Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
File: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft (raw, json)
Hash identifier: 3ryTeMYPP9CNEB9Jw/Qfp8PdBtAvJ83QE3oqU0ZC51E=
Subject key identifier: FC:61:EE:2F:5C:E8:2C:5E:A2:72:A6:A1:71:3D:81:9A:09:70:1E:96
Authority key identifier: FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
Certificate issuer: /CN=fb280c05b76912a09cb12934db33c8e520acdd96
Certificate serial: 0198D473F6384B9ED16EAA5FEA4564C971D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
Manifest number: 0978
Signing time: Sat 23 Aug 2025 01:03:46 +0000
Manifest this update: Sat 23 Aug 2025 01:03:46 +0000
Manifest next update: Sun 24 Aug 2025 01:03:46 +0000
Files and hashes: 1: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl (hash: YMLCG0+jQ+YIYgERyqlZUWwvEuc/Ma84t+8PR/veBC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:f6:38:4b:9e:d1:6e:aa:5f:ea:45:64:c9:71:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb280c05b76912a09cb12934db33c8e520acdd96
Validity
Not Before: Aug 23 01:03:46 2025 GMT
Not After : Aug 24 01:03:46 2025 GMT
Subject: CN=fc61ee2f5ce82c5ea272a6a1713d819a09701e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0b:b3:0b:48:e9:a7:8a:c5:c1:fa:c1:4c:66:
e6:97:30:1c:95:88:d6:4f:a6:af:91:5b:aa:35:27:
be:a6:1f:d5:55:6d:f5:93:9d:2b:25:7d:ec:d0:69:
ff:1e:07:2e:f4:7e:17:d0:28:a4:49:f1:83:f3:10:
c7:dc:78:34:32:29:9c:71:47:39:19:0f:20:03:9d:
0d:ee:06:df:72:99:56:ae:df:9f:3a:42:2e:ee:eb:
03:ac:69:0a:a5:c2:3b:5b:3f:cc:64:af:46:bd:1f:
c5:d2:18:50:73:c0:5e:d6:4c:23:a6:bc:2b:53:70:
19:1c:49:20:3b:39:b0:36:30:50:f7:ab:97:ec:d9:
48:58:fd:31:fb:79:0d:19:7e:53:30:a1:dd:18:0d:
da:ae:04:1b:58:97:ce:13:6c:c9:7b:09:48:4d:00:
d1:1b:de:5c:17:c1:d9:c7:e9:c4:90:4f:08:5e:1e:
31:4f:b0:28:64:2a:6f:30:95:5f:e4:a1:29:fc:1d:
0f:79:4c:82:79:68:30:b8:5f:73:6f:14:e1:22:b6:
dd:1b:ef:32:92:7f:a9:02:65:00:83:e3:df:f5:d8:
38:5d:31:f9:17:f5:90:5b:01:b3:b2:11:7a:0b:1b:
d9:50:27:08:26:ab:06:c9:42:fa:63:89:b7:ba:50:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:61:EE:2F:5C:E8:2C:5E:A2:72:A6:A1:71:3D:81:9A:09:70:1E:96
X509v3 Authority Key Identifier:
keyid:FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4c:fa:0a:4d:e5:7c:7e:e2:66:1f:e3:b0:fc:8e:4f:ae:f4:
f6:bc:cf:a9:2f:dc:81:a0:f4:db:56:37:00:14:78:9c:05:ad:
01:af:af:fc:2e:70:46:86:c1:33:62:2d:fd:c4:39:63:c5:05:
a1:af:cc:c9:c3:04:5a:84:e0:b3:3f:d2:c6:8b:71:c1:c8:f1:
d7:90:ff:45:5f:bf:35:f8:04:62:e6:8b:73:9e:3d:a0:54:bf:
a9:e0:93:ae:53:d3:cb:2d:6d:3f:46:2b:9b:17:90:9e:b2:f4:
2d:6a:40:4b:9b:66:88:04:68:73:07:7c:42:a8:26:76:42:1d:
5a:31:26:7a:da:51:48:7b:41:8f:80:ec:7c:99:a7:8f:71:68:
7d:a4:43:76:7f:d7:79:ac:1c:27:2d:af:29:07:8b:d7:57:d8:
fe:ba:8d:55:0e:bc:ae:00:65:d8:0d:40:29:3f:ad:df:d8:a0:
96:34:51:19:30:eb:c1:43:b3:4f:b0:c8:36:cf:af:ef:2b:38:
00:fa:fb:d2:77:59:c9:01:2e:4e:77:9c:d2:e9:67:f6:dc:14:
cc:aa:9c:3f:c0:ae:7d:d3:e3:ac:2a:d2:e2:be:ef:b8:64:2a:
15:64:67:26:34:64:5f:e3:0b:f3:65:79:2d:59:c4:62:b2:61:
57:89:f1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:53 2025 by rpki-client