Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
File: rK67C7Ozijz0QMgf97PhaTMqpm0.mft (raw, json)
Hash identifier: 5dmBWRz5yR3UIbT+SJgT1/Bz+JEGocifsOFq6oIMb9M=
Subject key identifier: 75:AB:AB:7D:17:05:BD:C0:F6:81:2A:9A:8D:31:E4:26:35:FF:46:E6
Authority key identifier: AC:AE:BB:0B:B3:B3:8A:3C:F4:40:C8:1F:F7:B3:E1:69:33:2A:A6:6D
Certificate issuer: /CN=acaebb0bb3b38a3cf440c81ff7b3e169332aa66d
Certificate serial: 0199FDD8E8B7FD78E304424541CE3DCB64F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
Manifest number: 12EA
Signing time: Sun 19 Oct 2025 19:01:14 +0000
Manifest this update: Sun 19 Oct 2025 19:01:14 +0000
Manifest next update: Mon 20 Oct 2025 19:01:14 +0000
Files and hashes: 1: rK67C7Ozijz0QMgf97PhaTMqpm0.crl (hash: Ty6qPv7/VomVIEokC+l2u8rMx0C0M6SVOfLKVZnPcxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:e8:b7:fd:78:e3:04:42:45:41:ce:3d:cb:64:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acaebb0bb3b38a3cf440c81ff7b3e169332aa66d
Validity
Not Before: Oct 19 19:01:14 2025 GMT
Not After : Oct 20 19:01:14 2025 GMT
Subject: CN=75abab7d1705bdc0f6812a9a8d31e42635ff46e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3d:66:f3:39:26:84:60:3b:de:69:b4:7f:4a:
26:79:50:98:ed:14:e0:1e:2e:1c:c2:5c:7d:b1:8d:
51:69:ce:bb:f7:06:13:35:ae:ac:19:ea:42:92:9a:
77:5b:67:e2:0e:81:f8:24:9b:8e:32:f9:9e:1d:9b:
78:00:a6:5b:64:e3:02:6a:2c:d3:7a:a5:e4:17:80:
9b:7f:53:14:67:fd:53:ef:39:9b:0f:21:86:4a:60:
8a:8c:21:8d:d7:48:51:1c:c2:28:43:13:c7:d5:0d:
14:e3:60:65:d0:99:83:f6:83:1c:45:ef:32:3b:c8:
89:54:ad:de:d3:fa:b8:35:19:71:4f:91:90:4c:3c:
ff:a1:44:22:29:e1:77:5f:e5:91:b3:33:1c:2a:58:
36:0a:de:c8:4c:70:7c:7c:fa:f4:4c:f5:e9:87:93:
1b:82:da:b9:63:fb:bf:47:8f:46:cb:95:e7:0d:36:
66:1b:aa:7f:cc:59:51:00:94:49:6b:f3:5e:f9:c1:
c7:96:0c:b2:c7:84:72:49:1c:99:e5:f8:06:8d:f2:
cb:46:d6:a7:3e:06:d1:61:33:e9:90:5d:70:65:0f:
cc:bf:0d:a4:78:24:40:d1:22:70:33:7d:c1:e8:4b:
44:07:df:93:da:a8:6f:1b:07:9c:30:e4:91:d3:9c:
41:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AB:AB:7D:17:05:BD:C0:F6:81:2A:9A:8D:31:E4:26:35:FF:46:E6
X509v3 Authority Key Identifier:
keyid:AC:AE:BB:0B:B3:B3:8A:3C:F4:40:C8:1F:F7:B3:E1:69:33:2A:A6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK67C7Ozijz0QMgf97PhaTMqpm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/807e35-88f7-435b-84a8-d14bd3d77822/1/rK67C7Ozijz0QMgf97PhaTMqpm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:4b:5a:9e:75:c3:a3:af:48:3a:f2:2c:b9:08:ff:ed:14:7d:
3a:e9:16:b2:87:a9:91:2c:aa:56:a9:de:bd:6e:d6:e4:1c:55:
d4:49:9f:32:8b:f8:9e:5a:57:4d:0b:52:d5:2a:b5:7e:fc:53:
ae:ec:bf:9d:58:40:a7:76:5b:ae:87:b2:8d:25:09:fb:7f:10:
26:67:f2:a0:76:6a:e9:83:ee:99:1d:18:c2:fb:2a:b5:f6:5d:
4c:9f:d4:5c:5a:00:73:6a:62:a5:f0:77:72:c3:00:f7:70:49:
73:8f:8a:fe:ad:69:24:7b:15:d7:d7:d5:7f:60:89:9b:28:7c:
09:d9:8e:31:f7:ad:04:d6:0d:e0:ea:63:a6:d8:2f:98:0f:48:
46:03:84:70:0c:7b:d2:9c:02:eb:66:ca:f7:0f:48:4d:0e:69:
ef:33:b1:96:79:5f:dd:ae:08:d8:4b:4a:da:db:a3:cd:10:c8:
82:5f:93:59:cc:0c:8a:ea:c1:61:45:46:74:ba:95:9a:6c:aa:
06:17:5e:9b:66:e4:6a:1d:48:8d:32:2c:ef:da:e2:7b:20:5a:
35:0b:ab:24:d2:bb:d9:31:24:1f:78:10:68:86:8b:b1:a7:ba:
7d:e1:82:16:1c:31:28:74:40:aa:c9:d5:62:e2:1c:76:00:3b:
ad:af:d1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:03:17 2025 by rpki-client