Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
File: 1-_YvdgYnP0GmzMjilWB288Ch61Q.mft (raw, json)
Hash identifier: xQFIFg4GUeqBBPtqYR50bM1YesjDUrE3MxnTsKf6thA=
Subject key identifier: 12:1B:62:C3:F3:A3:30:A0:77:02:AD:4E:36:FF:A8:5F:94:D0:1C:F9
Authority key identifier: FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
Certificate issuer: /CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Certificate serial: 0199FBEAFA477CFA947A0E3149044BCEB113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
Manifest number: 1704
Signing time: Sun 19 Oct 2025 10:01:44 +0000
Manifest this update: Sun 19 Oct 2025 10:01:44 +0000
Manifest next update: Mon 20 Oct 2025 10:01:44 +0000
Files and hashes: 1: 1-_YvdgYnP0GmzMjilWB288Ch61Q.crl (hash: HiUo5oSknQqeasX3iTduwnoSYZh9xq/vD9cG5tNf5rA=)
2: gVx18rt52MyPf0oqDqUou5AuUBM.roa (hash: vA3SGzj0FAH1RwjbpG6kC2zF7wZB8RzhXo7xrGq4Z4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:fa:47:7c:fa:94:7a:0e:31:49:04:4b:ce:b1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Validity
Not Before: Oct 19 10:01:44 2025 GMT
Not After : Oct 20 10:01:44 2025 GMT
Subject: CN=121b62c3f3a330a07702ad4e36ffa85f94d01cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:c1:70:43:b1:7b:ec:30:c3:9a:38:e7:19:
b5:22:bf:49:64:08:5c:e5:66:a6:57:2d:ad:de:c8:
a2:4d:52:8b:c1:ce:91:ef:81:08:15:37:de:9d:d0:
f5:7e:35:0d:cc:ac:c2:3a:2a:ec:e0:ab:a7:f1:54:
36:ec:73:23:36:cc:f3:f9:b5:07:b9:5d:23:9a:fb:
0a:61:fc:30:fb:94:0b:a9:87:1a:63:49:39:a8:53:
48:c1:a8:1b:3e:44:b8:e6:3a:5e:7c:ce:73:56:8d:
a2:83:47:b1:2c:b3:a2:5f:bd:11:e4:cf:62:56:04:
a2:5d:9a:57:59:d2:08:8f:5b:c1:ed:ce:cc:c7:82:
20:d7:bc:ff:02:52:2f:a0:89:d8:fd:df:3e:23:c9:
bf:03:9c:35:3e:80:c9:57:87:ae:60:7f:68:d7:10:
27:c2:a7:bc:83:20:18:fc:aa:7f:ce:8a:11:f1:86:
15:e0:24:a2:6b:86:e0:a0:99:f1:41:ac:92:ea:97:
ec:d6:6a:78:de:b5:30:e3:a9:28:23:32:b9:26:c9:
38:b7:3e:7a:de:1d:05:a1:2f:4d:99:ad:1a:c3:84:
ab:33:11:e3:f6:0f:c5:dc:54:41:dc:af:5e:93:72:
a4:20:55:92:6d:78:f0:26:eb:bb:a3:66:96:03:76:
f3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1B:62:C3:F3:A3:30:A0:77:02:AD:4E:36:FF:A8:5F:94:D0:1C:F9
X509v3 Authority Key Identifier:
keyid:FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f0:13:b7:41:0d:74:02:97:da:21:81:59:5d:0c:b7:10:27:
dd:eb:25:95:a5:76:7b:42:84:35:76:0b:99:69:1f:2e:7a:d1:
db:38:25:aa:13:e3:98:35:c8:c5:f0:a4:e5:cb:a2:01:5a:f4:
81:df:54:7e:90:74:14:ab:24:5b:f9:2c:16:a6:dd:23:43:f5:
38:b9:69:16:f8:0e:7f:69:a6:39:d4:4f:05:52:e4:1c:e4:30:
ef:f5:a9:c4:87:97:dd:83:0f:43:fe:a8:87:cd:79:c5:8a:68:
b5:7b:b4:9e:82:3b:bc:a4:07:60:2f:e6:be:e1:07:58:bc:9d:
b7:be:6e:36:50:a0:df:bb:1e:1b:76:d6:e6:81:b3:1d:8e:98:
29:b2:50:6c:7b:5f:24:be:28:0d:70:b0:a8:7f:89:0c:21:a7:
77:b3:f1:20:21:35:de:74:48:d7:c1:f8:d5:15:a6:fd:ba:63:
4b:fd:f4:bf:a7:75:2e:39:b5:4e:c1:b9:22:e2:69:b3:13:b4:
db:27:33:ae:d5:33:f8:46:d1:10:38:5e:03:b7:1a:14:d7:21:
a4:a2:37:c9:78:93:5b:3f:4d:d2:70:1b:69:24:eb:0b:bd:54:
95:77:16:5a:24:eb:12:86:96:c3:19:5d:56:4c:2c:51:73:53:
7b:0e:d5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:35 2025 by rpki-client