Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
File: 1-89zN262Px3PsnBAK_3PMDH12CU.mft (raw, json)
Hash identifier: QqWL2Z1nOUup5iSwOEee/8Y/hWOxjaPsKKwZVPE3Iws=
Subject key identifier: 30:C2:AF:E5:DB:84:2B:C0:6B:2D:2C:6F:45:70:EE:B2:F9:1D:C7:45
Authority key identifier: FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
Certificate issuer: /CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Certificate serial: 0198D660F90CF788507B63F1D0479D9CD81C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:02:16 +0000
Manifest this update: Sat 23 Aug 2025 10:02:16 +0000
Manifest next update: Sun 24 Aug 2025 10:02:16 +0000
Files and hashes: 1: 1-89zN262Px3PsnBAK_3PMDH12CU.crl (hash: 722c2U5OITuN9l2VYTMSGX+yx/082ZfEimB0CEAZd5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:f9:0c:f7:88:50:7b:63:f1:d0:47:9d:9c:d8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Validity
Not Before: Aug 23 10:02:16 2025 GMT
Not After : Aug 24 10:02:16 2025 GMT
Subject: CN=30c2afe5db842bc06b2d2c6f4570eeb2f91dc745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:5d:b3:4d:d8:f5:0e:61:ef:55:48:63:13:
15:83:46:b0:a0:6f:b3:c2:9b:52:28:34:13:38:75:
7e:39:89:cb:77:ff:e5:f3:89:a2:0a:26:c1:55:68:
eb:d8:64:4b:11:2e:6f:47:9c:d2:85:fc:a0:7e:30:
1a:6c:d0:02:0f:24:2b:b5:92:a9:9e:73:48:cd:4a:
8e:fb:87:54:04:f4:53:12:e3:74:b3:87:e7:e4:4e:
79:c1:c5:1c:a8:95:5a:d3:31:ea:f9:30:b2:06:8f:
78:b9:08:4d:91:b2:dc:d7:b9:13:28:04:92:cf:cf:
f9:6d:cf:42:90:e1:b1:fa:d4:25:eb:d6:40:2a:fa:
02:1c:98:f4:ef:74:49:ac:00:9c:9a:7c:78:2d:69:
f3:57:6c:90:b7:f8:23:88:6f:c5:58:ad:e1:24:74:
84:9b:bc:63:b3:7c:6f:c4:e6:81:b3:88:65:78:5e:
fc:15:8e:2c:10:05:89:66:2d:75:04:fa:c9:85:6d:
91:05:4a:7d:4f:92:c2:d5:4f:e5:24:9e:b6:18:98:
c6:9f:82:ca:c9:58:d3:05:59:eb:75:b5:ce:00:e7:
ab:ca:e2:5e:fd:24:fe:00:5b:a0:eb:7f:8e:fa:4f:
85:82:ce:85:3a:b7:d6:c1:b6:28:b9:25:1f:73:ce:
2f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C2:AF:E5:DB:84:2B:C0:6B:2D:2C:6F:45:70:EE:B2:F9:1D:C7:45
X509v3 Authority Key Identifier:
keyid:FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ac:05:4a:3a:31:09:68:af:d8:c4:f0:07:14:1d:6d:e0:c9:
ca:5a:39:6a:6e:62:38:05:7e:9f:2d:54:49:8d:35:19:02:1b:
8b:75:a9:0b:9f:93:27:ba:c4:30:89:47:77:20:f6:d0:be:ff:
c6:2d:45:d0:e1:0d:d4:02:5e:60:f2:6f:2c:76:e2:09:6b:94:
30:4a:6e:90:98:38:4f:cc:ae:99:3b:30:6f:f6:d8:f0:05:1a:
21:ff:72:4b:1b:ee:8a:29:fa:5b:45:b4:79:c2:02:d4:7a:58:
64:ef:f9:8f:c7:d3:8b:a2:5a:04:af:fb:a3:b1:a3:10:27:01:
56:8e:d8:a3:e4:e2:4a:7f:8e:6e:a2:30:1c:d7:e3:8a:d2:42:
0e:e4:79:12:5c:5e:2a:7a:0f:18:aa:4c:a4:bf:8a:19:d3:bc:
54:0a:aa:a8:93:0a:32:16:1f:01:7a:98:62:32:50:8c:4d:b8:
63:f0:70:d7:26:a3:6d:79:a6:90:42:89:fa:5a:6b:02:a8:d8:
e8:88:c0:44:a8:42:0b:83:85:cf:86:cf:31:a2:ac:ce:9b:09:
f4:5a:c0:76:e8:5d:63:e1:f3:19:90:24:ac:9c:b6:a7:59:f0:
d7:67:3e:ab:97:b9:bd:96:fa:b2:95:cc:01:cc:7d:f6:1a:77:
85:a1:f3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:04:27 2025 by rpki-client