Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
File: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft (raw, json)
Hash identifier: SDC7ukSiH293d7bO6ZtefKAmesnnCn+6oSpDEJhyKfo=
Subject key identifier: AB:26:EA:8B:26:92:B2:64:22:A5:52:A9:0A:73:82:50:76:60:32:32
Authority key identifier: AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
Certificate issuer: /CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Certificate serial: 019A12A8B8576430B0E81F1FF1458BB06866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
Manifest number: 05B5
Signing time: Thu 23 Oct 2025 20:00:38 +0000
Manifest this update: Thu 23 Oct 2025 20:00:38 +0000
Manifest next update: Fri 24 Oct 2025 20:00:38 +0000
Files and hashes: 1: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl (hash: q5GTK3BN1zADjWjkpmFOECl1eP98ZT/KhHVTsg25gM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:12:a8:b8:57:64:30:b0:e8:1f:1f:f1:45:8b:b0:68:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Validity
Not Before: Oct 23 20:00:38 2025 GMT
Not After : Oct 24 20:00:38 2025 GMT
Subject: CN=ab26ea8b2692b26422a552a90a73825076603232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b2:d8:9a:fb:02:a8:ab:a0:b7:1e:bf:b1:6b:
c6:86:3c:ec:33:b6:2d:c5:be:a4:51:46:0a:40:01:
74:c2:a8:ce:e2:de:95:9b:32:81:9c:f9:90:f6:28:
02:07:55:84:b0:54:51:49:34:75:e3:27:fa:77:00:
34:ab:fe:e2:0f:1c:e9:8a:9a:53:d6:f1:54:77:73:
de:be:e3:bb:ec:d4:cf:5a:0b:ae:f8:50:b1:b0:43:
78:53:2e:5a:cb:9c:56:02:38:df:86:c5:87:38:31:
07:ed:3b:f2:33:15:82:9f:ff:7b:36:48:76:3e:ff:
8d:d7:43:d4:0d:1b:c1:46:48:89:12:9e:4b:3f:4d:
a2:ac:5d:ca:34:11:dc:e9:14:a1:4f:29:ac:75:c3:
7c:96:6a:8f:71:32:69:66:c3:9a:d9:52:b6:5f:9b:
46:43:83:87:da:c8:ba:ff:52:3f:83:76:30:a1:10:
29:97:d1:f8:ab:ef:ba:2a:64:3f:4a:62:8c:76:56:
a0:69:23:95:67:7b:fa:1a:36:93:8b:18:84:06:70:
49:01:a4:54:d9:c1:68:e2:65:f7:24:36:1b:46:ff:
96:0d:a5:bd:19:14:07:cc:74:ad:3a:52:dc:40:c0:
21:1e:16:eb:6a:00:93:3a:ab:86:7d:1c:8d:b4:e1:
29:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:26:EA:8B:26:92:B2:64:22:A5:52:A9:0A:73:82:50:76:60:32:32
X509v3 Authority Key Identifier:
keyid:AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:43:c3:37:61:31:9d:1d:9c:c3:f1:68:3a:ec:b8:1b:cf:91:
77:19:0d:d1:8b:25:9c:18:b3:6f:a5:41:f4:cf:ea:c3:4b:c5:
2b:e0:0a:59:7c:3d:70:3b:09:85:ec:fb:ca:7c:76:e4:3e:74:
6c:8b:73:20:98:f4:9a:ad:46:9a:3d:eb:c8:92:16:0c:a5:54:
f7:b5:fe:71:27:ae:93:27:04:4e:71:d3:1e:e8:73:15:e2:41:
31:00:9e:fc:f4:f0:9e:11:7d:d1:0e:9f:58:76:79:fd:e1:2d:
37:33:1e:79:cc:3c:cc:dc:76:ba:23:d4:a0:27:3d:02:04:db:
0f:b6:4c:d8:6f:91:00:a5:a2:c5:d0:73:2d:ad:22:60:ed:fe:
9f:4c:4e:7c:4d:7c:ed:98:b7:4b:20:fa:bf:d3:a6:ea:61:08:
0c:69:81:97:65:2a:c7:0e:e5:77:22:79:0f:4e:33:b7:47:f1:
c4:1c:79:8e:c9:54:0a:a5:da:2d:22:60:eb:65:3d:38:c8:f8:
b9:2b:3e:c5:9c:05:91:2c:45:bc:cb:8e:e6:73:00:aa:2e:a4:
8b:4c:37:5a:d2:e7:22:ea:31:1b:78:a5:eb:8f:06:5f:dd:93:
5b:9d:e1:da:d8:6b:30:36:e5:fd:1f:86:32:18:7f:95:41:89:
c4:07:34:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 02:19:33 2025 by rpki-client