Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
File: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft (raw, json)
Hash identifier: GukV+aq5CaVnSKy7Fj3XX2gjHqt+JJQL27qYjhvNGSw=
Subject key identifier: 91:2C:DB:7D:E5:4F:D9:C2:E0:B9:62:AB:88:51:6E:61:FF:9D:DA:89
Authority key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
Certificate issuer: /CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Certificate serial: 01989E5E8AE91AA6965020FC306F0B8C319A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
Manifest number: 10B2
Signing time: Tue 12 Aug 2025 13:00:52 +0000
Manifest this update: Tue 12 Aug 2025 13:00:52 +0000
Manifest next update: Wed 13 Aug 2025 13:00:52 +0000
Files and hashes: 1: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl (hash: IGsx6FbFbzG2adukbLY3jo1PEdq/Z3A59vJyNI63t30=)
2: sdcv864WQrJBi5xKuVwuLH2j6Tk.roa (hash: eFYC5loUXzRtmrgy7poaf0InOUtNFCrHQGg1kdVt86Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5e:8a:e9:1a:a6:96:50:20:fc:30:6f:0b:8c:31:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba
Validity
Not Before: Aug 12 13:00:52 2025 GMT
Not After : Aug 13 13:00:52 2025 GMT
Subject: CN=912cdb7de54fd9c2e0b962ab88516e61ff9dda89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c2:b7:90:05:6f:89:43:0b:81:2d:af:80:e0:
fc:f3:6f:a7:10:05:a7:02:27:d9:f9:38:6f:a1:45:
2e:ba:52:ec:e1:92:50:71:36:bb:5e:e7:b1:45:3f:
77:d0:ad:fb:be:ef:ed:ef:01:e1:23:6a:ee:47:62:
7d:fb:80:56:ef:2f:df:ab:d6:e4:c9:67:e1:b3:e9:
f0:e0:1e:96:28:d9:c9:c6:5b:cd:fc:0f:5e:13:a5:
72:58:c3:c6:43:0d:5a:74:74:25:07:1f:f2:5e:a9:
69:c3:32:c4:e2:dc:be:a5:85:6d:38:3c:a1:36:14:
c2:1e:dc:a6:5b:07:82:4a:6a:1d:54:e9:ac:cd:84:
08:68:de:72:e0:4b:57:23:09:2a:e2:3d:0c:1b:75:
14:1b:9f:43:a8:78:af:09:dc:78:17:97:12:1b:45:
92:c0:e6:d7:59:d1:8b:e1:7d:c2:85:4f:a1:16:9f:
86:96:08:1b:61:86:32:df:fa:cb:a6:ca:c2:a0:2e:
62:bf:53:37:4e:fc:26:9f:0b:1f:95:45:0a:7f:c7:
5e:ae:6c:df:66:b2:4f:87:27:36:21:02:da:da:fc:
14:70:85:ba:b6:11:9a:bb:ec:b6:8c:59:0c:58:1b:
ec:25:83:cc:d9:f8:d1:24:b6:83:b0:88:20:dd:04:
f2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2C:DB:7D:E5:4F:D9:C2:E0:B9:62:AB:88:51:6E:61:FF:9D:DA:89
X509v3 Authority Key Identifier:
keyid:FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e7:a0:7f:8a:36:d4:6a:32:9d:2c:03:d6:bf:19:1f:9b:0d:
dc:14:7d:cb:41:e9:8a:36:47:c8:cf:73:fe:1c:58:a9:af:dd:
81:79:77:8e:46:e3:09:a8:2a:dc:55:48:6c:1b:8e:9d:fd:b0:
2c:8d:be:53:6d:c1:32:3c:9d:bd:59:f1:ef:f9:78:69:7f:cc:
a4:d9:5f:7c:76:56:32:cb:ee:ca:ef:08:cd:49:c0:08:86:7f:
6f:42:7b:a6:97:b2:be:b8:6f:a7:36:db:3f:d8:09:36:db:f2:
1f:eb:33:4f:b5:05:fa:b6:72:e7:70:42:bc:5c:55:06:dc:70:
28:f6:a5:98:55:cb:94:95:12:b5:af:66:8f:5e:96:4e:3c:dd:
0f:02:e7:7c:6d:da:bb:88:02:b8:4f:a2:73:14:4c:56:14:90:
0a:63:b2:65:94:82:67:04:e3:e8:8f:53:2d:bb:72:93:6f:bd:
eb:b0:e1:0b:25:4a:d6:c4:df:c9:bb:65:34:c0:52:41:da:09:
97:53:14:9c:65:c2:e4:91:1e:42:09:4a:a5:d9:80:57:9c:4f:
5c:9c:ef:bd:ce:b4:9a:25:83:8b:78:ca:8e:47:43:07:20:97:
a8:e9:1f:1c:ed:c4:01:1c:be:67:36:d6:17:42:aa:4e:9a:01:
a1:81:cb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:33:57 2025 by rpki-client