Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
File: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft (raw, json)
Hash identifier: JBCWXpX0DGXD8OcYx2hs0U8JFnNY5vbjLUm4eyVXRB4=
Subject key identifier: B5:00:FE:64:01:00:D4:C3:D9:45:B9:9A:8C:09:96:74:B6:22:AE:8E
Authority key identifier: FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
Certificate issuer: /CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Certificate serial: 0198A04E55A326B37132C8A530B1A3CB0DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
Manifest number: 01B7
Signing time: Tue 12 Aug 2025 22:02:24 +0000
Manifest this update: Tue 12 Aug 2025 22:02:24 +0000
Manifest next update: Wed 13 Aug 2025 22:02:24 +0000
Files and hashes: 1: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl (hash: kfdsJhv8YRApSw/spBh7ac82u6PG4orF811gj6bFctA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:55:a3:26:b3:71:32:c8:a5:30:b1:a3:cb:0d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Validity
Not Before: Aug 12 22:02:24 2025 GMT
Not After : Aug 13 22:02:24 2025 GMT
Subject: CN=b500fe640100d4c3d945b99a8c099674b622ae8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:bc:9a:52:a0:9a:cb:6d:3c:2d:31:d8:45:
06:19:6d:52:a4:14:44:dd:7e:c5:75:5d:78:be:32:
b1:02:17:64:d1:42:0c:7b:17:ed:08:f0:e9:9a:da:
95:f9:b5:ea:b8:1c:64:03:63:fc:96:62:15:7a:97:
98:42:1c:d9:11:7f:8a:cc:c1:b0:27:e0:81:b5:87:
58:0c:53:b0:a9:96:3e:2c:32:f8:ab:5a:1e:de:f8:
c7:71:fd:7b:72:9f:a1:f3:56:2a:29:19:eb:83:7b:
1c:ca:49:c2:82:a4:ed:41:61:9a:19:64:fd:d1:ce:
ec:43:20:d1:7f:e1:4c:49:09:cb:b9:10:53:c6:f0:
0b:cd:06:96:b0:cf:94:8f:2a:22:d3:31:d4:2b:11:
f5:36:3a:a7:f4:35:73:c5:e0:a0:d4:be:21:39:4b:
87:87:c6:81:9c:6c:19:d6:e8:0d:41:99:fe:b5:39:
12:fa:c9:cf:f3:79:39:4f:37:67:21:1f:5b:52:8b:
ea:8d:86:46:42:b8:a2:b4:69:a3:fb:cd:a7:03:73:
07:a1:2c:ec:0d:01:3d:fe:1b:78:03:64:35:bb:bd:
60:2f:06:8a:0a:e3:5b:f5:c7:ca:2b:c0:66:73:3b:
ca:19:98:0c:92:27:9f:50:c3:51:d8:ce:30:ea:e5:
30:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:00:FE:64:01:00:D4:C3:D9:45:B9:9A:8C:09:96:74:B6:22:AE:8E
X509v3 Authority Key Identifier:
keyid:FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:6e:e6:74:b7:c6:1b:b7:71:9e:09:65:59:3c:46:b9:a7:3a:
4e:0a:e7:f2:41:43:e4:03:2f:37:5d:93:f6:c4:34:49:dd:8d:
12:79:ac:e0:33:c6:5b:53:0a:9a:62:c1:23:e3:ac:29:7f:ae:
f4:3a:2a:8b:29:b0:1c:de:db:a2:c9:c8:4a:e5:03:35:54:0a:
e6:8e:29:47:56:cc:07:35:1b:c4:f9:1e:f4:36:ca:62:d8:14:
ae:0c:ee:eb:02:20:ca:3a:82:5e:0a:7c:cd:0b:5b:b7:e6:fb:
9a:83:e0:ce:37:46:73:57:32:f2:8e:85:ba:95:89:c5:27:c7:
a6:58:b9:44:5d:b2:51:91:9b:e4:f0:12:00:3d:f5:d5:f4:3d:
69:ff:bd:c9:b4:ae:e8:35:27:b1:56:38:c4:93:f0:b7:15:99:
7b:de:f7:c1:96:9d:4c:ff:a2:97:cc:10:d9:0a:f9:0a:77:ae:
d7:2c:6e:2d:e6:bd:2b:b2:9a:80:e1:27:19:a7:27:f2:11:b4:
36:eb:98:28:9a:fa:15:71:99:13:fe:4d:b5:f2:88:31:ff:a2:
60:f6:9b:3b:62:39:78:2d:91:32:18:c3:f2:28:44:61:a5:94:
e1:d3:d7:5d:e1:15:25:2f:49:85:7c:5a:07:c1:7d:f0:f7:cc:
72:03:df:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:56 2025 by rpki-client