8f:a7:5b:
9b:2f:ea:94:ed:0d:ce:19:58:94:3d:cf:f6:d9:6d:
bf:02:ee:28:ca:2e:c6:a7:6e:36:98:55:55:81:c3:
e4:62:06:7c:d5:c6:9b:6d:fc:6c:35:11:53:63:f1:
2d:63:10:88:2a:29:9f:4e:5a:15:69:61:7f:02:a1:
18:f4:5f:8c:9b:2c:d0:5f:e9:b2:c5:4a:0b:6d:ed:
87:d3:64:bf:c1:64:1b:f0:bd:db:71:fc:61:d5:b2:
54:ca:75:c8:a6:98:e9:94:47:ad:8c:e4:35:17:13:
87:ea:c9:79:c2:56:6b:90:5e:b9:37:8c:0f:fc:80:
4b:42:c7:0a:dd:3b:29:69:ae:76:83:7e:ab:b5:db:
7f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:68:6E:A9:60:63:41:6B:CE:5A:6E:0B:8B:3A:C4:50:55:F4:85:8C
X509v3 Authority Key Identifier:
keyid:D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:cf:29:49:d9:15:66:5b:18:40:b0:4d:b2:2b:38:af:65:99:
cd:87:46:ef:fe:18:52:8f:25:ab:77:80:15:96:9b:b2:33:81:
51:23:70:b2:d9:55:14:d6:39:8d:fe:dc:97:c4:a1:c9:9f:a4:
7f:5b:3e:f5:ec:9a:c4:b8:d4:4a:f3:c7:af:ae:10:87:a7:53:
63:ee:b7:69:77:49:29:19:c8:f0:6e:ce:a3:53:f4:ff:14:b9:
93:e9:31:9c:f0:df:19:75:d9:df:ce:29:0d:6f:52:42:1e:b8:
ff:1d:bd:fb:ec:8c:72:92:54:8b:24:c3:88:37:15:7c:eb:2b:
a8:97:69:af:dc:cc:18:95:e3:16:44:dc:cb:0a:ea:13:27:9e:
a2:87:21:31:be:a7:7d:e2:5a:4f:fa:11:7b:c6:2e:a2:6c:97:
5f:93:a5:a8:92:82:39:8a:e8:30:63:43:a9:72:45:f5:9e:a5:
31:d5:53:0e:48:30:b7:41:83:bb:8a:db:5d:6e:15:59:f5:a3:
97:1d:fa:88:50:d9:56:8d:5a:bd:5c:17:23:8d:f3:dc:2b:5f:
82:47:ef:1b:58:b4:53:01:81:69:78:16:7f:d9:5a:2e:3d:57:
ff:a1:39:a3:39:8d:2e:92:4f:78:74:f0:56:92:19:27:56:32:
a1:8d:15:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:41:15 2025 by rpki-client