
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
File: FReBYmtMfEio3NUUxqdUn_tPY6o.mft (raw, json)
Hash identifier: 4nSvzCUgzhr7TWiPyuyFSo+6U4hvOiaFbzJS6skgKgg=
Subject key identifier: 1A:48:55:F8:AC:BF:A4:B9:59:C4:ED:91:2E:4E:85:72:D9:50:7F:DB
Authority key identifier: 15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA
Certificate issuer: /CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
Certificate serial: 019874503F6100D35EDE149F17C8EE9AEE11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 09:01:12 +0000
Manifest this update: Mon 04 Aug 2025 09:01:12 +0000
Manifest next update: Tue 05 Aug 2025 09:01:12 +0000
Files and hashes: 1: FReBYmtMfEio3NUUxqdUn_tPY6o.crl (hash: ph5YgndVfbrRSStkw1R9FAt7DcrHHo3YOXik6Hlp/QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:3f:61:00:d3:5e:de:14:9f:17:c8:ee:9a:ee:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa
Validity
Not Before: Aug 4 09:01:12 2025 GMT
Not After : Aug 5 09:01:12 2025 GMT
Subject: CN=1a4855f8acbfa4b959c4ed912e4e8572d9507fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ef:65:7f:8b:1f:f4:92:6f:3a:f3:03:04:97:
84:d8:04:ed:b2:ee:ca:c2:11:28:0a:b2:05:51:80:
62:23:96:d6:e1:8f:db:a0:6f:4b:77:a1:35:71:40:
e2:8c:f1:9c:d4:1a:3c:49:bd:f5:27:d6:b0:d8:f9:
bf:2c:46:68:99:85:2f:df:fc:89:08:9e:28:09:e0:
63:67:d0:96:76:46:cd:8b:61:a3:92:43:d6:fd:4e:
a7:1f:e3:82:2f:1d:02:49:60:c4:ee:9f:48:1c:5c:
fa:8c:7d:60:7c:56:83:fc:f8:ab:24:12:18:0c:02:
01:f5:9d:c7:e3:83:22:95:00:73:07:58:f9:7b:38:
e8:27:86:8e:8c:f4:8a:e8:9f:db:41:63:2e:06:0e:
af:a8:a5:b2:38:94:a1:85:8f:59:95:c0:a4:57:84:
24:09:5d:1c:04:f4:ae:56:07:21:ee:e3:2d:85:de:
be:48:df:60:ac:06:88:38:1b:90:d2:f3:ed:8e:9a:
ab:8e:03:b9:23:4b:59:b2:e5:4d:0a:15:af:f0:26:
bb:25:07:19:f7:72:21:52:9b:c7:06:ab:58:e5:89:
8f:3e:e9:50:2a:b2:8f:7d:f8:c6:20:2c:66:e7:f7:
a4:d1:32:f3:2c:04:40:ba:d0:f4:e7:36:b1:57:d6:
84:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:48:55:F8:AC:BF:A4:B9:59:C4:ED:91:2E:4E:85:72:D9:50:7F:DB
X509v3 Authority Key Identifier:
keyid:15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:1a:65:a4:8c:a0:46:62:f7:96:fc:0a:5c:86:3d:43:2b:bd:
dd:f8:04:f9:2c:7e:79:f9:87:32:02:d8:5e:e6:7e:98:e3:9b:
f0:bd:9f:39:75:29:7f:b1:cc:19:01:ac:c9:15:bc:61:00:d8:
10:8e:15:ce:53:c9:db:e3:79:38:8c:bc:ac:48:4f:ee:f5:ff:
3d:60:9a:fb:20:1e:fd:4b:88:d2:e4:66:e6:04:9b:1d:12:a4:
18:c3:c2:23:e4:4c:b6:77:fd:06:87:f2:9a:88:97:07:ff:06:
fe:7f:6b:87:a1:12:e9:90:c2:34:02:0e:dd:47:e2:38:f5:06:
e5:f0:91:82:c5:e1:66:ad:11:90:9f:c9:b4:ef:a0:83:cf:3f:
c2:57:0c:ae:dc:67:7c:27:28:db:bc:d4:88:98:16:4d:32:79:
87:0b:21:75:32:af:e0:1f:b7:ae:cf:07:92:e6:cb:0b:1e:c2:
97:e9:a0:89:a1:48:26:fe:dd:32:d4:86:b9:34:88:51:eb:3e:
91:d3:c9:be:7b:90:ed:f8:d8:47:d6:ae:12:17:12:db:40:08:
3c:86:7f:aa:ac:64:a7:01:87:b0:b5:fd:91:02:7d:26:a1:44:
fe:1d:cb:1f:c0:65:24:8e:bf:33:88:8c:75:9d:cf:81:12:29:
b7:dc:64:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:23:44 2025 by rpki-client