Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
File: 1-75S2DTiaNxpiDApL95LY8faOS4.mft (raw, json)
Hash identifier: Bb20vhdGkED1gyRfEMfr+fbCeRXXQ2Ix/h+SmaTAwlo=
Subject key identifier: A9:28:48:01:9B:59:86:3B:BE:2D:AC:A7:43:63:D6:26:DA:F1:8F:9E
Authority key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
Certificate issuer: /CN=fbbe52d834e268dc698830292fde4b63c7da392e
Certificate serial: 019923A0E02F91050518019138C3420A116B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
Manifest number: 0BF3
Signing time: Sun 07 Sep 2025 10:02:49 +0000
Manifest this update: Sun 07 Sep 2025 10:02:49 +0000
Manifest next update: Mon 08 Sep 2025 10:02:49 +0000
Files and hashes: 1: 1-75S2DTiaNxpiDApL95LY8faOS4.crl (hash: jvBZBGy1+yvzFTc3b72whNvZ2ZXt0oNmDBc8t7Cauok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:e0:2f:91:05:05:18:01:91:38:c3:42:0a:11:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe52d834e268dc698830292fde4b63c7da392e
Validity
Not Before: Sep 7 10:02:49 2025 GMT
Not After : Sep 8 10:02:49 2025 GMT
Subject: CN=a92848019b59863bbe2daca74363d626daf18f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:77:ac:13:e2:43:02:35:d3:67:8e:9d:93:40:
3a:ce:9c:a5:0e:7f:6a:c2:8c:8d:43:8d:5f:99:3c:
b9:5f:d5:34:15:3b:b8:a1:95:fd:d6:f8:1b:c7:0a:
39:c6:42:80:77:bd:a5:ef:b7:00:d7:7b:c1:ed:57:
a2:47:20:a6:79:2f:7e:db:e4:59:50:23:5e:f7:79:
31:9d:73:55:9f:75:08:fb:bb:c6:c0:0a:c3:10:f4:
4a:ca:59:5c:c0:fb:0e:15:c0:ca:95:fb:72:5b:97:
22:d6:91:58:01:7c:9c:24:9b:e8:8d:b9:52:66:c8:
4f:fb:8b:03:8d:38:65:d0:81:9c:1e:5c:75:61:b3:
bf:0a:a8:c2:ef:62:a6:7a:da:10:30:73:78:7d:93:
0e:a7:28:1b:6e:33:3e:03:88:3c:af:89:20:34:b6:
c6:0b:22:84:30:99:a1:39:fc:0b:30:ca:6c:1e:02:
ce:5a:7a:a3:64:d9:ea:ca:7d:c3:15:79:44:91:3e:
c8:44:e5:18:cb:d2:c1:ba:d2:0a:52:92:dd:f5:40:
0c:7d:46:66:3f:8d:81:9c:a4:69:c6:e6:da:47:fe:
79:73:cb:7c:fa:7d:7e:22:7d:f8:f2:12:72:6b:63:
37:9c:ce:46:cf:87:c4:c3:b4:dd:03:d2:ec:3c:eb:
b1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:28:48:01:9B:59:86:3B:BE:2D:AC:A7:43:63:D6:26:DA:F1:8F:9E
X509v3 Authority Key Identifier:
keyid:FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:09:3f:93:5c:23:53:e3:1a:30:e4:0b:b0:26:f4:d9:b9:55:
69:a2:73:35:28:5d:12:3f:78:03:fd:4c:f3:b6:17:d5:9b:c9:
c1:30:d2:07:cc:74:80:1f:97:8e:a9:f8:b5:37:5b:0f:d8:e1:
65:44:f1:ce:ae:8b:44:86:eb:a5:f2:fa:6c:46:e6:1b:b8:ce:
1b:64:fa:06:17:f2:b9:e5:e9:fd:db:d1:6b:b4:eb:cb:c8:bc:
0b:72:a2:3d:45:97:01:8f:a5:32:8a:06:14:f5:d9:e2:00:e6:
ae:c9:81:a0:5a:c8:3b:ec:1a:c6:18:8a:e3:79:e0:90:3f:d2:
8d:e5:a7:59:35:c1:14:3d:8c:7b:49:b4:e3:db:54:58:52:d1:
7a:cc:1a:8d:76:37:2a:45:83:ba:3b:c0:31:88:eb:0a:2a:c0:
8d:c1:45:f6:28:be:0e:40:6d:81:a5:05:c5:65:15:ad:0e:2b:
32:2f:c3:80:73:f6:d3:66:14:a0:e5:b9:92:8f:2d:d3:64:37:
64:4d:2e:3e:07:01:3c:86:67:16:fc:92:e2:85:2c:57:70:38:
44:4e:ab:7b:c0:03:ca:11:ad:cb:bd:a2:f6:3e:1b:d1:d7:32:
39:5a:e1:65:f0:21:9b:07:e4:e5:2c:ff:a7:7d:d8:9a:60:09:
ff:4f:52:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:37:10 2025 by rpki-client