Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
File: kFHan04DQdDI3l6sVMY6EenvW18.mft (raw, json)
Hash identifier: zjpNY720YQqGT0Yp9eb7Fc34T00jg+5FNF5qyHbh6KI=
Subject key identifier: 8E:AD:64:84:0B:09:06:E7:D4:28:15:EA:0E:44:16:2E:F2:18:FE:06
Authority key identifier: 90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
Certificate issuer: /CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Certificate serial: 0199221EBB88C08F126A5C788A3E03406A8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
Manifest number: 0D2E
Signing time: Sun 07 Sep 2025 03:01:03 +0000
Manifest this update: Sun 07 Sep 2025 03:01:03 +0000
Manifest next update: Mon 08 Sep 2025 03:01:03 +0000
Files and hashes: 1: kFHan04DQdDI3l6sVMY6EenvW18.crl (hash: qOccO/CNKXMeNJsnmr3tcN6HfY11mEAxNwSXigM/dIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:bb:88:c0:8f:12:6a:5c:78:8a:3e:03:40:6a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Validity
Not Before: Sep 7 03:01:03 2025 GMT
Not After : Sep 8 03:01:03 2025 GMT
Subject: CN=8ead64840b0906e7d42815ea0e44162ef218fe06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:c8:b9:80:76:cb:f7:6c:fb:57:7e:9c:7b:
7b:5b:ee:1c:d3:d7:5f:8e:fd:1a:25:fa:08:56:ee:
e2:62:c6:ba:42:1f:77:9b:83:14:dc:6b:65:67:19:
a6:12:be:70:97:6a:15:57:44:d4:1d:8f:06:25:eb:
70:6e:c9:c4:4c:59:bd:3b:22:28:0e:31:3a:97:69:
0c:ba:13:64:44:55:c6:af:5f:11:34:b4:b9:d8:65:
23:9c:af:c2:c6:76:00:57:43:2c:9d:df:fc:33:ee:
0f:b2:57:3e:8a:ac:b6:57:2f:c6:e2:b9:b4:5a:0b:
8e:0b:83:17:ec:4e:25:9c:11:c2:16:1f:f5:1d:e8:
5f:38:02:6a:55:0d:ca:e1:8c:3f:d0:96:d1:0d:5c:
cf:2a:e8:4a:e2:92:62:23:bf:a9:a5:02:62:02:3d:
0b:73:c3:4e:3d:0b:c1:a1:30:39:3a:e3:57:d7:db:
7d:2c:d9:17:db:5f:f1:d3:0a:11:94:e0:02:33:d0:
dc:40:2e:c2:e9:f6:48:a2:13:b6:c8:65:37:55:40:
96:5f:90:5b:84:67:35:c6:81:0d:43:77:f7:bc:2f:
d0:a8:85:5e:e5:b8:cd:c7:62:10:6e:4a:94:74:99:
a8:3c:2f:cb:5d:68:d2:96:0f:db:ae:89:40:fe:af:
a4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AD:64:84:0B:09:06:E7:D4:28:15:EA:0E:44:16:2E:F2:18:FE:06
X509v3 Authority Key Identifier:
keyid:90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e8:85:93:86:a5:6b:6b:e3:38:ee:5f:9b:a9:bd:bf:29:e3:
0f:07:77:8b:20:48:4e:cd:12:ce:a2:85:74:5e:a7:18:d5:48:
9a:9b:4e:9a:97:c3:79:0d:44:5d:49:cf:93:2e:bc:06:fd:8c:
cb:6c:9e:08:72:07:57:d4:54:5d:20:dd:11:66:8f:ae:e7:92:
32:03:6d:d2:e2:65:fc:83:1c:ab:0f:50:d5:c1:7c:58:d9:a0:
51:b1:a2:7c:db:34:bc:61:70:5e:be:52:38:32:95:5e:06:4b:
98:c8:04:12:d8:58:12:54:17:92:39:33:95:a2:08:aa:d0:b8:
07:85:b8:a9:a8:4b:b2:5d:80:d1:cd:ef:f8:d4:9e:bb:e6:5a:
21:20:1b:a6:d5:3c:2e:c1:27:98:bc:fa:18:7e:f8:68:e0:d9:
62:bd:3f:e8:31:cf:58:8a:c7:72:96:db:b3:9b:bf:5c:0f:d1:
67:cf:8d:b5:17:16:3f:15:c0:01:3a:cc:51:cc:ce:d9:08:d6:
b3:dc:74:00:2f:27:55:22:52:dc:bc:6f:fd:40:e7:69:d5:7e:
9d:9f:d8:59:e0:87:5d:9f:1e:ba:92:c0:ff:e7:51:a5:fb:17:
34:3c:c8:62:6f:9a:01:71:fa:b0:6f:92:0f:5a:77:e0:8e:a2:
81:22:04:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:57 2025 by rpki-client