Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
File: 1-kak8RQ6vjrfxLaDX6E0498srDQ.mft (raw, json)
Hash identifier: 4OlBSxOWakKt7gDUArlsoPDlQQ01Tcf8eo/lKm6DmZc=
Subject key identifier: DE:E7:F5:CA:BF:EB:8B:9C:EC:9F:02:23:30:5D:83:BF:3C:32:25:D6
Authority key identifier: FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
Certificate issuer: /CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Certificate serial: 019A4F98C5FE07FC4AD8DCFA620AB5C2EDBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 16:00:03 +0000
Manifest this update: Tue 04 Nov 2025 16:00:03 +0000
Manifest next update: Wed 05 Nov 2025 16:00:03 +0000
Files and hashes: 1: 1-kak8RQ6vjrfxLaDX6E0498srDQ.crl (hash: Xfw+v+Nz/tnY5b/7Us3eUjFpYtQc51CSMao9J3YkxG8=)
2: 3uEhAk6Wx4KcEg0MVVsAAyyADBw.roa (hash: FqSkeFfRf148LCqtNv59QOP75egaClJCY4HAjWTWGX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:c5:fe:07:fc:4a:d8:dc:fa:62:0a:b5:c2:ed:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Validity
Not Before: Nov 4 16:00:03 2025 GMT
Not After : Nov 5 16:00:03 2025 GMT
Subject: CN=dee7f5cabfeb8b9cec9f0223305d83bf3c3225d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4e:76:c2:b5:b2:6c:97:18:6e:3b:98:d9:35:
a7:30:f2:58:36:30:7b:10:a9:e6:b9:b5:e4:56:71:
7c:dc:5e:7f:81:6e:b8:13:20:8c:57:9e:49:69:d5:
3d:b2:dd:2a:df:17:27:18:94:33:c3:8a:1f:c0:c6:
83:97:0a:e9:5c:d6:d3:d9:a1:a0:fc:13:a5:69:dc:
ba:9c:ca:3b:30:fe:0d:36:fc:c9:4a:84:df:1a:8a:
4f:85:ca:9d:e7:b2:9f:93:9d:10:8e:71:83:47:76:
01:cc:d4:1a:cf:2e:71:d0:d3:42:ab:8c:1c:b5:39:
fa:56:45:68:07:b6:2d:c4:e6:87:5f:f7:db:20:19:
e8:05:24:62:ab:dd:be:9d:64:4d:28:29:f7:ab:b2:
b2:07:df:1c:c5:d3:1f:46:18:a0:7e:a7:60:90:ac:
1b:24:37:a7:db:40:92:bf:49:83:a6:00:28:0b:4f:
c0:71:11:e0:49:4f:15:e2:69:b6:f5:38:8a:91:9d:
9e:f5:63:d3:a6:31:95:ba:59:64:e9:c7:77:02:12:
63:b5:b7:56:24:13:23:88:d2:c3:31:7c:c4:a9:48:
a2:18:8a:d7:d9:58:ec:17:95:8b:26:15:86:5c:f2:
78:96:0a:be:61:35:99:d9:89:da:ee:36:5b:b2:d0:
46:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E7:F5:CA:BF:EB:8B:9C:EC:9F:02:23:30:5D:83:BF:3C:32:25:D6
X509v3 Authority Key Identifier:
keyid:FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:63:1b:d7:e9:75:62:1b:4b:10:ca:d5:78:8d:26:f9:f6:86:
32:1e:aa:3f:1a:41:60:15:30:05:36:85:70:f8:af:c3:83:10:
1c:d5:30:b6:eb:a2:af:e1:dd:59:6c:af:ad:16:4f:a4:d2:11:
c8:67:1d:90:c6:60:4a:db:80:7b:1e:17:e0:3c:b4:1f:89:47:
9f:12:0f:8b:7e:5a:f1:df:0a:e5:11:5e:e2:3a:4d:1a:07:22:
7d:16:13:39:83:44:f3:fa:b9:d9:a4:04:8c:c4:47:d8:30:08:
ac:7d:d2:37:db:a1:0c:0f:8e:07:7c:95:e0:8e:d3:b3:ef:88:
24:5e:d7:5d:df:57:0f:7a:4b:18:fd:0a:25:ac:58:7d:1e:d2:
de:4d:ea:5b:e6:33:99:d6:97:88:5d:a1:3f:7a:29:7f:c2:6a:
0d:78:2f:3c:e4:55:33:24:c5:37:cc:89:6b:b2:c2:4d:ca:6e:
48:e7:72:af:40:bf:09:12:ec:6b:c5:f0:28:7b:b9:3b:63:f1:
9a:39:bb:de:29:6d:b5:87:1d:93:54:0d:11:41:f2:9c:79:35:
47:65:9d:1b:cc:0d:50:36:51:24:67:db:34:d1:0e:5e:40:61:
35:1e:4d:ba:a9:40:27:5c:ce:e6:e9:68:c4:57:d6:3d:55:71:
0b:13:c6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:08:25 2025 by rpki-client