Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
File: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft (raw, json)
Hash identifier: ZDzOBiS8eLn0AVxKg30UBJqRdTY7o9PdlCH3Mx3Lon8=
Subject key identifier: BC:99:A9:F8:85:57:3B:E7:CE:E3:5F:84:82:25:76:A7:76:51:DF:52
Authority key identifier: 7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
Certificate issuer: /CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Certificate serial: 019A725CA8F08410267A8046C249509270B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
Manifest number: 092A
Signing time: Tue 11 Nov 2025 10:01:06 +0000
Manifest this update: Tue 11 Nov 2025 10:01:06 +0000
Manifest next update: Wed 12 Nov 2025 10:01:06 +0000
Files and hashes: 1: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl (hash: 2r7wFsrDxpSu5CJUic63OSUAs9IiTHj7OigDZrTvmRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a8:f0:84:10:26:7a:80:46:c2:49:50:92:70:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Validity
Not Before: Nov 11 10:01:06 2025 GMT
Not After : Nov 12 10:01:06 2025 GMT
Subject: CN=bc99a9f885573be7cee35f84822576a77651df52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:94:56:b3:21:5d:e0:03:3b:3f:af:fc:d3:
3b:74:9c:ff:43:9a:de:5c:e6:24:1c:81:53:8e:65:
9b:d4:71:16:22:c5:d9:75:3d:9b:08:8f:52:4a:c1:
9e:c8:14:05:1c:66:ee:79:0d:bb:e0:46:01:a4:de:
e7:c0:6b:4a:ca:76:10:34:ce:8b:93:82:6a:81:47:
b1:e0:12:b1:58:44:e0:ca:c7:fe:4f:ba:51:87:93:
d4:d1:dd:df:4e:f1:8c:47:55:80:d3:ca:08:4e:c9:
32:cb:fd:8c:b5:be:40:47:8a:5a:54:ee:c3:bc:96:
f9:46:7a:26:c2:b8:89:8c:98:2d:f5:ab:42:1b:19:
38:8c:fd:cc:91:5a:78:cf:00:e8:9a:b3:24:14:69:
1b:5d:b0:ee:dd:43:83:7a:88:40:85:8b:07:70:ba:
d3:cb:b2:a8:e7:d1:47:6d:fc:b5:aa:cf:ee:e4:f2:
44:db:6f:61:f1:9c:1d:de:91:3d:8e:1e:29:5a:f8:
c5:64:a8:1b:24:2c:56:6a:c5:32:c3:df:3f:67:6f:
ff:8b:d5:1c:17:d8:d4:33:a9:bd:9b:29:e2:1f:91:
e6:bc:0a:59:20:ed:ae:cf:31:82:be:dd:b8:6b:de:
62:aa:65:fe:29:c2:18:d1:16:25:6d:03:a4:5d:7a:
7f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:99:A9:F8:85:57:3B:E7:CE:E3:5F:84:82:25:76:A7:76:51:DF:52
X509v3 Authority Key Identifier:
keyid:7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c4:ab:10:74:72:20:43:03:60:38:ad:81:88:af:e7:f6:c3:
b6:7d:ee:dd:ad:f4:ee:42:03:9f:8d:a9:f9:fe:10:71:6f:56:
f7:1b:ce:ca:96:78:23:04:ec:84:83:a3:3c:09:0f:5d:16:a6:
a6:c5:77:4b:1e:9e:cc:96:29:3a:3a:57:73:a3:c5:7f:1c:d5:
9b:d0:18:ec:58:92:2d:5f:f8:c0:fb:29:5e:f8:3f:6c:0e:d3:
a0:2f:2d:21:5d:40:62:ac:be:62:83:b0:2c:bc:02:ef:2d:77:
9d:45:66:d0:2a:59:4d:6c:43:f5:f3:7b:2f:2b:9a:3f:18:ad:
7e:4a:d3:f5:43:77:f3:6a:3a:a8:d1:9e:7e:4e:5d:bc:73:0e:
6b:9a:bf:73:77:a1:6c:35:83:7b:a4:f4:e2:a4:d8:21:c3:54:
1c:42:70:d8:68:40:da:0c:8c:9b:da:aa:76:ad:1a:cc:0f:57:
f5:28:0b:b8:2c:a1:dc:a6:e4:e3:dc:07:68:f1:d0:dd:de:ea:
c9:99:c9:10:12:58:8b:62:6f:57:ec:71:cc:72:09:84:63:23:
83:3d:a1:12:3f:74:d1:c8:41:3b:b4:71:c9:05:2b:3a:bc:cf:
11:02:79:84:75:73:46:67:92:b8:37:50:8d:9b:af:d6:65:7d:
85:20:0e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:56 2025 by rpki-client