Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
File: 00KrFW1a4VOtFlKOh9nIR53ApKU.mft (raw, json)
Hash identifier: xCpc4UB7CqFnYcu1Bx3VpZGgGRrTNRWr2m8dbmbCMc0=
Subject key identifier: AA:6D:55:02:BF:3A:35:A7:DA:3C:9D:1F:57:CC:5F:1B:EB:77:30:E8
Authority key identifier: D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
Certificate issuer: /CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Certificate serial: 019A1B06CCEA7522AA31A7F7119BF804714D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
Manifest number: 16F3
Signing time: Sat 25 Oct 2025 11:00:21 +0000
Manifest this update: Sat 25 Oct 2025 11:00:21 +0000
Manifest next update: Sun 26 Oct 2025 11:00:21 +0000
Files and hashes: 1: 00KrFW1a4VOtFlKOh9nIR53ApKU.crl (hash: 3vSRD2QDC6tmlhG1ztLVYM+YDfzJ3Y+d7FhZRFpFACw=)
2: YzWazfZkDmpS6lnGJouGiR4vMgw.roa (hash: g+4T1wjwDSXCQUkHT41UwModEGJm2ijdNXqnxLEPkqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:06:cc:ea:75:22:aa:31:a7:f7:11:9b:f8:04:71:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Validity
Not Before: Oct 25 11:00:21 2025 GMT
Not After : Oct 26 11:00:21 2025 GMT
Subject: CN=aa6d5502bf3a35a7da3c9d1f57cc5f1beb7730e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9a:82:bd:18:f9:b8:ae:30:af:b8:3f:92:62:
f9:9a:d9:65:0b:38:0f:fb:87:be:c0:8b:c1:dc:e5:
22:db:ef:03:a4:cb:d1:3b:86:ec:b4:d3:52:79:8f:
52:85:b0:1e:52:ae:51:91:0a:65:f5:9d:f4:92:9d:
3f:88:4d:4d:13:af:69:93:d9:c3:5a:63:4e:67:f2:
eb:ae:3e:37:0a:72:72:20:c7:ae:a5:90:ec:92:f6:
ea:77:e8:5e:04:4a:9b:1e:a5:77:48:fc:d5:09:d1:
10:7a:28:76:15:2c:49:e6:b6:09:52:18:e3:7c:8b:
06:2c:05:6b:b0:bc:ca:f3:b0:33:f3:a3:9e:1b:7f:
8f:58:cc:c4:a1:a3:95:5a:04:b9:4d:41:90:89:d0:
63:45:48:72:78:21:cc:2a:f0:b7:bf:51:52:76:af:
74:cb:1a:f2:ea:e1:69:3c:d9:fc:50:1c:0d:25:f0:
09:2f:f6:4f:62:b8:84:0f:ae:09:3f:8a:05:e8:10:
e8:a6:d2:b8:5a:1a:4d:1d:61:5a:d0:30:f1:8a:31:
db:0a:b6:22:b5:43:ab:5c:04:9a:d1:59:8b:c9:0b:
38:28:ea:2d:19:93:61:98:ec:1b:d6:9a:9c:ac:91:
97:a6:d4:da:80:be:8f:9e:99:46:39:f8:5e:0c:51:
7e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6D:55:02:BF:3A:35:A7:DA:3C:9D:1F:57:CC:5F:1B:EB:77:30:E8
X509v3 Authority Key Identifier:
keyid:D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c4:22:0f:b0:72:f4:bb:24:72:6d:04:09:36:60:81:68:8e:
d9:66:a6:32:35:1c:d9:57:cf:f4:0f:b2:10:d4:5d:d5:8c:a3:
46:de:12:d9:cb:47:9f:22:e8:6d:da:60:99:54:21:65:a7:92:
be:75:ec:1e:f5:71:78:28:77:f2:2e:09:67:56:d1:10:d3:de:
3b:a9:2c:9c:86:8b:be:81:30:8e:f9:10:31:be:52:53:6c:ee:
15:db:3a:cb:8f:bc:9c:95:f4:59:fa:65:0f:47:c2:d0:fa:73:
f8:60:39:7f:f2:55:0f:ae:1d:37:6e:6f:75:64:ed:9e:2c:c7:
96:9b:0a:94:94:e7:3d:52:f6:fc:10:20:e5:e0:15:17:7f:13:
4b:ab:92:ba:8c:8d:b3:c9:a8:88:bd:58:a3:49:85:8d:a6:e4:
b5:9a:56:88:a7:db:53:b0:07:8e:5d:e4:23:3f:0d:77:3f:b2:
0d:47:ed:f2:57:a4:5f:77:c6:09:2c:61:19:88:a6:fc:63:54:
9a:9b:5b:49:68:28:35:33:61:b6:8d:28:8f:9e:80:b1:f3:e8:
29:5a:57:77:a8:99:b5:f0:34:b4:70:e0:64:20:ff:5c:7d:e7:
56:41:fa:4b:5c:b9:48:56:c7:d2:15:d3:ec:15:bd:96:91:b7:
15:69:f7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:40:16 2025 by rpki-client