Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
File: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft (raw, json)
Hash identifier: XKRG17SUxWbEv2v4hGmHjwIGQ/i4puVvAp4M5F5wxV4=
Subject key identifier: 9B:FC:B5:DB:72:14:9D:8D:01:B0:E6:0D:50:8C:86:57:28:A3:CD:4E
Authority key identifier: FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
Certificate issuer: /CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Certificate serial: 019A71B802469F222749105E9B8512480DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
Manifest number: 02A8
Signing time: Tue 11 Nov 2025 07:01:15 +0000
Manifest this update: Tue 11 Nov 2025 07:01:15 +0000
Manifest next update: Wed 12 Nov 2025 07:01:15 +0000
Files and hashes: 1: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl (hash: cWL6b9tHEm+8zQ2qaeGAzZYwo8xrBbVKaBjsBy/QlzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:02:46:9f:22:27:49:10:5e:9b:85:12:48:0d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Validity
Not Before: Nov 11 07:01:15 2025 GMT
Not After : Nov 12 07:01:15 2025 GMT
Subject: CN=9bfcb5db72149d8d01b0e60d508c865728a3cd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f3:77:36:b6:f4:8d:e3:c8:d4:bb:45:76:8e:
e5:fd:d1:cf:3f:a0:b6:0b:c3:ae:7b:f8:12:7e:d8:
27:75:27:82:b8:68:3d:f7:f5:fa:df:ec:75:68:e3:
38:c6:45:72:1a:5c:15:a6:3c:d1:de:c9:8c:ba:22:
51:fa:2c:4b:fc:50:db:6b:90:8c:4b:a8:f4:e1:8e:
7e:68:f4:d0:1a:c1:97:2a:a2:93:57:ec:de:3e:e8:
1f:b9:eb:c5:dc:90:b1:9f:5e:20:da:59:2b:30:12:
0c:c7:e7:12:e3:b2:da:1d:60:22:0d:8b:db:19:3c:
94:8f:18:ec:03:bd:00:a2:c1:a4:19:55:4a:35:1b:
60:2c:2b:8e:cc:31:a1:d1:c7:ac:66:f2:c5:b7:ca:
e1:dc:20:be:44:40:11:03:9d:a8:df:2a:a1:4d:70:
a0:17:ee:72:c2:e0:92:b6:04:db:5e:a3:f4:a7:b2:
5b:a7:b3:ed:c0:d0:a5:cc:dd:db:ac:0a:49:b8:c2:
4f:66:4e:95:78:ea:63:4a:1c:2a:41:91:1b:01:66:
3d:5c:82:a8:74:65:53:f1:83:b4:8e:38:d6:4f:38:
49:5e:dd:86:b9:3c:aa:c5:79:a9:be:4c:7d:a9:d1:
b9:31:c6:f9:9c:3c:e5:96:4e:78:fe:99:73:83:74:
ff:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FC:B5:DB:72:14:9D:8D:01:B0:E6:0D:50:8C:86:57:28:A3:CD:4E
X509v3 Authority Key Identifier:
keyid:FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3e:ca:59:78:62:ec:2f:82:38:22:ab:cc:0c:84:74:54:48:
32:7c:74:ae:fb:2a:7d:1c:af:03:77:10:d1:a7:a9:d2:a5:ba:
db:c1:72:bd:a4:23:d1:8c:22:eb:5c:c1:e7:17:6a:3d:99:d7:
70:a9:f9:e5:e3:99:6d:6f:5e:27:e1:6c:f9:f6:4e:00:97:49:
dc:95:f1:01:66:df:81:4f:31:64:06:56:31:e5:15:82:76:8a:
37:3a:da:a6:3e:1b:f5:33:91:81:c7:5f:ba:6e:6f:05:ce:f7:
ba:79:4c:5f:8e:06:77:b3:d6:93:84:b5:0c:1c:4f:04:ce:d9:
04:48:d3:68:2c:81:1c:ce:69:7a:d0:28:bd:af:ba:6d:4c:bf:
37:15:b9:39:de:ca:8f:f3:bd:49:e8:1b:6f:4d:56:bd:a8:1d:
b7:9f:c1:5b:2c:8e:13:fe:5b:66:a0:4f:06:23:e7:73:d1:53:
73:6e:4f:be:a3:ca:44:1c:f2:22:d7:06:80:8c:98:c7:d8:57:
7c:cc:0e:af:0c:77:32:61:7b:aa:2a:43:5d:a7:8a:19:c0:f4:
9c:7c:10:73:0f:8e:3c:22:6a:5b:62:f0:05:25:67:37:66:eb:
f8:98:aa:55:12:ea:64:5a:76:43:70:cd:99:e2:3d:17:eb:0e:
72:03:11:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:27 2025 by rpki-client