Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
File: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft (raw, json)
Hash identifier: u8nNZJ0o1b3wd/uPrCeXEAKUZozU6buJRJLETBXkxnc=
Subject key identifier: C8:24:9B:5F:F5:4B:20:81:A9:D7:7C:52:D6:68:8D:55:55:58:37:92
Authority key identifier: FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
Certificate issuer: /CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Certificate serial: 019923A096AF50F716FF65FA7154EEB3D556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
Manifest number: 01FB
Signing time: Sun 07 Sep 2025 10:02:30 +0000
Manifest this update: Sun 07 Sep 2025 10:02:30 +0000
Manifest next update: Mon 08 Sep 2025 10:02:30 +0000
Files and hashes: 1: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl (hash: QrDZPsBFp4/1pIRnQkprNbPIbePHtqwcDmYDhyX7mGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:96:af:50:f7:16:ff:65:fa:71:54:ee:b3:d5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Validity
Not Before: Sep 7 10:02:30 2025 GMT
Not After : Sep 8 10:02:30 2025 GMT
Subject: CN=c8249b5ff54b2081a9d77c52d6688d5555583792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:cc:28:5c:2c:0e:6c:c0:45:72:48:69:20:31:
37:59:2b:c6:70:9c:98:f5:61:16:1f:ac:68:02:8a:
40:98:4d:4b:08:ba:c3:18:e0:c9:15:b4:2d:45:74:
df:73:90:f2:5c:a2:7b:c1:67:12:e6:57:0d:1d:8f:
4b:7b:86:6d:71:72:55:43:ad:5b:19:c6:41:46:c3:
57:e4:4b:71:4d:2d:bc:2d:8b:55:bf:7a:ab:56:94:
09:84:1f:48:d5:e4:8b:4b:32:f7:11:3c:94:f5:d2:
4f:25:ed:41:ba:98:99:a9:32:59:a2:18:d4:eb:bb:
4c:a4:fe:68:de:ec:dd:70:4a:93:13:3b:4d:86:a3:
92:a2:51:ee:7b:3b:6d:33:d1:97:43:d7:36:91:fb:
e4:6d:f8:ff:30:e1:d3:8e:55:c2:c8:68:b1:4e:08:
29:de:fc:1b:cb:31:9d:63:d5:ef:9e:30:85:c4:4e:
31:c5:83:ec:9b:05:ca:da:9e:bb:29:22:dd:a2:31:
48:28:28:f2:18:74:65:6c:23:ee:b3:34:46:9e:19:
62:b9:d5:34:76:92:d1:7b:58:5a:bd:d2:0e:e7:c8:
91:e6:df:3a:76:ca:c3:6b:84:0d:a2:3e:19:c8:c0:
ef:f7:cc:c4:d0:80:d7:cc:39:ee:1e:d2:a9:c0:31:
d1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:24:9B:5F:F5:4B:20:81:A9:D7:7C:52:D6:68:8D:55:55:58:37:92
X509v3 Authority Key Identifier:
keyid:FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fe:ce:27:0d:12:80:c2:fd:a9:92:12:bb:19:a2:82:1a:13:
6e:04:f6:8c:d8:82:bd:88:0d:9c:51:21:0b:11:64:2a:30:91:
b0:07:fd:54:44:99:30:e9:b0:c6:aa:f2:14:16:e7:f5:13:8c:
b0:f1:55:99:c0:b8:4c:2f:c6:f6:df:b4:93:cc:2d:b1:70:0a:
52:33:12:68:d8:db:f6:f9:d3:03:f8:2e:e3:8b:d0:e2:fc:ea:
7e:59:24:1c:c4:12:00:ff:25:30:7b:42:d3:34:a4:d9:a6:45:
21:dd:2f:0a:df:e8:67:5b:e7:d7:d0:dc:b9:88:86:b0:b8:79:
c9:51:54:dc:ea:05:78:49:3f:c8:1a:fd:94:3f:9c:99:22:21:
08:a7:31:b2:ef:70:db:91:31:04:6c:8c:d5:a2:8e:f9:dd:7a:
cf:0e:6b:e2:78:39:aa:26:cb:32:03:66:bc:e5:a3:58:5a:cd:
0b:83:68:c5:ef:63:be:a6:ee:3b:0f:f4:72:f4:72:a7:81:4a:
e0:f3:82:20:4b:d9:cc:02:63:f0:5d:4d:fd:7d:72:8c:fa:7d:
e3:fe:0a:fb:68:3a:04:aa:06:2d:65:27:39:8c:d5:b4:5e:e5:
12:9d:51:67:09:be:2e:5d:82:ea:bf:63:28:72:5c:c4:9b:3f:
ec:8e:5a:01
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZkjoJavUPcW/2X6cVTus9VWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYWYyZjE5YjBlNGQ5NmM2NTViZjM3NzA2NjQ2MmUyYjE0
MWNkNjAwHhcNMjUwOTA3MTAwMjMwWhcNMjUwOTA4MTAwMjMwWjAzMTEwLwYDVQQD
EyhjODI0OWI1ZmY1NGIyMDgxYTlkNzdjNTJkNjY4OGQ1NTU1NTgzNzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68woXCwObMBFckhpIDE3WSvGcJyY
9WEWH6xoAopAmE1LCLrDGODJFbQtRXTfc5DyXKJ7wWcS5lcNHY9Le4ZtcXJVQ61b
GcZBRsNX5EtxTS28LYtVv3qrVpQJhB9I1eSLSzL3ETyU9dJPJe1BupiZqTJZohjU
67tMpP5o3uzdcEqTEztNhqOSolHuezttM9GXQ9c2kfvkbfj/MOHTjlXCyGixTggp
3vwbyzGdY9XvnjCFxE4xxYPsmwXK2p67KSLdojFIKCjyGHRlbCPuszRGnhliudU0
dpLRe1havdIO58iR5t86dsrDa4QNoj4ZyMDv98zE0IDXzDnuHtKpwDHRJQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMgkm1/1SyCBqdd8UtZojVVVWDeSMB8GA1UdIwQY
MBaAFPuvLxmw5NlsZVvzdwZkYuKxQc1gMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS02OHZHYkRrMld4bFdfTjNCbVJpNHJGQnpXQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvZTNjMzY3LTM3YTItNGM2NS04M2My
LTU5MmI4NGZkNTMzNi8xLzEtNjh2R2JEazJXeGxXX04zQm1SaTRyRkJ6V0EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBjL2UzYzM2Ny0zN2EyLTRjNjUtODNjMi01OTJiODRmZDUz
MzYvMS8xLTY4dkdiRGsyV3hsV19OM0JtUmk0ckZCeldBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/7O
Jw0SgML9qZISuxmighoTbgT2jNiCvYgNnFEhCxFkKjCRsAf9VESZMOmwxqryFBbn
9ROMsPFVmcC4TC/G9t+0k8wtsXAKUjMSaNjb9vnTA/gu44vQ4vzqflkkHMQSAP8l
MHtC0zSk2aZFId0vCt/oZ1vn19DcuYiGsLh5yVFU3OoFeEk/yBr9lD+cmSIhCKcx
su9w25ExBGyM1aKO+d16zw5r4ng5qibLMgNmvOWjWFrNC4Noxe9jvqbuOw/0cvRy
p4FK4POCIEvZzAJj8F1N/X1yjPp94/4K+2g6BKoGLWUnOYzVtF7lEp1RZwm+Ll2C
6r9jKHJcxJs/7I5aAQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:07 2025 by rpki-client