Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
File: KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft (raw, json)
Hash identifier: DROhiQ0D/Cf7EzbU0RAUffLFyjQMN/j4vfe76hATAZg=
Subject key identifier: FF:1E:7D:8A:CC:9E:79:5D:40:3D:3E:C6:08:1D:65:D0:59:64:20:FC
Authority key identifier: 29:47:98:77:68:64:7E:EB:8A:0F:38:60:C4:41:76:24:7C:E6:FC:59
Certificate issuer: /CN=2947987768647eeb8a0f3860c44176247ce6fc59
Certificate serial: 019A71134B0518E2920F98C63615A3D93249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
Manifest number: 0F36
Signing time: Tue 11 Nov 2025 04:01:21 +0000
Manifest this update: Tue 11 Nov 2025 04:01:21 +0000
Manifest next update: Wed 12 Nov 2025 04:01:21 +0000
Files and hashes: 1: KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl (hash: j3S1jjsgnRLWt4H7fFf034Wpey2Rxmso8UMHapJ9lX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:4b:05:18:e2:92:0f:98:c6:36:15:a3:d9:32:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2947987768647eeb8a0f3860c44176247ce6fc59
Validity
Not Before: Nov 11 04:01:21 2025 GMT
Not After : Nov 12 04:01:21 2025 GMT
Subject: CN=ff1e7d8acc9e795d403d3ec6081d65d0596420fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1b:84:ea:4e:6d:f2:5c:52:5b:a3:7d:81:45:
56:c9:c4:74:3a:8e:1e:d8:94:cf:c9:2e:9f:07:41:
8a:68:98:52:2f:0d:b9:53:5f:88:73:ad:7b:98:2e:
d9:66:96:3f:68:09:ba:92:1a:04:a9:f1:e7:68:79:
54:dd:c5:18:40:57:13:4f:ef:0e:dd:0c:e6:09:43:
55:ea:55:69:32:ba:ec:be:19:ed:8f:ed:cb:02:79:
09:22:06:5f:01:b5:71:ed:a1:52:a7:da:20:f9:77:
a2:b0:de:77:be:fe:29:16:d7:1e:54:a9:02:97:85:
8b:5e:59:ad:e5:39:b3:bd:3c:c9:d5:97:db:5f:71:
6f:a5:dd:0b:e3:c7:17:5b:04:2c:45:76:7a:13:d1:
61:00:b7:93:b3:f0:6e:af:1e:ce:bf:48:02:11:2e:
73:ef:6c:fd:31:33:5b:71:61:2c:a4:17:86:dc:f3:
66:fd:42:19:41:a8:20:0f:85:80:42:46:50:d7:f5:
ab:c6:29:94:d0:fa:5c:5e:ce:b5:f7:ce:00:4f:c7:
7f:5e:e8:ca:6f:2e:47:b6:8a:3a:8d:42:13:fa:cf:
08:04:d8:80:e9:ad:d0:64:2c:ac:5f:b8:2d:f9:27:
80:37:f8:8e:a5:25:1b:79:c1:97:59:72:14:26:a8:
e3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1E:7D:8A:CC:9E:79:5D:40:3D:3E:C6:08:1D:65:D0:59:64:20:FC
X509v3 Authority Key Identifier:
keyid:29:47:98:77:68:64:7E:EB:8A:0F:38:60:C4:41:76:24:7C:E6:FC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f6:a2:4b:84:ad:e4:7e:95:a7:82:1d:02:a1:69:a6:e8:4d:
e6:b1:f3:3f:60:a5:85:a0:9a:d7:18:87:c9:d2:2a:61:48:9b:
77:a9:09:b5:89:05:47:c9:fa:c5:67:0c:69:64:cb:5e:67:4d:
0b:ef:20:b2:03:88:c1:22:b6:fa:a3:b8:ab:a5:9c:85:66:36:
29:42:27:18:2c:c8:c8:86:02:62:a9:2c:fb:c7:00:4a:0e:ed:
d7:d8:d4:d7:45:bb:82:2e:83:f6:e9:cd:2c:f9:33:4f:d1:99:
97:0e:1f:e4:1e:25:1f:08:18:0e:89:41:a5:43:02:a3:c5:b4:
d8:9c:86:18:95:9b:cb:61:d0:4f:cf:ce:85:cc:a5:d5:fc:4e:
d2:d4:ea:6d:1c:86:0e:40:7c:10:81:74:96:2c:92:cb:a3:99:
2a:80:4e:c9:c5:6d:0d:f0:51:e3:8b:2c:a9:6d:d6:ed:2a:6d:
10:d7:fe:f3:0f:35:28:74:8c:f1:12:ee:7b:4b:72:be:5d:16:
b1:27:52:19:0c:36:ac:16:d7:90:9f:a9:28:40:e8:33:53:db:
73:92:2d:b1:41:db:a5:8d:26:65:f3:6d:5f:d1:d7:09:77:e5:
7f:51:cc:bd:a0:80:c0:39:fa:2f:8a:d1:a4:79:26:96:16:97:
67:ec:df:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:43 2025 by rpki-client