Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
File: kFHan04DQdDI3l6sVMY6EenvW18.mft (raw, json)
Hash identifier: juo0C7CIJbnbEyhFPMoF3SPFahOC7gqYYDj1kZzY8HQ=
Subject key identifier: FF:8F:D3:08:72:F7:FB:90:AE:5D:E9:B0:19:D0:74:E8:75:E8:B7:B8
Authority key identifier: 90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
Certificate issuer: /CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Certificate serial: 019A4D744C6744B3617CBE323CD76A8A8A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
Manifest number: 0DC9
Signing time: Tue 04 Nov 2025 06:00:58 +0000
Manifest this update: Tue 04 Nov 2025 06:00:58 +0000
Manifest next update: Wed 05 Nov 2025 06:00:58 +0000
Files and hashes: 1: kFHan04DQdDI3l6sVMY6EenvW18.crl (hash: TYIPogI3X4TRFvyJD6kA50C0AgX1ukLoPoikMBy6aRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:4c:67:44:b3:61:7c:be:32:3c:d7:6a:8a:8a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Validity
Not Before: Nov 4 06:00:58 2025 GMT
Not After : Nov 5 06:00:58 2025 GMT
Subject: CN=ff8fd30872f7fb90ae5de9b019d074e875e8b7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:be:10:07:6d:e1:84:d3:a3:60:38:97:d4:ec:
f9:4d:e8:28:63:e2:ab:ed:16:d7:27:8f:72:af:c3:
7f:b6:e2:1e:ea:df:49:dd:eb:f3:e6:88:ab:4f:f2:
a5:10:c3:f1:d9:ed:de:6b:f0:c9:13:ad:6a:66:30:
3d:1a:16:6c:a7:b5:58:1c:9f:af:57:e0:5c:34:36:
54:74:01:c8:6e:36:30:5d:2b:f4:07:78:f0:73:83:
0e:ec:82:d7:e6:60:c9:47:c1:68:5a:79:c9:7f:d2:
d0:4d:2e:89:e5:7e:86:64:52:ed:f3:6a:f3:55:f9:
ea:b3:8d:c6:07:16:1c:d3:58:53:0a:a3:4e:f4:6a:
f8:9a:94:7f:d5:d4:07:08:ea:26:25:3b:d2:90:05:
75:6c:a5:8c:91:63:07:6b:9f:3d:10:b7:e8:53:d6:
6b:36:20:3d:64:d3:20:1f:63:9a:b2:76:0b:e9:c5:
47:7d:ff:79:3c:15:08:1d:7a:73:9b:31:68:c3:2a:
87:bb:34:9f:53:e9:7b:ca:17:07:d4:2f:b9:f8:41:
88:a5:03:67:85:6e:26:d7:fe:ef:d7:5c:65:be:cf:
8b:83:74:96:e9:86:20:90:52:4e:ac:b3:53:6e:95:
df:49:b3:96:2d:c1:e8:02:3e:e5:dd:7a:37:9d:3c:
7f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8F:D3:08:72:F7:FB:90:AE:5D:E9:B0:19:D0:74:E8:75:E8:B7:B8
X509v3 Authority Key Identifier:
keyid:90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4e:14:34:d1:10:78:c6:25:e2:1c:bb:10:d0:92:d9:92:da:
d2:b3:5f:4d:4d:32:34:ce:06:6e:ee:16:f9:cf:bb:d5:e1:70:
dc:f5:a9:0c:3f:36:12:30:9c:07:d5:ac:14:a3:7a:95:37:5f:
5f:b1:9a:97:9f:35:ae:f7:1c:f0:9b:aa:c4:b8:45:c6:77:6b:
ab:6d:2d:e2:20:7f:96:ed:d4:ae:5a:42:a3:ed:9a:6d:1f:3a:
23:09:2d:76:5f:8e:53:6a:5f:cd:ae:88:ec:91:4c:07:62:9f:
3c:fe:61:e6:36:92:63:f3:c4:68:62:ef:e6:4f:46:ff:a8:b7:
68:e0:c5:8b:e7:ed:18:18:94:21:21:d5:25:02:d9:31:49:cb:
1b:8f:b5:be:a9:da:c6:5a:f0:82:ed:d2:b9:37:eb:6e:f9:43:
87:22:5d:61:74:d0:2c:ea:26:9e:fb:b7:d5:fd:2c:56:18:bb:
1a:98:a7:d4:d9:c1:02:47:03:a3:c0:40:56:6a:07:7c:83:42:
a1:d3:29:11:e6:2c:88:bc:cc:87:0e:cd:7d:56:49:d5:f2:79:
89:2b:a7:80:4c:e5:2d:4d:4a:d4:87:45:f5:18:bc:00:1c:70:
62:8f:46:6c:a9:76:6d:3d:cb:45:4d:fc:d4:64:d2:71:26:34:
9a:d1:cc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:25 2025 by rpki-client