Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
File: 1-VkY92suBLF1FE4jy-SKY8yaqo8.mft (raw, json)
Hash identifier: KYcBnnnCjvfGeu9EB6TmJyqde46c8IZYqVtEwhf1omw=
Subject key identifier: 1C:52:31:F3:3D:6B:59:77:C3:F1:2C:AD:8B:8B:6F:56:6D:7E:11:11
Authority key identifier: F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
Certificate issuer: /CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Certificate serial: 0199FC2179726061BE5A57B03B8A0C588163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
Manifest number: 0A99
Signing time: Sun 19 Oct 2025 11:01:16 +0000
Manifest this update: Sun 19 Oct 2025 11:01:16 +0000
Manifest next update: Mon 20 Oct 2025 11:01:16 +0000
Files and hashes: 1: 1-VkY92suBLF1FE4jy-SKY8yaqo8.crl (hash: gfl29VlNzOxr8xCFJsgvSwSkCM3gNEXqQ9NfgyzAsAM=)
2: 7-j4zYeoEZb3GyJAS87cCTQvMeg.roa (hash: EAdEDlZP/7sT6Qp3HfzjAY/RfoPmZ+aNXdW6ptqfGUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:79:72:60:61:be:5a:57:b0:3b:8a:0c:58:81:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Validity
Not Before: Oct 19 11:01:16 2025 GMT
Not After : Oct 20 11:01:16 2025 GMT
Subject: CN=1c5231f33d6b5977c3f12cad8b8b6f566d7e1111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:15:39:97:27:8f:4e:d6:6f:38:6c:cb:1f:
a5:c1:51:16:c9:3e:80:d6:ea:ad:f2:53:29:9d:d7:
25:6e:51:a1:00:f7:ad:a2:47:2f:35:60:48:00:5c:
2c:ac:37:99:66:74:b4:8c:33:fa:d5:86:0f:52:1c:
e0:a1:1b:2f:e2:0a:38:63:ea:db:d6:5a:0b:9b:bd:
ee:8c:92:41:99:f2:36:6a:d8:75:04:0a:7d:18:5c:
8a:62:f9:99:20:95:d6:3e:57:94:68:c7:3f:99:75:
39:dd:b8:4e:7c:d2:86:67:d9:87:28:b8:89:7c:a8:
54:90:1c:74:be:97:92:0b:8d:9a:74:79:60:ca:0d:
97:bb:f5:f8:a8:bd:5d:39:37:6a:b0:f2:24:9a:8d:
c2:8e:9d:13:ba:0d:bf:4f:6c:6c:27:a5:e1:73:8c:
ae:5e:08:39:15:7e:03:74:cd:e2:44:22:28:75:5c:
1a:9c:a5:3f:c0:8e:45:4a:e2:28:6b:39:72:1f:ae:
45:a8:3d:67:70:f6:e8:db:81:4a:2a:0a:f9:42:cd:
aa:0d:7d:a5:83:98:b7:11:cc:86:cb:8a:d2:2c:88:
20:b9:ca:e9:89:2f:32:a8:f7:63:89:12:7e:2d:a7:
c8:b1:bf:c9:83:42:2b:9f:f7:ca:68:b8:65:7e:99:
87:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:52:31:F3:3D:6B:59:77:C3:F1:2C:AD:8B:8B:6F:56:6D:7E:11:11
X509v3 Authority Key Identifier:
keyid:F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5b:cf:41:c4:78:91:9c:39:0c:6d:1c:18:b7:d6:f3:e9:76:
3f:05:95:b4:ce:d8:ff:c0:a2:65:d0:f7:92:be:c1:0a:6f:7f:
d7:6b:6e:37:4d:2f:a5:2b:38:89:7e:c7:46:ed:a2:69:f2:3e:
81:29:f0:42:14:b5:8d:85:b2:1c:0b:23:35:d4:4d:cd:f9:22:
e1:3a:51:37:83:bf:bd:69:18:ae:d2:f6:65:71:8b:ff:ed:79:
0c:a8:48:62:66:6d:29:36:98:0f:ae:69:f8:f0:bc:c2:f1:af:
5d:d0:96:2c:09:dc:b9:17:bc:c8:fc:2e:5c:5d:7e:b2:e8:59:
bb:dc:db:32:f2:5d:b0:86:72:dd:aa:b3:bc:44:df:b1:96:f2:
e8:cc:03:ea:f2:e5:76:d7:ec:06:13:30:52:42:44:85:54:fe:
bf:a9:25:f7:75:b2:f1:7a:f2:9a:ad:b2:19:94:5e:2b:c4:33:
a5:ce:c1:7a:40:28:be:fd:12:bd:03:3c:9a:2e:a0:0f:28:b7:
ee:8b:f0:35:81:52:48:4c:79:f0:28:56:d8:ef:0b:ea:c7:aa:
97:1c:e4:f3:87:c8:63:7e:69:bd:44:24:86:18:f5:18:20:ce:
73:c2:eb:76:53:13:f4:48:26:ec:b2:21:a8:68:94:82:dd:22:
b3:d0:46:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:28 2025 by rpki-client