Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
File: 1-89zN262Px3PsnBAK_3PMDH12CU.mft (raw, json)
Hash identifier: 7XNQBSkvDsQd4QYIaZK3CxwEd1FYwNkx8dCHqgRMHY4=
Subject key identifier: 83:5A:E8:CF:C5:B5:FE:70:B7:36:68:CB:83:A4:CE:8F:7D:55:CC:27
Authority key identifier: FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
Certificate issuer: /CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Certificate serial: 019873E2D5DB1B498A7E127C135E21D33DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 07:01:42 +0000
Manifest this update: Mon 04 Aug 2025 07:01:42 +0000
Manifest next update: Tue 05 Aug 2025 07:01:42 +0000
Files and hashes: 1: 1-89zN262Px3PsnBAK_3PMDH12CU.crl (hash: n84QJ9MEc5fVBD6ZkQDkvakRbFP1R/mr1g1TosqZUXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:d5:db:1b:49:8a:7e:12:7c:13:5e:21:d3:3d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Validity
Not Before: Aug 4 07:01:42 2025 GMT
Not After : Aug 5 07:01:42 2025 GMT
Subject: CN=835ae8cfc5b5fe70b73668cb83a4ce8f7d55cc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:05:45:37:7a:76:5a:af:ef:43:b1:f3:80:7c:
11:8e:bb:2c:88:3b:3e:27:7e:29:de:6e:ca:6f:f0:
f8:68:2b:b5:87:fb:53:cf:1a:09:9e:e2:f7:12:b6:
82:4d:ab:c9:28:24:8f:46:3c:92:cc:bf:35:8f:02:
b3:c5:ab:8e:a4:f8:2a:b3:ec:a7:63:30:48:3a:61:
d3:19:0c:bf:1c:db:03:a1:db:46:5d:dd:22:45:f2:
fe:65:43:51:c6:41:19:32:20:3f:f7:c2:c3:7c:fd:
78:2a:32:9f:12:03:93:e1:c1:a5:ee:f5:34:71:62:
da:7b:00:e4:2b:c9:76:14:cc:0c:33:d0:05:21:b2:
2a:35:b0:24:51:21:ce:66:eb:f2:4e:bf:e5:4e:aa:
1c:da:9d:1b:84:d9:3a:6f:0a:2a:e2:80:b6:92:0b:
15:9e:cd:a8:ff:5f:8f:81:61:47:ed:73:53:14:b6:
f3:9e:29:65:73:56:89:52:5b:3f:cb:9f:f9:6e:f3:
53:93:a3:95:cd:39:21:d5:df:31:c7:56:80:28:2b:
4f:2f:47:70:be:b9:a0:a1:a6:16:19:ba:d7:a6:85:
a4:b3:b6:05:fc:b8:fb:c2:df:a7:c4:f0:af:05:cb:
91:30:5b:91:e2:0c:af:6a:2c:90:48:30:7f:8b:f9:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5A:E8:CF:C5:B5:FE:70:B7:36:68:CB:83:A4:CE:8F:7D:55:CC:27
X509v3 Authority Key Identifier:
keyid:FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:bb:5d:b1:f6:04:45:d9:91:b6:54:e7:a8:fe:bc:9f:90:59:
71:05:b4:82:bb:e9:47:cd:fb:91:33:ae:99:e4:23:9d:bb:01:
5e:38:19:9c:5d:59:89:b1:07:03:c3:dd:cb:21:b5:7b:bc:af:
f0:e7:3d:60:b0:65:76:00:f3:a3:34:4b:0f:ea:66:f5:64:65:
97:14:f6:ce:bd:38:18:33:2b:76:1b:44:eb:ac:33:d8:3b:e1:
03:3c:36:cd:9a:29:71:98:e8:85:2d:7f:93:a8:b7:c2:55:6a:
44:fe:93:71:42:9a:68:72:c7:d3:02:b4:72:fc:65:22:de:f7:
ab:5d:b5:4a:e0:1e:aa:84:a6:02:2e:80:58:d8:b9:06:54:bd:
1a:6b:93:22:9e:1a:1a:e9:67:48:80:d8:ed:8c:4b:6d:20:f9:
cd:72:f9:a5:b7:1f:ea:fd:ce:4a:67:40:b4:ef:86:57:c5:42:
4e:38:99:03:bf:f2:21:c0:6b:f1:a0:44:ba:78:99:96:8c:ae:
0b:e8:e3:82:6c:e8:e2:b2:81:92:ba:6c:2b:57:4d:9e:5b:a2:
97:c2:de:95:f0:57:88:54:b2:87:ea:d4:06:f9:38:03:90:47:
8b:33:05:a5:fa:c6:12:b9:51:f0:e1:21:0a:c6:32:85:06:28:
9a:f2:fc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:18 2025 by rpki-client