Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
File: 1-9JdpktGOvOLRE_zcxGxVm31_LI.mft (raw, json)
Hash identifier: DYLsgFiAhVHIThZAYpNZWP/VFvWdAuvXT8RYReADmb8=
Subject key identifier: 12:CB:76:50:46:02:BE:89:41:CB:BD:94:C9:56:BB:A8:E2:60:2D:12
Authority key identifier: FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
Certificate issuer: /CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Certificate serial: 0198D69807B198790BACF4D02BF1EFA650B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 11:02:24 +0000
Manifest this update: Sat 23 Aug 2025 11:02:24 +0000
Manifest next update: Sun 24 Aug 2025 11:02:24 +0000
Files and hashes: 1: 1-9JdpktGOvOLRE_zcxGxVm31_LI.crl (hash: wSSJ+WJY8ho/1CwNcEqWMe6OVPIjYRmEO1Zv7BUpp3s=)
2: 3GvpHIxxSBOh_JH9oQawEJfN78g.roa (hash: m/cK1kN4KKcnsjbPKB2PXLCdGbbG3lcfoo431XMf3kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:07:b1:98:79:0b:ac:f4:d0:2b:f1:ef:a6:50:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Validity
Not Before: Aug 23 11:02:24 2025 GMT
Not After : Aug 24 11:02:24 2025 GMT
Subject: CN=12cb76504602be8941cbbd94c956bba8e2602d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:96:41:32:2d:e9:ab:0d:2d:b8:e6:90:c8:fc:
f1:16:52:d4:6b:90:f5:64:99:97:1c:77:bc:c3:1a:
de:b6:ea:15:7d:71:56:5a:2b:01:7c:a3:49:68:9d:
e0:7f:78:40:c4:fd:2e:e6:48:57:00:4f:d9:8c:38:
a2:3d:25:5d:a5:54:28:20:e4:ca:fc:f1:c2:6c:1e:
26:65:09:73:64:bb:68:9b:49:7a:6b:13:3e:b7:95:
8a:56:3e:c0:e7:64:07:87:a0:09:99:c6:14:cd:b6:
b0:48:bc:5e:b5:0f:be:74:c7:56:7c:f7:3b:f3:7d:
c1:05:39:81:25:07:16:d7:c7:6c:6a:09:10:cf:39:
f9:b9:ea:5b:04:04:53:e0:fd:94:41:59:59:91:e6:
16:d1:64:60:80:61:c1:ea:1f:9d:67:c4:42:c8:c5:
b3:b4:0d:c6:d3:26:75:3d:17:41:97:a3:04:15:f1:
17:47:bb:be:5c:61:85:f6:c1:47:62:06:0b:73:6f:
34:50:8d:53:f6:66:97:77:d7:ce:bf:ce:a9:76:01:
a5:f7:d7:f8:56:2d:12:e1:d4:20:b2:00:7a:ff:fc:
ae:35:f2:09:a0:ca:e7:0e:e6:a1:81:1e:73:b9:e7:
01:df:a5:83:3c:38:61:a0:5a:da:db:89:6d:5b:69:
34:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CB:76:50:46:02:BE:89:41:CB:BD:94:C9:56:BB:A8:E2:60:2D:12
X509v3 Authority Key Identifier:
keyid:FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f4:f3:f3:23:52:63:0f:c0:99:4b:d2:83:87:7c:e5:c0:92:
c7:01:35:c6:02:2f:c3:24:fb:ea:ed:a5:57:7a:56:e8:ef:fe:
00:11:4e:85:49:79:15:97:63:55:2b:ad:a5:6e:4d:b9:d3:3d:
6d:61:e1:3f:cf:62:00:8f:d2:4a:e1:b6:08:6f:97:cd:bd:7c:
dd:79:82:b0:f4:79:c6:8d:41:63:f3:c2:ce:53:66:5d:01:56:
1e:c2:a6:f1:0a:59:64:99:19:7b:94:5c:bf:99:3b:2c:9e:46:
5c:23:54:8b:73:d2:59:c4:31:a4:c6:4d:01:ba:6f:ac:dd:5b:
b8:55:2b:b6:13:9b:38:9c:51:24:1e:70:f7:b1:a2:bb:8b:23:
ec:69:ec:af:0f:13:23:df:93:60:bd:5d:08:57:78:19:a6:3a:
cf:bd:78:62:8b:a9:c7:c7:70:5a:b1:32:39:48:db:11:22:a0:
48:ea:93:90:a4:4b:fd:f3:1d:bf:97:b1:2e:74:95:23:f1:93:
fe:79:af:fb:37:40:43:6a:51:64:7d:25:5e:91:56:66:1d:02:
43:4d:22:b9:dd:e9:84:03:de:e2:0a:9e:83:69:4d:f7:af:0b:
21:28:4b:f8:8a:53:9f:27:b4:3c:49:37:2b:53:a3:75:fd:3d:
da:3e:0b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:08:09 2025 by rpki-client