Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
File: kO4Jv_TXomLQaTBzsll1WOSAdRg.mft (raw, json)
Hash identifier: nOmB/uNB1KkKNNliI/Yvy5Ogiy49bBgbfmcMiEbxBcs=
Subject key identifier: F3:45:6C:87:2A:CD:3E:E8:9B:CA:CF:26:67:8D:75:9B:27:5B:25:07
Authority key identifier: 90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
Certificate issuer: /CN=90ee09bff4d7a262d0693073b2597558e4807518
Certificate serial: 019A7112EF0FB379DC6CA82AC4A44BC277D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
Manifest number: 16AC
Signing time: Tue 11 Nov 2025 04:00:57 +0000
Manifest this update: Tue 11 Nov 2025 04:00:57 +0000
Manifest next update: Wed 12 Nov 2025 04:00:57 +0000
Files and hashes: 1: kO4Jv_TXomLQaTBzsll1WOSAdRg.crl (hash: vV2lJaz5GNLcSvUWgoExyFjiMZk+D/7RJFWEpXHB3XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ef:0f:b3:79:dc:6c:a8:2a:c4:a4:4b:c2:77:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ee09bff4d7a262d0693073b2597558e4807518
Validity
Not Before: Nov 11 04:00:57 2025 GMT
Not After : Nov 12 04:00:57 2025 GMT
Subject: CN=f3456c872acd3ee89bcacf26678d759b275b2507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fb:8c:07:c6:24:e0:f6:7c:6e:73:62:f9:ec:
3c:10:b3:a9:6e:63:3e:f3:23:26:e8:61:ae:17:d0:
e6:f1:5e:0c:16:49:0b:67:28:6d:e5:d1:b7:d9:b9:
ea:35:8c:26:85:90:6e:de:2b:9a:7e:8a:e3:07:a6:
4d:fe:8e:c4:90:a7:7a:20:8a:fb:fc:b2:68:cc:bb:
68:ee:ae:5a:9b:00:3e:42:c7:5d:ec:5d:8e:20:fe:
20:2a:34:7a:35:5b:5b:66:43:5f:24:71:e0:c4:65:
1b:a0:24:cd:5e:9c:de:06:7d:a4:22:62:c8:ee:05:
05:1c:8d:68:b2:df:20:51:ef:85:5b:fc:7d:d4:fb:
a4:4a:f8:1b:18:a5:85:12:ae:14:af:a3:5e:f1:9e:
c2:ce:44:ac:f5:77:c3:e1:2b:a4:93:e2:84:84:78:
48:40:2e:cd:65:b2:3f:4b:a1:57:3d:e1:f8:40:6a:
88:5d:50:8e:81:22:a8:0b:b3:a8:68:47:35:12:62:
af:58:57:95:ef:fa:39:64:5b:f5:6d:1d:cd:14:ad:
9b:61:2e:45:cb:80:c9:dc:59:84:a4:ea:1c:cd:76:
38:e9:31:18:51:e8:99:45:a2:92:87:f2:93:78:d0:
12:91:07:20:05:2b:67:a7:42:14:8d:b0:46:de:5f:
b8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:45:6C:87:2A:CD:3E:E8:9B:CA:CF:26:67:8D:75:9B:27:5B:25:07
X509v3 Authority Key Identifier:
keyid:90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8b:00:65:e4:33:98:e2:de:18:42:36:d7:3c:92:ff:22:9d:
a6:c8:b2:08:c2:91:ad:be:6f:e1:6e:26:09:9c:09:f8:18:d4:
36:47:5f:db:34:e7:3c:23:80:2d:ec:f9:38:60:60:02:4b:4e:
bd:c7:68:a5:fd:1f:bd:eb:81:4d:a5:f3:c8:a6:90:fd:49:0e:
e4:4e:42:c6:fc:d5:9c:ba:4f:51:47:de:15:a8:11:fb:7c:58:
16:0b:fe:eb:e1:85:7d:a7:55:fc:c6:7c:8f:f1:4e:f4:1e:dc:
76:7b:58:cd:4d:96:5c:a8:75:c9:76:b3:87:33:2a:09:b5:11:
59:c9:f2:a9:8b:d4:45:fa:bc:01:dc:c8:23:db:6e:98:e8:fa:
85:8a:3e:83:7d:c6:cb:e5:0e:d1:87:d8:84:86:fe:28:79:9b:
22:08:2c:c4:22:3d:72:2e:e5:91:3d:99:05:cd:44:f5:be:c8:
97:42:c2:01:90:d0:26:b5:08:3e:3f:d6:26:ad:73:9c:21:d7:
08:47:34:76:fe:f3:0f:d7:7d:67:5f:6b:15:b2:61:3a:40:4f:
0d:29:65:69:b3:d9:3d:8f:69:be:3a:0b:56:5d:4d:02:f6:8b:
2f:0c:63:ac:2e:8c:92:3b:e0:91:be:84:31:e6:1d:31:14:e4:
fd:5f:dd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:07 2025 by rpki-client