Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
File: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft (raw, json)
Hash identifier: CcKy/7dFcXlPXjx2J48cWSFRCXSm74KoLEDBrexP+o4=
Subject key identifier: 78:46:A6:FB:D6:23:8B:E5:C6:E8:C6:7D:AB:8C:C8:5B:49:66:A2:20
Authority key identifier: FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
Certificate issuer: /CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Certificate serial: 0197C9F169E58A225A7DA9CE144A2C27D179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
Manifest number: 0148
Signing time: Wed 02 Jul 2025 07:02:11 +0000
Manifest this update: Wed 02 Jul 2025 07:02:11 +0000
Manifest next update: Thu 03 Jul 2025 07:02:11 +0000
Files and hashes: 1: 1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl (hash: sl7+aNSOSQnv+r87ta/W95P8mVIF2ovEMX4wTBQmQ3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:69:e5:8a:22:5a:7d:a9:ce:14:4a:2c:27:d1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbaf2f19b0e4d96c655bf377066462e2b141cd60
Validity
Not Before: Jul 2 07:02:11 2025 GMT
Not After : Jul 3 07:02:11 2025 GMT
Subject: CN=7846a6fbd6238be5c6e8c67dab8cc85b4966a220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:16:bb:02:de:7a:bb:f4:a1:36:da:c8:8e:db:
8f:cf:84:49:4b:f2:1b:8f:55:49:15:79:63:75:41:
67:9f:b1:06:a0:90:24:97:13:92:52:bb:23:a6:8d:
40:b1:1a:c6:87:02:b7:a5:44:a5:7e:51:c0:25:d1:
6f:8f:cb:b6:c3:c3:6c:f5:c9:3f:dc:fa:e4:b2:37:
13:f7:bc:3f:aa:c4:f2:bc:dc:7f:9e:22:f0:b4:46:
a9:53:72:9e:5a:48:dc:3e:08:54:3d:39:b1:b1:2e:
41:68:fe:e2:f0:9d:b2:45:9c:14:35:b3:85:8a:7f:
be:a6:e2:7f:4b:9e:e9:79:a6:0c:0c:01:ce:26:e2:
4b:fd:6c:15:b9:c9:5a:d6:63:88:01:6b:76:75:dc:
65:b5:3a:a5:55:27:f0:33:2d:d1:a7:0f:24:a1:54:
37:41:51:35:16:10:98:06:5d:bd:6b:14:3d:0f:94:
b7:ae:38:a1:c6:cd:ce:44:9d:e2:9a:c2:76:b3:07:
2f:39:dc:85:d3:f2:a0:02:01:7f:00:c8:47:b3:8f:
c4:30:ef:a7:2d:a5:78:22:f0:b1:81:e9:a4:37:93:
ad:90:cb:5c:4a:98:4d:73:20:a6:5f:23:8d:2c:5b:
8b:6c:a5:a2:a0:48:82:1d:3b:00:ad:eb:8b:3f:0d:
a4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:46:A6:FB:D6:23:8B:E5:C6:E8:C6:7D:AB:8C:C8:5B:49:66:A2:20
X509v3 Authority Key Identifier:
keyid:FB:AF:2F:19:B0:E4:D9:6C:65:5B:F3:77:06:64:62:E2:B1:41:CD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-68vGbDk2WxlW_N3BmRi4rFBzWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e3c367-37a2-4c65-83c2-592b84fd5336/1/1-68vGbDk2WxlW_N3BmRi4rFBzWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c9:4e:fd:6f:52:b4:5b:0b:b2:07:b8:1f:2d:04:fa:67:5b:
f7:df:02:6f:da:be:4a:a2:69:8e:02:86:0c:58:55:ec:c4:a4:
16:a5:4b:fc:47:b2:69:90:c3:88:f2:bd:0c:a1:b5:e9:af:bb:
10:bb:5e:02:d5:e0:58:ca:50:c9:c0:f0:9d:03:ae:30:73:38:
5b:06:3b:0f:b0:59:24:13:f0:51:42:99:db:f5:30:73:85:83:
20:9f:d4:40:e6:70:a9:2e:77:58:cb:99:1d:aa:b1:9f:ca:d9:
d3:11:8e:19:3a:4e:35:e0:04:ef:38:bf:5a:d8:a8:13:0e:a9:
59:a0:5b:6c:16:4e:a7:d6:06:92:69:a0:92:89:1b:f5:1f:f6:
99:1f:a6:20:7b:aa:03:6c:85:83:e0:28:6d:5c:f9:3e:43:1d:
89:07:bc:23:2f:af:90:bb:3f:ca:12:c2:86:6a:b6:1a:01:73:
76:ef:d0:93:74:53:21:dd:09:3a:2f:38:da:67:03:96:f3:f0:
61:d3:30:d7:de:23:a5:a1:7c:e4:5b:2c:05:99:63:9b:07:50:
9a:7e:5f:eb:10:03:be:a1:64:e1:40:fb:2e:8b:b6:20:8d:cd:
60:4f:13:1d:a7:9a:2d:98:69:8f:0a:5c:35:75:00:73:aa:47:
1d:9e:e2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:03:58 2025 by rpki-client