Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
File: 8_N8e7MVIGk0AdPGVyftXKpx3kM.mft (raw, json)
Hash identifier: 9PJ1xqW8jimTci4B9i0h4jPmPvlEC+kqdJ9WYgETaHA=
Subject key identifier: 1A:93:B7:27:69:19:D4:A4:5A:3E:94:A8:A8:DB:F0:17:21:28:E9:55
Authority key identifier: F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43
Certificate issuer: /CN=f3f37c7bb31520693401d3c65727ed5caa71de43
Certificate serial: 01984589BBE30E188E49A6ADAA21BF0081CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 07:01:50 +0000
Manifest this update: Sat 26 Jul 2025 07:01:50 +0000
Manifest next update: Sun 27 Jul 2025 07:01:50 +0000
Files and hashes: 1: 8_N8e7MVIGk0AdPGVyftXKpx3kM.crl (hash: lAD3/d38MJcxIc59mFE5R3SVZT6BQKtwAxCdI+LUgK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:bb:e3:0e:18:8e:49:a6:ad:aa:21:bf:00:81:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3f37c7bb31520693401d3c65727ed5caa71de43
Validity
Not Before: Jul 26 07:01:50 2025 GMT
Not After : Jul 27 07:01:50 2025 GMT
Subject: CN=1a93b7276919d4a45a3e94a8a8dbf0172128e955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:8c:43:6f:8c:19:c5:be:01:4d:c9:41:59:
d7:f4:48:cc:35:87:cd:16:a1:e2:72:b5:65:bf:8c:
da:f9:6e:97:30:ed:4a:e7:5f:3d:2c:6c:6d:66:65:
0f:69:46:3b:f3:26:1c:21:d5:77:fb:d3:83:39:01:
40:e2:2a:14:7f:dc:97:9f:ec:75:6e:49:dc:10:9d:
d4:51:20:97:6e:25:70:d2:3e:39:4c:d3:5f:d5:d2:
61:03:a7:dc:72:88:b8:99:b2:79:ff:41:b8:d9:c9:
80:bb:e2:8a:09:d1:cf:30:df:da:9b:f8:8a:df:28:
6b:c8:5e:de:4c:a0:14:30:ba:55:b4:a0:2a:ec:5c:
5a:94:d1:bf:cd:6c:b6:5a:9b:70:3e:d6:a4:66:4c:
24:69:e5:47:8e:33:de:f6:2e:c9:56:3a:9c:64:14:
1a:52:6c:18:e1:58:13:cb:8f:45:b8:ae:1d:c9:97:
72:88:ac:be:60:f3:3c:0a:4e:14:64:63:00:cd:12:
38:ab:76:71:0d:03:9d:32:ed:84:96:92:65:2b:e4:
93:c3:bb:27:b3:68:37:ae:6b:a6:41:d3:92:02:7b:
36:8c:38:20:8f:c1:70:b4:5c:8f:b1:7a:7b:b4:6f:
e8:0f:c6:73:2b:c5:2e:22:72:dd:19:51:eb:6a:bf:
3f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:93:B7:27:69:19:D4:A4:5A:3E:94:A8:A8:DB:F0:17:21:28:E9:55
X509v3 Authority Key Identifier:
keyid:F3:F3:7C:7B:B3:15:20:69:34:01:D3:C6:57:27:ED:5C:AA:71:DE:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_N8e7MVIGk0AdPGVyftXKpx3kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b7f98-6369-4676-92c3-d35e8fb46ebf/1/8_N8e7MVIGk0AdPGVyftXKpx3kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3d:b8:ad:2c:33:e6:3e:2a:ea:a1:70:15:cb:10:46:a1:d2:
1c:c8:7f:82:2d:d2:66:06:e7:fa:96:45:dc:cd:be:34:db:ab:
07:2d:82:7e:f4:f2:ad:59:1d:42:6b:02:66:48:89:47:3c:eb:
6b:78:db:87:8b:01:3a:8e:20:b0:d7:f3:11:6c:94:45:62:0c:
64:c3:64:7f:be:d0:07:62:3f:db:69:5c:23:8c:2c:7f:0b:d2:
6d:b0:bc:c3:f8:e3:2d:f8:4d:39:d7:e4:f0:ae:3e:52:cb:90:
e4:19:cf:3e:27:29:62:2f:e8:76:8b:f2:94:c5:87:6e:51:7d:
01:db:7b:6b:44:21:68:ea:c9:b4:f3:cd:03:e2:df:89:6f:13:
0a:60:86:53:be:b3:f3:97:8a:b8:a3:f6:fe:cb:d4:d5:86:96:
5b:60:af:ff:16:38:9b:9b:7e:c6:fd:dc:33:db:c0:bc:dc:d3:
af:bc:87:b1:c0:22:a6:9b:a7:1f:43:8d:d4:a2:c3:de:61:0a:
0f:16:e2:d1:c1:46:30:ae:0c:d0:94:71:91:40:ac:96:94:3d:
9f:59:23:eb:cd:69:e2:15:36:0e:fb:a6:44:e3:4f:70:8a:75:
1b:66:74:a3:58:11:78:48:c6:79:a5:7c:36:c8:6e:9e:2d:1e:
35:f5:a8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:30:24 2025 by rpki-client