Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
File: k8QjPQuo54YYoJpyVh3M0GSYyE4.mft (raw, json)
Hash identifier: m1Ap8gSK9Dg1NPq906h9uMqJnDcnk7KqrNjMNyWWBrw=
Subject key identifier: 5A:8A:D7:45:4F:21:50:19:8F:BC:3A:75:13:F7:B5:0A:AA:42:EF:A1
Authority key identifier: 93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E
Certificate issuer: /CN=93c4233d0ba8e78618a09a72561dccd06498c84e
Certificate serial: 019A71B844DB56D4E82EB8B9E07DD2500F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:32 +0000
Manifest this update: Tue 11 Nov 2025 07:01:32 +0000
Manifest next update: Wed 12 Nov 2025 07:01:32 +0000
Files and hashes: 1: k8QjPQuo54YYoJpyVh3M0GSYyE4.crl (hash: pBN4wu8NGqKh8Q42miFjg0Dn9jSyECYv6jU1bJ4cMio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:44:db:56:d4:e8:2e:b8:b9:e0:7d:d2:50:0f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c4233d0ba8e78618a09a72561dccd06498c84e
Validity
Not Before: Nov 11 07:01:32 2025 GMT
Not After : Nov 12 07:01:32 2025 GMT
Subject: CN=5a8ad7454f2150198fbc3a7513f7b50aaa42efa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:2e:ca:e2:b8:85:7b:1f:66:e4:61:b9:ca:
56:22:9c:7e:b9:1a:54:d0:7a:97:c1:0d:58:77:e6:
d5:2f:b2:6f:3e:20:2c:ad:3f:67:fd:99:e1:2f:a2:
39:23:05:ce:31:c4:c2:67:ef:e9:72:0d:90:ed:23:
4a:f7:0f:1e:22:e8:93:41:c9:60:42:a9:23:2e:18:
ea:c4:1c:3e:c8:1d:93:ff:a0:26:60:37:7b:7f:c1:
6a:58:73:58:f1:5b:cb:a7:e7:34:a3:99:b6:99:18:
ab:e3:c6:e4:fc:7f:c7:cd:bc:e8:6c:ac:7c:bd:13:
dc:48:60:ac:08:15:37:62:ed:1c:dc:0c:45:f2:84:
45:a2:3f:a1:11:dd:40:da:b4:3a:ff:fa:7f:da:14:
5d:4e:d8:16:88:ce:98:67:21:4c:52:30:ed:7c:b5:
c2:fc:b3:80:25:7e:07:89:56:af:1d:5c:a2:64:ce:
da:1e:6f:6b:0c:1e:bf:e4:a3:a9:05:40:9e:57:a2:
e7:4c:0e:0a:03:bd:7b:74:d9:5f:ba:9c:6e:8f:cc:
26:4b:77:a4:f7:87:bc:fc:c4:51:54:2d:1a:fa:a1:
25:a2:b6:13:36:61:b6:69:66:d3:c2:f7:82:9f:a9:
7c:4b:0c:ba:af:49:4d:9c:ba:71:f1:b0:63:31:79:
12:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8A:D7:45:4F:21:50:19:8F:BC:3A:75:13:F7:B5:0A:AA:42:EF:A1
X509v3 Authority Key Identifier:
keyid:93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e6:31:12:11:6d:09:35:b7:00:de:a4:9c:19:91:47:cd:e4:
be:50:ee:8f:41:b2:5d:46:52:37:83:39:76:d4:ff:ce:4b:1d:
64:a7:08:c8:44:79:40:9a:a5:5c:c6:d9:53:bd:d9:ec:9f:3c:
8b:cb:fe:10:c3:8c:d1:24:f4:6d:52:44:85:83:d1:9f:20:14:
7a:88:a9:12:c8:f5:60:75:43:d0:12:04:b9:49:7a:25:b3:02:
e1:59:f0:75:ec:17:f8:c1:3e:71:86:aa:65:97:ca:9d:ff:cd:
f0:bc:f3:4f:5e:7f:84:ad:66:f2:16:8d:77:e0:53:9c:09:e7:
23:c1:39:3e:6b:d3:c3:27:cf:66:7d:30:c7:d9:2d:a4:98:b5:
0d:1c:05:f4:81:c0:92:54:c6:fe:bf:43:da:6a:e2:a2:3d:4b:
a2:7b:52:2f:58:6a:66:56:a1:8a:af:45:79:34:19:1a:86:de:
d4:fe:69:b5:ae:e5:5e:03:01:70:f0:fd:58:53:65:aa:3f:86:
b3:3c:b3:cc:dc:bf:d0:53:23:d1:63:35:12:65:28:ae:3c:c4:
9f:c9:da:1f:51:43:59:89:35:1b:d1:c9:d2:23:df:92:ce:05:
6c:4e:b2:2b:65:82:7d:d8:a7:cd:b6:de:20:43:e2:3c:bd:3d:
95:51:c2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:56 2025 by rpki-client