Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
File: 1-89zN262Px3PsnBAK_3PMDH12CU.mft (raw, json)
Hash identifier: Ta8JEbLHyeO+ioKdqJKIY+F7uVXzqs5eT0/h/NgyL2E=
Subject key identifier: 3B:A8:02:51:15:35:86:77:75:95:D5:4B:33:3E:C0:0B:21:32:60:E8
Authority key identifier: FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
Certificate issuer: /CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Certificate serial: 019A71B940798E403714BD988D15C7B05657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:02:37 +0000
Manifest this update: Tue 11 Nov 2025 07:02:37 +0000
Manifest next update: Wed 12 Nov 2025 07:02:37 +0000
Files and hashes: 1: 1-89zN262Px3PsnBAK_3PMDH12CU.crl (hash: SMUfvUMRQGuieYA6iNTIj71HtnT8HocxVu8chm7beR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:40:79:8e:40:37:14:bd:98:8d:15:c7:b0:56:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Validity
Not Before: Nov 11 07:02:37 2025 GMT
Not After : Nov 12 07:02:37 2025 GMT
Subject: CN=3ba80251153586777595d54b333ec00b213260e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fa:0b:18:f6:1f:c5:b8:ce:2d:b3:2c:a4:6e:
54:46:e2:31:65:33:78:6b:99:e8:5b:c1:37:6f:c2:
c8:f2:02:26:87:6f:41:98:16:04:68:1c:87:86:67:
cf:1e:9d:db:35:7b:07:d8:dc:cb:04:0d:88:34:f9:
9e:bc:e9:3f:a2:71:b8:fd:ba:a6:eb:c7:1a:1f:45:
a7:f1:7e:fe:39:fb:31:f2:43:af:80:97:59:f6:02:
48:a8:d0:a1:9d:26:6b:c3:47:07:0f:d0:80:e0:e5:
c9:51:39:02:12:75:bb:ac:ce:e9:70:aa:f6:c2:f1:
c2:5f:0c:f9:38:99:f5:d7:0a:de:a6:23:a1:a2:35:
51:8a:f3:1b:27:32:18:65:27:5d:8f:91:09:86:2a:
92:07:3f:1f:03:05:16:01:a4:3c:d9:41:1f:59:72:
90:a1:36:36:d2:dc:f1:b0:f0:e3:75:f8:06:8b:81:
18:d4:7c:09:fd:c1:12:af:c7:46:67:0a:57:92:c1:
1b:b9:1d:e4:cc:d6:e6:dc:b5:0e:36:87:2d:9e:58:
a2:6e:12:2b:a2:c0:b1:30:c4:96:bd:b4:65:da:9a:
88:ba:a0:f8:89:25:69:65:e2:94:c2:f3:ee:dd:3e:
cd:84:38:46:16:77:c0:e5:1b:b6:e8:0b:54:ef:ce:
ac:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A8:02:51:15:35:86:77:75:95:D5:4B:33:3E:C0:0B:21:32:60:E8
X509v3 Authority Key Identifier:
keyid:FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:4a:a6:81:3f:f1:cb:ec:b4:cc:54:fb:56:ff:87:26:22:2d:
f3:b4:e9:15:82:e5:49:17:2a:46:11:b3:99:d4:62:fc:a1:84:
53:23:00:47:4c:09:de:a5:25:f7:9f:23:1c:f3:13:9f:21:58:
ca:94:37:b0:c5:58:54:66:fe:a6:38:fa:34:49:79:7b:d5:fd:
5f:cd:6e:2b:51:9e:15:c7:33:d8:87:c8:a7:ea:2a:18:62:65:
07:47:6a:e6:a3:29:41:6a:36:b3:73:fb:6a:05:c3:ee:a9:76:
78:15:68:33:0d:c1:c1:5a:23:2f:13:9a:b5:eb:10:53:2b:ea:
98:84:82:82:61:41:75:79:79:26:d3:e5:aa:44:59:88:a7:ad:
f3:ca:81:e9:02:44:77:26:44:a4:fe:80:26:9d:26:54:87:e5:
11:6d:fc:4c:76:7b:38:73:ad:13:dd:41:a3:d9:41:8f:b7:a7:
e2:2a:7c:e0:4d:12:40:c5:7e:2a:16:34:4a:93:02:ab:38:f7:
2a:cf:62:a5:98:d7:fa:ac:46:e1:c8:9b:7b:36:66:53:91:d6:
1e:6b:7a:50:66:35:43:cf:97:ae:a6:37:3b:ff:3c:97:e3:37:
d5:b9:45:a9:24:07:ea:04:66:24:be:76:64:b4:1e:e3:96:84:
f1:86:eb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:43 2025 by rpki-client