Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier: J+zKWOUxnrB0hfGmazEqjwMySxH1kKObtec0/szP9lA=
Subject key identifier: CA:AD:2D:6C:05:58:04:0C:E7:97:B5:DB:71:D1:5A:19:F9:13:02:D9
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 019A54BF4B3B6769AED7D15B8CE3A4CA2C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number: 0826
Signing time: Wed 05 Nov 2025 16:00:13 +0000
Manifest this update: Wed 05 Nov 2025 16:00:13 +0000
Manifest next update: Thu 06 Nov 2025 16:00:13 +0000
Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: jMR7qH9O964KuoCHyXcUMIatAiUo79/Uvl0xXzgtaQ8=)
2: e156A2TTFNsUHYceE64LHXFN6g0.roa (hash: nO0mYNmn3X/br3j4EpG5tdC2In3Gz3kRvtjW6m8kRsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:4b:3b:67:69:ae:d7:d1:5b:8c:e3:a4:ca:2c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: Nov 5 16:00:13 2025 GMT
Not After : Nov 6 16:00:13 2025 GMT
Subject: CN=caad2d6c0558040ce797b5db71d15a19f91302d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:35:26:33:73:7b:e7:20:d2:ed:2b:4b:5b:
ca:ca:09:d2:bc:99:49:6d:00:e3:96:30:6e:b5:a4:
52:17:f4:2d:b8:ab:d1:d5:84:b2:09:b5:ac:b6:2e:
65:c5:2a:33:25:46:18:e2:b2:79:ca:fa:25:c8:27:
1a:4d:4a:41:62:d0:96:87:80:87:24:d3:48:44:c6:
b3:7f:8f:21:7e:5a:97:cc:3d:b6:69:96:4a:9a:13:
d0:13:bc:b8:c9:98:09:3c:b4:23:04:1e:e9:85:9f:
8f:00:79:e6:f4:d6:09:f3:19:41:42:01:c0:9d:40:
ac:bf:f8:19:41:18:6f:fb:87:1c:f8:f1:3c:a2:ed:
f7:8f:57:f2:1c:5b:c4:77:35:80:00:eb:4b:27:eb:
17:a5:6c:d0:94:49:31:48:90:2b:aa:6b:9c:14:26:
d6:29:c4:a4:ce:96:53:ed:66:87:6e:52:d6:c9:f9:
c5:4b:5f:28:5e:8b:9d:c9:e6:f5:6c:44:06:69:47:
67:74:ea:6b:89:1f:8e:4e:56:53:34:03:8e:69:e1:
7f:1f:2f:ae:57:06:90:a4:3e:f1:60:24:0f:ed:ad:
ce:b1:07:c5:39:61:d4:d3:6d:93:db:02:7b:e9:39:
71:b4:1d:55:4e:a7:08:68:c5:36:67:85:67:14:bc:
34:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AD:2D:6C:05:58:04:0C:E7:97:B5:DB:71:D1:5A:19:F9:13:02:D9
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:36:04:fa:5b:a2:1c:a6:b4:87:a6:f9:2a:ac:71:06:82:b8:
da:6d:d8:1e:82:e1:dd:1d:7d:97:96:e3:93:06:3f:37:e9:ce:
48:c0:06:41:dc:11:10:76:d7:9e:52:f6:c0:6c:c9:8c:19:3e:
e3:98:2a:b7:d5:16:eb:b9:43:d2:78:06:ef:d9:83:8b:15:e0:
1c:64:15:ea:5d:25:db:76:00:f7:92:01:58:2d:d4:e8:9c:9a:
fe:ee:5b:00:b0:ac:ea:74:77:82:2f:f6:96:6e:73:0b:e1:a6:
3f:e8:28:76:f9:f6:1a:d8:e4:65:e2:36:ef:6c:ff:9f:be:f5:
40:84:6e:e1:67:a1:aa:1f:3d:b4:31:06:4e:08:68:45:6f:33:
37:d0:84:e2:50:a5:12:6d:db:e7:60:6e:46:14:f7:9b:4c:1f:
2d:ab:9d:bf:76:d8:aa:8b:10:62:ec:5a:9b:2a:f2:89:07:11:
23:22:bf:86:bc:33:bf:6f:68:e8:9e:84:32:b9:13:e4:f6:c9:
ea:34:a4:fe:17:fb:d7:48:74:9a:41:e0:d7:26:ff:a1:f7:88:
52:62:4a:bb:2d:e9:03:19:18:6b:52:55:3c:dc:15:e6:44:d3:
47:8a:e1:a8:e0:04:3a:92:50:0b:f9:ee:84:d9:d0:5a:4f:f6:
77:99:a0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:51:42 2025 by rpki-client