Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
File: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft (raw, json)
Hash identifier: wTsjnXjDG4lmQu/YLglasi+4e1MyZSLzE9MiCQN5T0M=
Subject key identifier: D8:01:F1:30:F9:20:02:7F:77:20:96:7E:D8:CE:BB:6D:A7:0C:FC:7E
Authority key identifier: FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
Certificate issuer: /CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Certificate serial: 0199FDD97EDFDBDE44EE2AFE9AECBFE06F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
Manifest number: 026C
Signing time: Sun 19 Oct 2025 19:01:53 +0000
Manifest this update: Sun 19 Oct 2025 19:01:53 +0000
Manifest next update: Mon 20 Oct 2025 19:01:53 +0000
Files and hashes: 1: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl (hash: yFWupizMqgaGovs5vEX5LdefuaEGev70vl2wFVDjryg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:7e:df:db:de:44:ee:2a:fe:9a:ec:bf:e0:6f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Validity
Not Before: Oct 19 19:01:53 2025 GMT
Not After : Oct 20 19:01:53 2025 GMT
Subject: CN=d801f130f920027f7720967ed8cebb6da70cfc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:86:ed:5d:53:dd:37:be:10:d9:5f:9c:03:e1:
24:bb:8f:7b:37:c8:68:4d:a9:fd:0c:73:07:dc:a3:
d3:93:bb:da:c0:3e:19:71:7b:0c:6e:4b:04:9a:18:
49:e6:48:6b:30:a3:61:33:3c:a0:dc:c5:26:37:2f:
28:79:83:32:5b:d3:15:fa:a4:ed:48:da:a2:11:5d:
78:c6:3a:22:db:59:4e:ba:21:f1:fd:b4:b5:d9:73:
c0:60:39:02:e7:75:9e:fb:bf:b3:17:dc:2a:85:f9:
bf:b9:40:e3:f0:9f:a0:b7:da:cf:87:d0:46:f9:4a:
d2:08:ab:15:4e:90:ee:3e:56:5c:97:72:96:e3:dd:
97:c6:07:f8:5c:e7:e6:40:a4:f1:a9:11:79:d1:df:
8f:99:96:98:de:24:0f:ad:17:c9:8f:13:b3:49:59:
18:52:8f:15:b4:1e:fb:43:86:2c:6a:1e:cf:ec:8d:
d9:a3:9a:2e:82:8b:68:c5:7c:7b:4a:f8:17:59:b7:
62:34:40:b8:20:44:ba:05:f0:0d:b8:0c:ca:fb:f4:
41:fd:34:78:32:26:8e:ae:d3:91:ef:d7:1a:ce:ad:
2c:bf:2b:42:fa:56:f7:f2:57:f7:45:27:a2:0a:0f:
0b:25:30:02:e5:c2:12:f9:ae:37:80:3f:fe:b1:fb:
90:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:01:F1:30:F9:20:02:7F:77:20:96:7E:D8:CE:BB:6D:A7:0C:FC:7E
X509v3 Authority Key Identifier:
keyid:FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:67:bc:c0:e4:4a:56:24:4f:ab:b7:79:9c:b0:0b:98:89:1c:
73:a5:1a:3b:6c:0d:ab:ee:45:02:27:e3:1c:42:b4:34:fa:6f:
ac:30:a1:75:3f:46:41:15:ff:81:de:94:74:9f:dd:83:58:82:
00:56:6a:e1:40:f7:15:7c:5f:fe:01:57:4f:cf:a3:ec:cc:eb:
ae:5d:b6:09:23:7e:63:ad:ae:90:2c:24:60:03:dd:4d:69:43:
c8:c1:de:24:8e:52:74:7a:dd:23:18:6c:09:94:d6:f1:17:c0:
1e:15:5e:91:02:49:41:f4:02:ff:01:31:6f:ff:e2:2c:67:46:
2d:c7:6c:a0:52:a8:3c:33:23:3d:bb:cd:0f:09:38:82:1e:87:
01:77:27:83:06:ea:05:54:c4:89:00:d8:16:39:73:23:27:01:
7c:6b:e3:78:4d:54:53:74:68:f0:1c:fe:0f:af:ac:af:1b:a8:
5f:1e:b0:0b:bd:61:bb:ba:ce:33:64:45:1c:49:b9:dc:7c:e0:
f7:01:17:4d:05:80:21:58:90:dc:46:53:a7:dc:33:82:de:86:
d5:b0:c1:1b:b0:08:fe:42:65:6c:f9:8b:ea:7a:69:a5:44:ed:
28:9e:d8:23:f6:7e:5c:2d:ce:d1:15:0d:96:0c:2c:dd:b8:53:
9b:53:81:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:34 2025 by rpki-client