Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
File: kFHan04DQdDI3l6sVMY6EenvW18.mft (raw, json)
Hash identifier: 52N/ONszltQXadnpJPsUdXNQ1uqEnZuw5AxiVwEhRdU=
Subject key identifier: 06:06:A7:01:A9:BA:67:3D:3A:4D:8F:64:24:7F:43:0A:0B:B7:A8:52
Authority key identifier: 90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
Certificate issuer: /CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Certificate serial: 019A722638646DDE23EB35C1CF4F1C40AD14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
Manifest number: 0DDC
Signing time: Tue 11 Nov 2025 09:01:38 +0000
Manifest this update: Tue 11 Nov 2025 09:01:38 +0000
Manifest next update: Wed 12 Nov 2025 09:01:38 +0000
Files and hashes: 1: kFHan04DQdDI3l6sVMY6EenvW18.crl (hash: 7aXWjiiq0NKW6F7vD/3Zm+91TEmUeMPJCIgCXcBEXlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:38:64:6d:de:23:eb:35:c1:cf:4f:1c:40:ad:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Validity
Not Before: Nov 11 09:01:38 2025 GMT
Not After : Nov 12 09:01:38 2025 GMT
Subject: CN=0606a701a9ba673d3a4d8f64247f430a0bb7a852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:f3:3b:33:c2:48:ca:46:fa:90:62:f1:dd:
1b:aa:13:b2:21:82:fe:d2:cb:65:b7:9c:61:22:e0:
ba:66:16:a5:e9:7b:97:16:e1:a5:88:cd:5e:73:50:
96:8e:21:01:d0:78:ca:d3:88:5c:87:ef:a1:2a:12:
c2:0f:8c:c1:6f:f7:41:0f:f0:7d:d5:45:28:92:c8:
39:35:6c:ce:d9:4b:9c:0d:3c:16:c3:d3:8f:f2:d4:
1b:56:33:84:e9:84:15:cf:95:d9:3e:7e:43:06:25:
e6:1b:17:cf:1d:20:29:2e:8e:f7:52:36:7b:fd:e2:
13:8f:87:3f:3f:14:b6:06:4b:67:f1:bc:8e:4e:d8:
c6:66:b6:cc:ff:ce:cb:40:7d:cd:31:8d:4a:8e:0f:
8f:56:3c:0d:5b:f5:92:3b:84:59:1a:9c:e4:52:9d:
e5:a2:da:30:f5:04:0f:e7:01:72:12:7b:3c:ea:fc:
5c:d9:00:65:1b:c3:ed:aa:82:9e:25:7c:09:b7:67:
6f:99:4c:25:32:c7:ff:93:41:d1:14:4f:00:13:e6:
74:db:0a:6b:44:dc:a2:24:88:45:ef:d6:3f:76:43:
8f:fc:d2:02:2e:6a:75:f6:9b:88:c4:79:90:40:61:
ed:09:e9:f3:ce:5a:ee:8c:47:47:80:96:a9:f8:5e:
cb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:06:A7:01:A9:BA:67:3D:3A:4D:8F:64:24:7F:43:0A:0B:B7:A8:52
X509v3 Authority Key Identifier:
keyid:90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ba:10:a9:df:c6:15:24:53:20:1a:ec:e4:4a:bd:3c:6f:a2:
1b:27:50:da:f0:43:35:cc:2a:c2:de:74:b1:3e:d0:07:a8:6d:
05:ea:17:31:87:fa:be:da:a5:a5:6e:dc:fd:58:53:28:bb:01:
8f:ca:34:a1:e9:78:21:11:b2:4f:d2:0c:51:b5:99:14:1b:e0:
ab:e1:d5:7d:bc:13:fb:ad:0e:29:9c:46:81:6d:ec:60:19:01:
b3:aa:7e:18:fb:4c:73:1c:ef:9c:3c:e7:db:2f:95:2c:8c:9e:
2e:53:70:47:ea:5f:17:44:c0:14:9f:16:5f:70:0a:63:f1:0f:
eb:9a:4c:dd:00:a9:5d:bb:b4:d0:e5:81:af:d9:ff:1b:68:c3:
7d:31:52:39:70:d4:6b:d1:2e:8c:08:de:a9:2b:1c:72:5e:c5:
20:0a:1b:48:93:77:a5:3e:f2:37:24:98:ff:bf:44:5b:93:c8:
76:a6:38:3b:d3:45:ed:7b:2d:b0:47:f4:51:46:0d:3b:48:51:
0d:72:81:e3:bc:59:64:a1:89:9b:15:ae:e0:46:6c:83:bc:7b:
d7:2b:3b:cb:d2:be:62:5a:ec:0b:01:9c:f0:d0:26:f3:71:28:
e5:06:75:06:fd:c1:d1:77:ff:73:42:be:75:e1:a4:b6:16:06:
64:2b:1c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:13 2025 by rpki-client