Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
File: MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft (raw, json)
Hash identifier: 3t325iuSk52uvNkPmz6itxfuH+XRZLBegy0A9xBXChg=
Subject key identifier: CB:ED:7F:96:FF:43:66:94:62:DB:8A:17:41:5A:CD:E3:D6:66:9B:2C
Authority key identifier: 33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97
Certificate issuer: /CN=33229bd682fe0a3410698bdd4c262dc99cc02797
Certificate serial: 019A72262D5D02202187C06EEA573892D5D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
Manifest number: 0A7B
Signing time: Tue 11 Nov 2025 09:01:35 +0000
Manifest this update: Tue 11 Nov 2025 09:01:35 +0000
Manifest next update: Wed 12 Nov 2025 09:01:35 +0000
Files and hashes: 1: MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl (hash: KAmmfw0j203rje/qucyS2o9OV8OuX9Gg9oXWJ5zsfYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:2d:5d:02:20:21:87:c0:6e:ea:57:38:92:d5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33229bd682fe0a3410698bdd4c262dc99cc02797
Validity
Not Before: Nov 11 09:01:35 2025 GMT
Not After : Nov 12 09:01:35 2025 GMT
Subject: CN=cbed7f96ff43669462db8a17415acde3d6669b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b3:a9:ce:56:37:45:8c:ec:f8:fb:db:7f:5a:
eb:7e:1b:2b:f1:71:5d:90:d7:07:34:48:fe:01:d2:
0f:39:83:32:61:06:1a:8c:6f:01:4a:64:73:12:37:
a3:cb:30:d7:58:34:50:69:e8:bc:b5:7a:b9:5d:2d:
86:55:d2:fd:80:cd:81:7b:0f:c9:e7:b6:16:df:76:
7d:cd:aa:35:07:ad:73:86:7b:a6:64:b1:cf:17:1a:
cd:59:19:a1:b4:1b:ed:ba:06:a3:64:e6:1f:95:b3:
25:f3:5e:df:d8:5b:3e:1b:26:39:f8:dc:fc:f1:a7:
02:d1:41:dd:92:3d:c6:c3:25:1e:a4:ab:a1:65:f9:
31:e4:d1:9f:16:64:8a:b0:f6:00:f6:e1:fb:a2:d6:
42:10:dd:33:09:57:81:bf:92:d6:88:81:38:a8:2f:
28:25:98:91:00:19:3c:bd:9b:75:92:da:d8:ce:8b:
a3:b9:3b:28:39:48:c4:01:25:0f:93:b0:2f:0c:6a:
ba:0d:21:f3:58:15:13:3f:29:61:36:6c:b7:88:2f:
15:93:d5:31:d2:89:4c:bb:d1:09:02:96:7f:09:cb:
8c:96:14:42:41:b5:61:dd:0b:c6:53:3d:46:ee:c3:
ac:f3:22:aa:05:bc:d1:2f:7a:6c:5c:0a:3d:50:e9:
fe:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:ED:7F:96:FF:43:66:94:62:DB:8A:17:41:5A:CD:E3:D6:66:9B:2C
X509v3 Authority Key Identifier:
keyid:33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:30:78:9b:57:9c:c5:a5:73:d0:85:34:5d:37:7a:5c:0e:81:
40:a7:5b:aa:e6:3f:1b:9e:47:7b:51:17:43:17:6e:35:52:27:
41:fb:54:7b:e9:f2:76:df:84:9f:42:54:26:dc:39:6e:89:fc:
fd:3f:7e:70:44:c8:0b:fc:8c:ef:8b:2a:1f:9f:c0:8d:d4:ea:
e5:b0:8a:ef:96:11:17:5e:c7:c6:e5:57:c4:f9:42:be:c4:24:
e7:8e:8f:35:c1:43:65:85:9b:b5:d4:b3:c2:d6:2c:b7:57:ab:
5b:9d:c4:73:89:62:71:77:7f:bb:a2:17:cd:ba:8a:81:82:93:
52:33:92:63:bf:d0:12:e0:14:7b:30:f4:fe:4f:51:c3:36:47:
47:6d:77:e9:87:e5:1b:40:b3:11:07:72:75:da:58:9d:09:5d:
94:f1:dc:80:c2:e5:5b:40:da:3b:c7:6b:65:a4:fe:8a:0f:a2:
3e:c9:63:bc:b4:95:6a:2d:e6:75:c8:9d:7c:95:54:eb:79:f2:
cc:8c:13:2c:ff:47:96:e1:fa:9b:c9:35:ad:52:01:e7:23:d8:
e4:aa:dd:d0:88:9b:31:5f:73:a1:51:e5:24:e4:e5:66:bc:a7:
ec:4f:b9:29:13:2b:d6:32:39:60:29:09:ca:45:77:62:b9:2b:
f7:b1:d1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:35 2025 by rpki-client