Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
File: 1-89zN262Px3PsnBAK_3PMDH12CU.mft (raw, json)
Hash identifier: YdJQk7g+IDtZCm6Ya4bPNIE7dDl6gBcIiSbXbDy6Fhc=
Subject key identifier: 73:F8:95:66:9C:D3:27:D5:A5:DB:16:79:F7:CF:3A:F1:6A:68:56:89
Authority key identifier: FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
Certificate issuer: /CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Certificate serial: 0199FDD9ECAF9F49153CD0B79FAF650E4201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 19:02:21 +0000
Manifest this update: Sun 19 Oct 2025 19:02:21 +0000
Manifest next update: Mon 20 Oct 2025 19:02:21 +0000
Files and hashes: 1: 1-89zN262Px3PsnBAK_3PMDH12CU.crl (hash: JfXAylkoWAn8JZf2Nj28DN3U/iEtM1vGS61FTdNYA04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ec:af:9f:49:15:3c:d0:b7:9f:af:65:0e:42:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Validity
Not Before: Oct 19 19:02:21 2025 GMT
Not After : Oct 20 19:02:21 2025 GMT
Subject: CN=73f895669cd327d5a5db1679f7cf3af16a685689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d9:e6:fd:b6:25:cb:b4:56:8a:7f:dd:e9:42:
2b:6d:d8:16:2e:96:bb:49:9a:56:5e:6b:68:ae:05:
5f:4c:f3:65:50:0a:e6:bf:b7:3a:38:59:df:ae:f4:
ee:81:bc:bb:4c:b1:65:34:d8:0f:72:e8:dd:57:14:
5f:c3:8b:3b:47:94:a1:35:a8:d8:b8:cd:30:bb:af:
98:61:5f:ae:49:14:b9:ea:b8:1f:70:41:d3:84:01:
a3:11:bb:9c:b8:8b:e8:f4:68:67:33:dc:17:3f:2d:
79:bc:fc:19:cd:6a:b5:64:69:d5:49:c4:51:fc:b0:
e9:a0:aa:e3:8b:24:8d:a1:42:f3:4e:79:c5:e4:23:
1e:c6:c4:c3:0a:1c:70:7d:a6:07:13:e0:dd:18:c3:
1a:08:bd:68:5a:49:38:b2:87:d1:7a:6a:5e:08:4e:
e5:ae:cd:e5:4a:96:cf:ba:38:90:0f:2a:a0:4d:bb:
9b:67:35:51:48:83:a7:40:34:b2:32:5d:78:d0:64:
a8:44:9b:91:0a:af:64:c7:43:d5:09:9f:73:a4:c6:
31:86:bf:88:6a:5e:72:b0:16:58:65:b8:a4:23:a9:
7c:18:18:f9:a2:9d:84:a7:6d:d5:d9:85:45:ae:1d:
a6:12:01:f7:02:86:ac:f6:a9:1b:35:83:16:43:70:
c2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F8:95:66:9C:D3:27:D5:A5:DB:16:79:F7:CF:3A:F1:6A:68:56:89
X509v3 Authority Key Identifier:
keyid:FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a3:5a:86:72:8b:b5:f1:36:fc:e5:df:e3:f5:9f:97:71:85:
0c:b0:52:19:be:08:4d:18:e1:80:43:19:f9:e6:e4:d6:13:2a:
55:18:b0:ef:34:45:37:88:44:cf:06:e5:57:b5:33:a5:6f:03:
61:44:2b:59:64:a1:1f:9d:72:9e:6a:53:c8:4a:23:c9:74:3c:
15:d0:b4:50:dd:4b:1b:c2:a2:07:eb:2a:ae:46:e7:94:af:42:
da:cc:39:e0:32:07:7d:82:f4:fa:0a:6a:fc:b5:11:69:d8:f7:
b3:89:a7:c2:2f:01:a9:6e:a2:d1:55:01:97:92:1e:7e:2b:92:
a0:74:0a:82:67:ee:21:e7:e4:80:43:62:0b:db:29:f1:1e:03:
ac:cd:67:be:a1:06:31:79:8b:65:10:49:da:46:ad:28:be:56:
8b:76:a0:0c:33:86:99:d0:79:3b:14:23:9b:ec:ca:2e:b8:ee:
ac:3b:7a:84:4c:02:59:3d:9a:19:7a:2a:9b:bf:46:59:b1:4b:
b4:22:e0:18:35:bc:4a:fb:ee:39:b3:07:3b:3a:a7:9f:89:8c:
83:e1:c7:dd:f5:66:13:d9:70:40:0d:e5:2d:24:bb:2b:a4:a8:
06:4d:a0:bf:14:c4:a4:eb:45:d0:c7:2b:5c:aa:30:b7:0c:79:
dd:bd:91:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:32 2025 by rpki-client