Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
File: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft (raw, json)
Hash identifier: vr/CyPYnDFQCBuy2wbjEb1CoqzLagbzz8Lz9FvQCwk8=
Subject key identifier: DC:CF:45:55:0E:F4:3B:AA:7E:21:E4:41:43:4D:83:8B:77:2C:B5:6F
Authority key identifier: F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
Certificate issuer: /CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Certificate serial: 019A72CA6E68ABDCBC7890BC54C164B2D3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
Manifest number: 0209
Signing time: Tue 11 Nov 2025 12:01:00 +0000
Manifest this update: Tue 11 Nov 2025 12:01:00 +0000
Manifest next update: Wed 12 Nov 2025 12:01:00 +0000
Files and hashes: 1: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl (hash: 780xSa5wSfFOnaTdmJyj49f/JknUpjW0gGWnMiZXYQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:6e:68:ab:dc:bc:78:90:bc:54:c1:64:b2:d3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Validity
Not Before: Nov 11 12:01:00 2025 GMT
Not After : Nov 12 12:01:00 2025 GMT
Subject: CN=dccf45550ef43baa7e21e441434d838b772cb56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:31:cc:64:1b:c7:2c:cd:48:e5:c2:b6:2d:
c9:d2:55:3b:1f:ba:e1:5b:03:c0:70:20:9b:b0:99:
b6:d0:a8:32:15:0c:c8:f5:9c:f9:f0:9f:4a:25:f8:
b9:fc:a7:88:b0:fd:56:8b:72:dd:5a:7c:9c:e9:72:
73:6b:88:5d:c6:a2:aa:c8:73:51:ea:18:88:42:dd:
5b:0f:ef:66:2a:5a:e6:28:3e:9f:24:63:e8:cd:88:
1f:45:b4:dc:56:f8:37:8f:4f:aa:58:d1:bc:4d:dc:
c6:c6:b4:95:c2:a8:2a:24:00:f3:98:52:9e:03:69:
d5:c5:90:d6:da:ce:8c:e9:04:91:25:28:af:c9:34:
c2:e7:81:0e:58:82:84:6e:af:cb:8a:c8:31:10:31:
e9:16:b2:e2:7d:9f:f6:54:2a:fd:8a:9c:3b:d8:e8:
e8:e6:70:6d:2e:e9:6d:47:ac:cd:64:86:90:87:f3:
73:3c:57:cb:74:56:3d:43:24:b8:0c:87:ae:a4:e9:
49:c7:e8:b1:2a:7f:b2:3e:a2:0e:16:0d:48:d9:ef:
84:e6:20:d6:d1:57:ae:ef:00:07:a2:d4:44:47:30:
35:30:89:8d:c1:67:61:63:fc:c9:a5:b1:67:26:f0:
6e:8b:ad:7e:c9:a1:13:0b:99:38:bc:d1:4d:13:5b:
81:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CF:45:55:0E:F4:3B:AA:7E:21:E4:41:43:4D:83:8B:77:2C:B5:6F
X509v3 Authority Key Identifier:
keyid:F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:61:fb:1a:07:e5:77:81:b2:7e:9e:9f:44:85:a1:c2:d9:1c:
90:c9:c2:5a:ec:04:98:d0:e8:cd:1e:40:c5:7b:a9:50:79:42:
26:a5:2b:d5:b1:e5:71:fb:c6:de:51:3a:cd:4d:7a:0b:bd:20:
a0:84:1c:87:e9:e8:93:b6:71:81:01:5e:68:5f:fe:b1:7d:98:
65:af:a7:82:b8:56:48:9c:2b:d8:c0:98:dc:19:ac:6b:5b:f3:
66:3b:f5:86:2d:37:8a:3b:ec:81:54:c5:e9:03:a0:07:4c:4c:
97:39:3f:87:35:17:9b:69:2c:0a:3a:42:a5:7b:fc:cd:f8:c1:
ef:9c:58:ba:c9:1a:7d:e5:38:4f:c3:42:04:f8:f7:c6:62:47:
46:7a:c8:d3:5a:6f:4d:bd:77:35:53:10:10:00:07:78:87:07:
68:94:23:16:15:e7:95:81:06:cd:ed:5a:77:15:e1:7f:5f:0f:
5b:d0:3f:ce:b0:dd:60:a3:b1:16:97:8f:1b:cc:d4:b7:30:c4:
62:4c:1d:c1:ed:d8:1f:e7:55:e6:f7:14:6f:e8:71:80:af:04:
7c:b0:7b:dc:0c:45:2b:ad:6c:c6:0a:f8:18:f8:e2:a8:5c:8f:
c9:ac:5d:90:4d:ee:cf:1a:de:18:9c:0d:77:8f:fe:bb:b3:44:
f8:41:30:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:41:12 2025 by rpki-client