
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
File: 1-83RF-rHV7b485QoZTrhJQjMaYk.mft (raw, json)
Hash identifier: nH3ZfBNa/SIfZN3yGYzYhjOGRAIPqihVGg46WH+ipAc=
Subject key identifier: D8:F2:95:49:DC:00:B9:7D:C9:02:A1:3A:C4:5B:1F:D3:4C:3D:53:58
Authority key identifier: FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
Certificate issuer: /CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Certificate serial: 0198D66047E5D11F55001966D160D5B51F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
Manifest number: 1465
Signing time: Sat 23 Aug 2025 10:01:30 +0000
Manifest this update: Sat 23 Aug 2025 10:01:30 +0000
Manifest next update: Sun 24 Aug 2025 10:01:30 +0000
Files and hashes: 1: 1-83RF-rHV7b485QoZTrhJQjMaYk.crl (hash: hgnXjFVl7mYT0Qqk+0G4mc+UFlMQ6SoB14VQetbSoes=)
2: HLsqpW_Z-fbGO_aC3llZw59d0HA.roa (hash: zNqiqKUQYXwQHeg5g/DJfaZuunabikgAw4lZ3lENgDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:47:e5:d1:1f:55:00:19:66:d1:60:d5:b5:1f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Validity
Not Before: Aug 23 10:01:30 2025 GMT
Not After : Aug 24 10:01:30 2025 GMT
Subject: CN=d8f29549dc00b97dc902a13ac45b1fd34c3d5358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:c1:dd:7b:0d:b0:be:b9:f5:54:22:ae:48:
bb:15:73:07:87:5a:19:73:c7:ec:cc:9d:df:33:e9:
3e:60:21:9d:40:8a:4d:9b:51:26:43:e8:23:50:a3:
b0:b8:a3:f2:78:e1:a9:05:4e:3a:aa:7b:3e:33:3a:
07:8c:34:63:e9:bb:a7:4e:22:e0:b0:d6:a9:b7:5d:
b3:52:d5:cd:a5:13:6e:dc:22:c0:93:9c:9a:84:99:
d9:8f:bb:69:dc:11:b4:cf:2e:6c:ac:86:d7:fa:67:
cd:57:0c:95:22:0c:3c:52:5c:8e:ca:ba:ea:13:4a:
1a:2f:f8:70:56:a6:ae:c7:6a:31:3f:8d:46:d4:39:
85:37:2a:8e:03:90:78:1a:92:6b:a5:d9:14:c9:12:
7f:a4:5a:ac:4c:f1:76:e1:26:f2:31:f3:be:b6:31:
39:4b:60:1a:71:23:63:e1:82:8c:1c:39:97:35:be:
e3:b2:f6:79:58:cc:47:22:cc:7e:b6:d5:23:0b:44:
90:60:b8:f4:67:41:e3:af:2a:21:02:60:16:93:7c:
1d:7d:3d:f9:59:34:cc:f5:04:be:22:c6:87:ea:30:
95:2b:22:a3:f8:b0:ed:aa:35:83:78:ee:78:2b:b2:
a8:ef:07:80:99:83:a4:fd:47:6a:ac:e5:42:31:78:
3d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F2:95:49:DC:00:B9:7D:C9:02:A1:3A:C4:5B:1F:D3:4C:3D:53:58
X509v3 Authority Key Identifier:
keyid:FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d1:7f:f1:c0:aa:f8:d6:08:30:da:ab:9e:29:88:59:3d:cf:
aa:b6:a1:e8:a4:66:c2:73:cb:3d:76:2a:2c:c0:f1:c3:8f:44:
ae:05:ac:c5:eb:bb:0c:cb:b8:52:08:b2:51:c4:e7:76:1a:f5:
56:76:77:fe:c7:b3:93:e3:b6:d2:ef:e0:9e:14:7a:39:b5:d7:
e0:f4:2c:74:d4:fc:ff:88:67:af:9a:04:90:a7:ae:4e:bf:e7:
a3:f9:52:be:81:d1:c6:de:99:23:b1:4e:7a:17:da:d8:55:99:
e6:8e:3d:33:fa:f6:d1:ff:e2:3a:b4:c5:aa:4d:36:b9:be:1e:
d5:d9:6f:f2:00:78:ad:22:11:51:5f:a8:30:fa:92:66:4a:d5:
60:16:c7:17:28:9c:28:e9:19:06:93:2e:c9:c4:69:82:42:22:
22:e9:96:20:92:c7:87:65:90:f0:bc:64:1c:1b:a0:80:e5:1f:
58:4c:47:ef:79:be:b4:2d:b6:f3:ec:86:48:e6:94:69:6f:cf:
1d:a5:59:eb:e3:a3:16:52:3c:56:9e:e1:61:6b:e0:6f:87:f6:
44:a3:ea:82:28:6f:da:b8:79:f3:69:49:33:05:e7:93:d5:0f:
16:d7:ef:da:a3:dd:27:e0:6d:ea:49:ad:13:3a:2b:bb:25:c8:
49:94:bd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:49:04 2025 by rpki-client