Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
File: k0UD3V9q0KYOe0A6WmQq3kYZljw.mft (raw, json)
Hash identifier: 9h6iAj2nmSdKvE9zLfNEF27CrzhCx8pT0H7j7kCcr6U=
Subject key identifier: C0:1F:35:D7:76:C3:7E:3A:A7:0F:C9:B1:C9:AA:E3:B0:CA:16:7D:B9
Authority key identifier: 93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
Certificate issuer: /CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Certificate serial: 019A7301B2A5F9355755C578680756A62B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
Manifest number: 121E
Signing time: Tue 11 Nov 2025 13:01:22 +0000
Manifest this update: Tue 11 Nov 2025 13:01:22 +0000
Manifest next update: Wed 12 Nov 2025 13:01:22 +0000
Files and hashes: 1: k0UD3V9q0KYOe0A6WmQq3kYZljw.crl (hash: T5k8q+3P0jozvGqcreZ7NoUP0HWS9ylOkp6FbvdAB0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:b2:a5:f9:35:57:55:c5:78:68:07:56:a6:2b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Validity
Not Before: Nov 11 13:01:22 2025 GMT
Not After : Nov 12 13:01:22 2025 GMT
Subject: CN=c01f35d776c37e3aa70fc9b1c9aae3b0ca167db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:b6:76:22:25:ec:5e:8f:50:6f:b1:0b:50:38:
f1:3f:2f:b9:62:50:36:bd:24:c7:c9:58:fd:ec:22:
c5:7a:7f:c1:fd:cf:3a:e2:de:00:ee:53:1d:3d:7a:
86:24:c8:08:f9:cc:bf:bd:b2:8f:bc:58:e0:97:27:
5b:b8:75:ad:b8:71:3e:a0:c9:13:d0:b5:90:31:df:
dd:97:9b:13:cd:9c:d3:52:e5:43:34:12:e8:dd:79:
f2:52:a5:90:c0:ac:13:dc:79:94:50:27:65:a7:7f:
96:19:81:6d:d2:5f:c1:b8:df:6e:13:6e:9b:63:fb:
65:1a:c9:55:52:05:06:5d:76:c3:e4:c8:7a:76:9a:
72:af:68:d7:b5:96:44:b5:9a:09:22:cb:9d:c9:ef:
db:2d:1f:cb:63:b3:1d:f5:66:a4:d5:c7:75:3b:21:
60:cb:16:42:ce:ea:f4:10:f6:8f:b4:43:87:99:f7:
56:cd:94:10:da:82:e8:24:cf:9d:d0:84:37:3d:eb:
26:11:37:15:36:84:94:10:88:6b:dd:dc:b3:cb:df:
c7:92:c5:df:27:80:59:4a:ea:10:45:94:80:9c:e9:
76:38:1e:c2:47:3e:56:ac:10:c9:63:a4:dd:d4:8f:
f1:34:f1:06:3c:fb:56:f4:c6:c9:7e:82:28:1e:9f:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1F:35:D7:76:C3:7E:3A:A7:0F:C9:B1:C9:AA:E3:B0:CA:16:7D:B9
X509v3 Authority Key Identifier:
keyid:93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:4f:fa:23:ef:d5:a5:45:83:cf:61:bf:11:de:bb:19:f3:0d:
67:4d:09:7c:53:37:9f:5e:2e:9c:58:67:a1:9d:04:72:ef:2c:
e9:ee:f6:6e:7e:05:e0:b0:54:2e:46:e9:a8:6d:89:da:f0:d0:
92:65:7e:bc:67:6c:f0:6e:e7:e3:fc:ea:1f:23:89:17:83:51:
ab:81:b7:d1:94:ab:0b:2f:86:ed:d8:2c:45:7f:be:28:b9:cb:
20:82:ee:48:72:d1:2d:5f:85:7d:74:6a:e8:7b:64:53:8d:b3:
8d:e6:f5:cc:f0:37:09:3b:26:89:10:c0:91:cd:7b:2e:d3:20:
4e:41:62:4e:0e:4e:b5:75:ea:ba:ff:b8:df:ec:77:c1:07:e9:
da:97:b1:74:dd:13:e1:06:0d:39:d2:7d:9e:51:99:b0:60:f8:
52:b5:ae:bc:73:f7:18:8c:cb:a9:ee:ee:56:2c:e8:b4:ef:d6:
d3:7b:a7:d8:4a:53:b3:dd:bf:ab:e4:04:82:62:0c:4d:b9:ae:
1a:dc:79:ff:d0:80:99:af:32:22:46:63:fb:a9:77:53:08:9f:
c6:a3:c3:17:88:12:72:ff:4c:0c:30:1b:cf:1c:ed:5f:00:24:
c1:79:4e:8b:c0:52:8f:65:90:77:9f:64:4d:33:e2:53:7c:37:
57:ce:c3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:53 2025 by rpki-client