Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
File: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft (raw, json)
Hash identifier: DtHFBQn5UF6eZsCsWeP0TJKNCY5W6Tn1J7fVCJXh4Fc=
Subject key identifier: 81:1E:B8:41:EC:6B:BF:FF:EA:1D:0E:2F:82:8E:D9:8C:87:1F:00:C8
Authority key identifier: F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
Certificate issuer: /CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Certificate serial: 019A4FD0A18E8FD50B1C37109B6C1940A8B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
Manifest number: 0A1F
Signing time: Tue 04 Nov 2025 17:01:04 +0000
Manifest this update: Tue 04 Nov 2025 17:01:04 +0000
Manifest next update: Wed 05 Nov 2025 17:01:04 +0000
Files and hashes: 1: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl (hash: 949F4XkoBZfvYE6y3iPapfo7pQUPINXz61zFVj3XCb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:a1:8e:8f:d5:0b:1c:37:10:9b:6c:19:40:a8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Validity
Not Before: Nov 4 17:01:04 2025 GMT
Not After : Nov 5 17:01:04 2025 GMT
Subject: CN=811eb841ec6bbfffea1d0e2f828ed98c871f00c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:2e:1f:4e:a3:c2:ac:12:d2:16:71:5f:04:
f7:9b:03:80:e3:4e:d7:bd:bd:35:d9:48:20:7d:2c:
b4:47:48:b9:a7:21:6b:7f:56:04:1e:e4:d7:c9:6e:
75:c6:55:40:5f:34:64:be:5a:18:70:3c:f8:2e:5f:
e4:19:bd:cf:ad:68:c8:8c:71:a2:78:b2:ed:22:5f:
a7:d3:7f:0b:77:eb:0b:7a:65:9e:9a:7d:ec:a1:1b:
db:c7:c2:1b:de:28:96:a1:f4:8c:35:57:b9:79:d0:
cc:be:e4:95:13:c2:2a:32:3e:ce:08:3b:37:0b:1d:
9f:58:43:42:e9:c8:38:d1:98:77:01:41:a0:4b:52:
23:b5:e4:92:49:a9:3a:30:07:e8:de:da:13:c8:ad:
b4:0c:5d:5c:56:d7:84:fe:fa:52:74:1a:9f:9b:87:
06:ae:fb:43:c9:6e:03:e0:e7:15:83:98:36:2a:d0:
a6:f8:c6:d0:cd:29:97:64:5f:a5:1b:f7:35:15:4e:
37:2f:b5:68:a8:d9:81:da:1d:0c:e6:91:5c:1e:05:
68:37:c0:7e:54:40:92:aa:d8:0c:d7:38:42:06:c4:
9c:4c:2d:b1:45:26:af:68:89:58:13:9b:0d:95:09:
d7:91:7c:d2:2f:a2:7b:c8:6f:a8:2f:48:45:b1:f8:
08:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1E:B8:41:EC:6B:BF:FF:EA:1D:0E:2F:82:8E:D9:8C:87:1F:00:C8
X509v3 Authority Key Identifier:
keyid:F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a6:7e:ba:f8:6d:48:47:ca:6b:21:e9:c5:9f:b5:0b:ee:30:
72:10:3b:74:4a:60:10:17:45:a2:46:c4:58:be:6f:be:a2:b0:
f4:29:4e:7e:a8:3e:1a:41:62:fb:53:c3:14:ab:50:06:20:c1:
2e:fb:4c:89:e8:90:86:d4:87:e4:38:a2:2a:76:6b:1a:fa:62:
01:a0:5d:bd:bb:68:2e:33:4c:a6:6d:b6:4c:3f:9c:3c:9a:e9:
f6:22:b7:9e:ac:be:3d:f9:c1:1c:4f:aa:53:63:61:e5:50:5e:
fe:60:f9:25:d7:c5:cd:65:78:7e:a1:50:6f:c4:99:b1:10:87:
a8:01:3e:75:aa:73:be:b4:5f:4a:b7:05:75:25:1a:f3:78:f7:
9d:c7:42:f2:7a:11:ac:76:b4:c5:82:83:b0:f9:3f:0c:d5:55:
31:d5:80:a0:20:46:cd:0e:51:33:c0:c4:df:3a:5d:bd:36:d3:
55:6c:56:13:3c:bf:eb:86:8f:47:f7:57:17:2e:c6:c3:a6:0b:
42:6c:01:1d:ed:b0:f4:ef:db:f3:49:49:27:b8:a4:2f:22:ff:
d4:d5:96:0a:bb:ac:7a:b1:75:7e:37:af:39:2e:2c:bb:0a:fc:
9a:c0:89:4f:e1:d7:28:03:ae:ea:67:1e:60:1c:66:b1:5e:d0:
eb:75:cf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:54 2025 by rpki-client