Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
File: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft (raw, json)
Hash identifier: uamh74oz2HtPJI9XsX7ebHx/XQ3QuNwr81Cu3Y56Kvk=
Subject key identifier: C8:7C:95:D5:0C:60:37:9E:90:E9:75:49:A0:DD:4C:ED:C6:DB:9C:2B
Authority key identifier: FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
Certificate issuer: /CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Certificate serial: 0198D660AC74A848243305093D57CA253FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
Manifest number: 01D3
Signing time: Sat 23 Aug 2025 10:01:56 +0000
Manifest this update: Sat 23 Aug 2025 10:01:56 +0000
Manifest next update: Sun 24 Aug 2025 10:01:56 +0000
Files and hashes: 1: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl (hash: z4j2zXYOlnKzsNe1UGNzEdEAMiBn3AhKSSO/KgCKQ+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ac:74:a8:48:24:33:05:09:3d:57:ca:25:3f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Validity
Not Before: Aug 23 10:01:56 2025 GMT
Not After : Aug 24 10:01:56 2025 GMT
Subject: CN=c87c95d50c60379e90e97549a0dd4cedc6db9c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c7:9a:77:f4:8b:45:d4:15:59:00:a8:32:9b:
f9:46:61:60:1a:37:3b:3c:35:80:c4:50:b8:e7:d7:
25:cb:d4:91:ef:af:f8:db:71:82:b0:9b:34:25:36:
18:af:19:6c:7d:db:62:e5:5f:8e:8a:2b:e5:49:b1:
da:a1:4e:ba:7b:62:e3:0b:a4:7b:3c:0d:32:7b:48:
df:f5:55:4b:23:ff:6e:4f:45:a1:0a:f4:63:de:39:
70:ad:e4:41:9e:7b:14:10:6c:48:d2:dc:a3:03:5e:
8b:e6:09:e9:4d:48:ce:2a:24:10:cb:c8:f8:42:37:
0a:6d:74:e1:82:e2:69:33:80:dd:78:48:74:d1:63:
30:f2:0e:e4:1e:67:56:4b:3e:e7:e0:a8:70:e3:7e:
82:50:65:cc:fe:1c:07:9f:b2:37:2a:7f:ab:1a:a4:
c6:97:13:b8:c8:20:40:2c:31:e1:f8:b7:e7:b2:02:
e6:06:5a:5f:d7:bc:5c:39:cd:c2:26:b3:a0:d4:84:
9d:17:1a:57:3f:81:06:c5:91:6c:56:5e:b0:d4:c1:
bf:ae:ed:0c:1b:39:16:fe:89:8f:f8:58:96:26:90:
c7:e5:88:9e:c4:1f:db:41:db:59:9f:69:98:4e:eb:
a7:61:98:93:16:33:fe:56:84:b8:c8:69:08:92:bf:
e7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7C:95:D5:0C:60:37:9E:90:E9:75:49:A0:DD:4C:ED:C6:DB:9C:2B
X509v3 Authority Key Identifier:
keyid:FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e8:69:3a:2d:69:a1:70:6b:61:a3:ac:ef:8c:cf:80:7d:8e:
7d:e6:c4:d2:d4:f9:65:bf:c8:4a:67:1e:94:30:48:52:aa:c6:
78:7a:01:60:17:da:46:0d:86:a8:84:76:48:bb:0a:e8:0d:59:
4c:85:e2:3d:66:64:94:9a:62:c1:84:64:27:95:47:b7:6e:22:
3e:ac:a0:38:43:f5:07:6d:60:f6:79:54:0b:33:3b:63:67:f5:
7c:04:ce:5b:07:16:cc:93:6f:d8:a3:fc:40:6e:f2:30:4f:cb:
07:6a:b8:fd:6f:1e:8b:b8:58:bf:d8:40:e7:48:47:43:0c:c5:
4b:53:bb:a6:7c:9c:07:7d:5c:8b:56:0b:d8:ce:a6:d0:36:b0:
13:9e:3f:cf:e3:f6:15:89:7b:3b:24:a7:6b:c1:55:e1:1a:e1:
72:82:5e:14:7e:21:0a:2c:e3:d1:c1:73:aa:fa:74:3e:e0:19:
7f:2b:7d:6b:55:a9:af:5b:41:a3:7f:59:0e:4f:e8:e1:71:88:
3f:02:23:19:94:40:56:41:d1:01:0d:90:15:b4:52:2f:d7:fc:
80:63:66:35:54:5d:13:88:8f:68:8d:20:ac:70:df:d1:6e:86:
3f:71:cb:f1:ec:bf:28:3b:84:15:2d:25:5a:16:77:13:71:a0:
18:ab:3c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:32 2025 by rpki-client