Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
File: 1-89zN262Px3PsnBAK_3PMDH12CU.mft (raw, json)
Hash identifier: tdE/cunCHou8BNN6zv//G6iFWBbwqX93rt7v3mW+RQY=
Subject key identifier: E7:8E:36:9D:15:37:D4:31:AE:B1:40:60:4E:30:77:C8:52:39:1F:2A
Authority key identifier: FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
Certificate issuer: /CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Certificate serial: 019923A07273786DC7436FE8EAD9FD26B1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 10:02:21 +0000
Manifest this update: Sun 07 Sep 2025 10:02:21 +0000
Manifest next update: Mon 08 Sep 2025 10:02:21 +0000
Files and hashes: 1: 1-89zN262Px3PsnBAK_3PMDH12CU.crl (hash: etG2RGqNQBePm5NoBcqaOZ+lHOD9SUo7Vo8a2CA00TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:72:73:78:6d:c7:43:6f:e8:ea:d9:fd:26:b1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcf73376eb63f1dcfb270402bfdcf3031f5d825
Validity
Not Before: Sep 7 10:02:21 2025 GMT
Not After : Sep 8 10:02:21 2025 GMT
Subject: CN=e78e369d1537d431aeb140604e3077c852391f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5c:32:ff:36:f2:fc:82:35:17:da:4f:41:b8:
15:0b:e0:d0:55:98:dc:f6:63:73:e6:f5:fe:de:5d:
13:22:3d:00:ac:16:ad:63:cd:3a:50:c5:d7:2d:00:
c8:bd:3b:2e:be:e3:51:07:a2:1e:3e:4c:01:c8:d3:
59:d5:3f:e6:1c:c5:28:93:59:a8:58:24:fd:d0:7b:
17:f7:da:bb:2c:62:a0:1f:a8:f7:b8:0e:a7:68:0f:
c7:c0:6d:bb:f0:8f:e8:b9:97:37:53:fb:52:be:d0:
b0:ad:16:3f:0d:5d:08:6c:4b:ee:bd:bb:04:68:d4:
a4:1e:0a:cb:0d:13:d9:fa:31:ca:4d:c1:97:5b:8a:
4c:c2:7f:b8:89:46:a1:b7:42:97:69:d6:89:76:ee:
e2:1a:a3:5b:c7:98:69:19:de:8f:2e:79:f0:f3:6e:
cd:b9:fd:20:dd:6f:69:d9:e9:bd:79:0b:4d:dc:aa:
5c:9e:31:65:db:c9:1a:af:49:aa:84:d9:2f:8a:cd:
85:3b:e3:b1:9e:cc:7d:dd:ab:a5:fb:24:4f:9a:57:
be:03:55:39:c2:75:72:f9:94:ed:15:af:b1:73:b5:
9c:24:80:8c:4b:36:2b:8f:f9:6f:14:04:3d:4b:13:
49:87:90:49:51:24:74:32:d9:57:88:98:ff:8c:0d:
29:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8E:36:9D:15:37:D4:31:AE:B1:40:60:4E:30:77:C8:52:39:1F:2A
X509v3 Authority Key Identifier:
keyid:FB:CF:73:37:6E:B6:3F:1D:CF:B2:70:40:2B:FD:CF:30:31:F5:D8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-89zN262Px3PsnBAK_3PMDH12CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6262b3-f5cc-4868-8b21-9092ccd5d9e3/1/1-89zN262Px3PsnBAK_3PMDH12CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e5:db:cb:81:96:c1:e9:5c:89:34:2c:2c:fe:0b:43:bd:c7:
4b:a7:69:dd:58:42:76:c0:a9:01:2b:68:c8:bc:b5:a4:30:44:
30:2f:05:e8:85:0a:95:52:c5:43:18:fa:4a:2a:8a:16:5c:0e:
82:b8:d4:95:e0:cb:95:4b:4d:92:47:89:ef:61:e2:6b:61:89:
c5:8f:fc:0b:c3:59:38:24:e8:ab:8f:83:05:90:36:9d:99:b0:
d7:b0:10:89:0b:c5:08:f3:ce:94:8d:a9:ab:59:37:00:10:9d:
4b:5a:e6:2c:f4:f1:56:84:42:d8:fd:d4:a3:c1:22:75:8f:6f:
3c:0f:5c:00:d8:8c:50:5d:97:c5:65:97:1f:3a:39:43:51:92:
e2:60:e7:67:c8:82:a3:96:15:d8:dc:97:7b:7d:79:35:9c:83:
18:12:15:8e:c3:d9:ca:66:fb:3f:cd:a4:3a:b5:6e:d7:b6:1a:
87:19:63:d9:83:23:79:0e:a5:d7:30:ee:8f:58:29:8d:77:e3:
6c:de:aa:fe:de:4a:03:81:b4:42:83:72:c7:b5:bd:f1:55:9d:
b3:83:81:3c:00:c6:4a:b7:e8:b9:6d:19:21:97:83:70:32:18:
dd:9d:dd:c9:d7:0b:f1:5b:66:96:b9:4b:cf:a3:9f:d4:68:6b:
71:5f:2c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:43 2025 by rpki-client