Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
File: KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft (raw, json)
Hash identifier: R4fSB1xiCTBtiqDnOt3xKpyKcO03UO76zMleqpj3bDs=
Subject key identifier: C8:91:9B:4C:72:AC:07:D0:48:9E:7C:BC:9D:05:B5:59:A7:1A:62:F8
Authority key identifier: 28:FA:45:6D:1C:23:67:86:21:95:4F:FB:F4:93:A3:23:DE:2C:44:84
Certificate issuer: /CN=28fa456d1c23678621954ffbf493a323de2c4484
Certificate serial: 019A4EF4F3C9E534A80D37FE49E68017236B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
Manifest number: 0C48
Signing time: Tue 04 Nov 2025 13:01:07 +0000
Manifest this update: Tue 04 Nov 2025 13:01:07 +0000
Manifest next update: Wed 05 Nov 2025 13:01:07 +0000
Files and hashes: 1: KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl (hash: 0HqAveqBP/sucGr18PGcahWngIUSOGrrYouRTR0LY6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:f3:c9:e5:34:a8:0d:37:fe:49:e6:80:17:23:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fa456d1c23678621954ffbf493a323de2c4484
Validity
Not Before: Nov 4 13:01:07 2025 GMT
Not After : Nov 5 13:01:07 2025 GMT
Subject: CN=c8919b4c72ac07d0489e7cbc9d05b559a71a62f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:82:fd:0f:95:c1:15:8c:75:14:ab:1b:76:
48:fb:0c:d8:53:a5:ba:b8:18:1c:0d:0c:e4:30:da:
2d:20:ca:de:d0:be:75:68:c9:b7:b1:75:91:b2:e9:
10:62:34:5e:5e:f4:b1:0c:b8:a3:e3:9d:76:4c:7f:
ea:61:6f:d2:96:68:34:80:35:32:3d:12:49:52:e1:
d9:94:f5:65:4e:bf:e1:cd:b2:ad:80:35:b5:a8:5d:
79:97:ab:5c:66:b2:94:2a:86:6e:12:6f:e8:3a:af:
78:e2:86:6a:c1:76:17:0a:a9:5d:8a:f1:6b:89:fd:
ac:22:96:15:b1:f8:93:6f:b5:02:0b:28:91:5f:3c:
dd:ba:1d:43:f0:52:05:5b:b9:03:52:c2:94:7c:01:
c2:71:b7:a4:1f:2d:7b:12:d0:79:29:f4:9b:f3:17:
c9:10:9b:b1:77:5c:f4:c6:30:c5:7f:99:cc:5d:ac:
5f:46:30:fb:22:4e:e1:59:1b:ba:25:f0:bd:17:f0:
d7:e1:ce:99:64:28:09:88:f4:2f:e1:9d:67:53:dd:
e0:b4:42:bc:a7:e9:e4:ec:29:06:f8:6c:c6:cf:f9:
e5:82:9e:bb:4c:cc:90:52:31:3c:4c:e8:58:d9:ac:
55:66:d4:b9:23:d5:37:8d:17:0a:5c:3c:7e:1a:ab:
2e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:91:9B:4C:72:AC:07:D0:48:9E:7C:BC:9D:05:B5:59:A7:1A:62:F8
X509v3 Authority Key Identifier:
keyid:28:FA:45:6D:1C:23:67:86:21:95:4F:FB:F4:93:A3:23:DE:2C:44:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:05:a1:19:61:f5:26:a1:97:11:63:b9:a2:78:51:34:29:a5:
9a:52:7f:7d:58:16:b3:ba:88:1e:c5:85:3d:1b:ad:14:ed:7f:
b4:6d:96:98:4d:36:82:7b:1e:8a:29:f4:a4:56:27:cd:c5:b1:
6c:26:75:46:f2:42:06:8f:e4:fd:e2:41:f8:47:61:21:dd:fd:
04:01:c0:2b:71:63:84:80:53:20:bf:df:0d:3c:75:0f:cb:7f:
7c:0b:70:4d:f8:17:da:52:12:d1:4c:5c:1e:8d:fc:6e:df:14:
80:24:51:8f:cd:8c:e4:ad:b6:9a:77:48:6b:d1:0c:48:60:1f:
7e:c8:30:43:10:33:3d:8a:f6:33:92:cd:4e:8b:30:3c:62:38:
51:d2:a5:1a:c1:46:da:db:2a:9a:41:7d:ef:dc:69:80:fb:25:
0b:23:c4:96:82:35:27:0d:29:88:c9:75:5e:fa:2a:fe:65:b1:
51:c1:54:49:25:d3:21:cd:41:2b:92:91:79:57:1d:4e:4f:b9:
3e:9e:a3:5c:73:b3:ba:b7:68:26:3f:f9:6e:c6:4f:0b:77:9a:
dd:d2:90:2f:0a:3c:84:7a:09:0f:ae:36:54:a4:1d:b8:1e:7b:
d0:6c:81:45:e0:2e:4b:47:ce:4d:25:b0:75:bb:1d:5a:f5:1a:
d2:7f:b0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:16 2025 by rpki-client