Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json)
Hash identifier: F4B25o8J+NTZ/L8wPeipFXdFY9EH1aj2qdJtg80OifM=
Subject key identifier: 6C:99:F5:BD:E7:18:E8:DD:3C:5C:E4:D7:F7:B2:8E:CA:42:F0:94:FF
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 019A25C1AA00136BDB93B78D71E09B885D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
Manifest number: 1051
Signing time: Mon 27 Oct 2025 13:00:40 +0000
Manifest this update: Mon 27 Oct 2025 13:00:40 +0000
Manifest next update: Tue 28 Oct 2025 13:00:40 +0000
Files and hashes: 1: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: ZcffmBe1BcYdkOsuvVZYpszEKILjOv88mGwjCY4vVkE=)
2: KFGuuWvhGKXdRFWCPjT6bIvxr90.roa (hash: 5mNeMpLOgDP2WV53iNWD9JlTcJDz19nCtSLYypdRdgA=)
3: NLn-NADuc0yAyX0f_4G1dKCqIP8.roa (hash: dkLXs7qu9ok1KeNheDJk9SO+sT7GSZT5TJ1FucBWHfg=)
4: nbL7-TNKQqJ1-yJVoHEn9a5u6DU.roa (hash: tfXwKToKmsCep/7a6KKpGiz+Hfu7rsnL13FXZOQiKEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:aa:00:13:6b:db:93:b7:8d:71:e0:9b:88:5d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Oct 27 13:00:40 2025 GMT
Not After : Oct 28 13:00:40 2025 GMT
Subject: CN=6c99f5bde718e8dd3c5ce4d7f7b28eca42f094ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d3:e1:cd:4c:56:e6:23:06:3a:53:c3:b2:7a:
5c:61:cf:b5:ea:50:be:0d:99:da:81:3d:0e:8f:d6:
62:ac:72:61:3d:dd:a5:bc:ce:a8:85:11:fa:8e:65:
b0:3c:c4:f9:6b:15:7b:a9:8e:b0:33:67:35:fb:64:
08:25:55:ba:68:c2:39:d2:8d:fa:86:28:3f:7d:95:
0c:c8:a9:4c:86:ae:8a:45:d6:1a:c9:03:57:90:db:
5b:c6:d5:86:a1:eb:9d:99:48:8a:41:95:83:87:1a:
59:56:d0:e9:f3:35:ba:27:7f:4a:2f:7f:30:52:8f:
78:30:d5:ba:76:af:b9:41:af:c0:03:cd:fe:8a:79:
9f:62:4f:6f:c3:bf:81:27:97:59:78:cf:d1:53:66:
ce:3a:b0:a2:b2:cf:7b:2b:a8:55:06:df:88:ff:ad:
4d:b0:55:ef:f8:48:d3:f5:17:62:54:db:87:d5:c6:
b3:22:95:dd:84:fd:94:04:3b:78:ae:6b:30:5a:65:
be:60:dd:7f:cc:22:71:97:50:43:44:07:ae:ed:b1:
50:30:c0:e5:fd:3f:b7:07:96:69:28:0e:a9:5e:08:
16:fe:ff:89:ee:ad:c8:8c:ae:68:b1:1e:bd:33:64:
e2:c2:54:37:26:c1:33:2d:57:09:17:ce:59:e5:25:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:99:F5:BD:E7:18:E8:DD:3C:5C:E4:D7:F7:B2:8E:CA:42:F0:94:FF
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:5f:43:c7:c9:a6:02:cd:55:bd:60:79:3b:dd:2b:5f:aa:af:
b4:56:ee:f5:38:60:67:aa:7c:80:d7:fe:43:e5:ab:37:de:a1:
71:6a:1e:5f:73:44:05:c1:42:f3:71:d7:7d:7a:44:80:5c:fb:
5e:26:af:a3:04:7d:7e:a3:9b:77:fa:36:4d:40:c3:8c:a9:6b:
d9:44:f4:92:22:f9:8b:71:fe:84:00:6f:aa:06:8f:92:4a:d5:
a2:55:85:df:4a:9e:9b:e4:bd:6e:4d:70:c4:e3:a3:c9:ee:c7:
89:f2:03:e0:9f:7a:1a:da:da:26:c1:eb:1c:ee:0f:7f:92:98:
e3:c0:5d:83:36:fc:05:06:ac:dc:e6:85:36:c4:ce:98:fd:a7:
fb:b0:70:7c:87:1d:59:52:00:13:c0:ec:01:24:a5:88:37:69:
86:8c:a9:ef:6e:60:34:0a:4b:f7:0f:6b:41:54:81:bb:de:78:
c7:b1:26:0a:9d:84:fe:9d:17:d1:7e:9c:c3:5d:a1:a7:86:30:
09:9b:47:d9:6f:b7:63:54:53:82:b2:a7:d3:a2:8f:b6:8e:da:
d8:96:dd:d0:b6:be:62:33:f0:71:d3:7a:7f:a6:7d:3c:a5:20:
a0:e1:f5:ad:c4:83:1c:3f:44:e7:ba:7b:34:51:ea:9c:8a:51:
7e:48:37:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:08:57 2025 by rpki-client