Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
File: 1-89zN262Px3PsnBAK_3PMDH12CU.mft (raw, json)
Hash identifier: nBNu+a3EXLLz/FRMHMLbx/uSAEKDeZGXXALYF+QUMwo=
Subject key identifier: 45:D2:24:8E:C6:B5:09:20:10:3F:59:9D:4A:89:CC:FA:B4:BB:79:52
Authority key identifier: FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
Certificate issuer: /CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Certificate serial: 019A52D2B4CF6D87ABA31972CF930989F1B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 07:02:11 +0000
Manifest this update: Wed 05 Nov 2025 07:02:11 +0000
Manifest next update: Thu 06 Nov 2025 07:02:11 +0000
Files and hashes: 1: 1-89zN262Px3PsnBAK_3PMDH12CU.crl (hash: 27F9u21zOby79tK/iCCEo6/doSuhkX2kC2zGaOqvmvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:b4:cf:6d:87:ab:a3:19:72:cf:93:09:89:f1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Validity
Not Before: Nov 5 07:02:11 2025 GMT
Not After : Nov 6 07:02:11 2025 GMT
Subject: CN=45d2248ec6b50920103f599d4a89ccfab4bb7952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9e:31:70:69:04:0d:62:31:7e:f9:ab:9a:92:
35:d2:e8:dd:c0:28:5e:81:3a:b5:01:f9:e2:16:1d:
c9:df:54:21:e0:62:96:41:a5:4a:e1:d9:5e:3b:92:
77:19:fa:82:22:00:18:d7:6e:cb:d8:31:09:50:e1:
03:74:9d:45:f0:63:1c:71:33:29:e4:70:66:c6:cd:
7e:bc:cd:e2:07:e0:af:d7:6c:7e:25:4e:0b:ff:5f:
ff:81:81:29:53:32:19:d3:1a:3a:5f:40:69:2d:49:
97:8a:0b:e2:6f:36:c3:90:6d:8e:e8:0a:dc:17:98:
60:8d:29:ac:19:8d:4d:b3:f5:bc:a7:7a:40:93:df:
ed:89:52:2c:57:37:7a:34:a2:b3:f3:92:8e:c6:66:
be:8c:73:ce:eb:f6:05:46:aa:e6:1d:90:0f:82:31:
cc:57:66:c6:bc:3f:fd:1c:ad:a6:73:d9:2f:56:39:
14:b3:15:dd:0b:77:85:e7:53:23:4e:ff:bb:e9:82:
1a:56:fb:62:14:b2:48:38:3d:b3:72:21:26:5c:6a:
fe:f3:b5:9f:f9:f1:2d:41:24:82:22:f4:c2:5b:50:
08:2c:c9:c1:2f:c4:ff:a1:84:6a:8e:a7:96:5a:c6:
a5:23:db:fc:59:18:62:da:be:29:d8:e8:3f:b9:2f:
48:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D2:24:8E:C6:B5:09:20:10:3F:59:9D:4A:89:CC:FA:B4:BB:79:52
X509v3 Authority Key Identifier:
keyid:FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:bb:94:b6:62:16:c3:0f:55:56:2f:18:37:aa:b9:fd:3b:eb:
ae:76:81:59:f2:cb:ac:19:94:30:00:4a:23:4a:2b:a0:0e:57:
aa:dd:dc:bf:48:d9:73:a4:e8:34:92:42:00:a8:9b:f1:14:30:
26:7f:33:2d:ba:82:63:eb:6d:69:40:99:e4:e2:11:6a:65:1b:
8b:df:48:f3:b3:40:a0:a0:4a:12:38:9b:67:ce:5f:a6:fc:49:
b7:4e:c5:f7:9d:81:03:21:e9:98:63:37:0a:e4:e7:05:57:5e:
be:fe:c9:36:a4:81:aa:03:b0:df:9a:30:9b:e4:99:c6:84:09:
39:bb:0d:8c:b3:2f:ac:b1:31:be:e2:0f:6a:3a:52:e3:8d:d4:
37:55:da:e3:27:e4:4d:48:08:b9:02:8a:46:16:34:36:00:49:
9d:8a:03:63:55:ba:1b:77:df:94:90:39:e3:74:d1:cf:a1:94:
d1:bf:e9:b1:01:46:61:80:39:8d:8a:34:10:cb:df:65:15:8a:
ef:92:43:b0:e6:74:53:af:f5:12:40:bf:84:bf:97:e5:04:d2:
1e:7c:1d:4a:72:12:ff:eb:40:23:3f:fc:0e:d3:0a:20:52:fa:
03:11:ce:5e:44:3e:85:6c:70:56:18:a9:bb:fb:d5:e2:7f:82:
49:15:95:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:00:07 2025 by rpki-client