Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
File: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft (raw, json)
Hash identifier: W8Pxqa/KguzJE10c0cAXKsPM/mpsn385etKjbOOFcvo=
Subject key identifier: F7:36:85:F1:B9:24:9E:0F:6A:4B:56:D5:95:6D:95:02:13:80:D5:FE
Authority key identifier: F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
Certificate issuer: /CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Certificate serial: 0198443EE99D3C20652A16B9557269FFE47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
Manifest number: 04E8
Signing time: Sat 26 Jul 2025 01:00:30 +0000
Manifest this update: Sat 26 Jul 2025 01:00:30 +0000
Manifest next update: Sun 27 Jul 2025 01:00:30 +0000
Files and hashes: 1: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl (hash: L2h0uuZOnOA5FZl+1gawWTsc+cADNGBOvQ4Y7Bb/2a0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3e:e9:9d:3c:20:65:2a:16:b9:55:72:69:ff:e4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Validity
Not Before: Jul 26 01:00:30 2025 GMT
Not After : Jul 27 01:00:30 2025 GMT
Subject: CN=f73685f1b9249e0f6a4b56d5956d95021380d5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7b:fd:44:11:a2:24:84:c5:1f:c2:0c:8c:7d:
46:15:0f:ff:45:72:db:fe:06:7c:15:ce:63:45:50:
7f:31:57:77:11:0f:be:af:1b:0b:0b:de:ca:bd:f2:
b9:c4:fe:9a:80:79:b6:1e:d5:6f:07:57:f1:96:b1:
4e:1f:0b:54:e3:06:17:07:20:a8:c2:10:3b:0c:39:
8c:54:7a:0d:e9:1b:54:50:47:68:70:4d:be:62:5c:
e8:fc:31:39:55:80:64:4d:35:cd:fa:6c:5c:87:3a:
89:d9:42:e4:90:e1:4b:04:6a:f0:99:1f:95:aa:1b:
e0:c5:26:53:99:5b:f5:71:f4:a9:2f:a9:5a:4f:45:
b6:9c:1a:8d:09:66:95:c3:bc:6f:55:df:14:4e:63:
39:c0:6d:e6:7b:2b:38:fd:19:72:0e:46:67:bf:48:
ac:e0:95:c3:cd:07:77:4a:2d:dc:4e:c0:5f:91:bb:
91:97:b1:63:06:96:c6:6e:6f:fa:14:ed:de:71:f2:
41:9e:56:f1:29:7f:17:15:45:d3:71:99:14:f0:8b:
32:29:dd:e4:9c:ca:1c:fa:63:fd:23:1d:e3:f4:5f:
38:5a:0b:ac:ff:7e:ce:76:7f:95:49:0b:c5:c6:2a:
21:df:c7:cb:44:72:ad:9f:c7:60:4c:6d:da:de:90:
90:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:36:85:F1:B9:24:9E:0F:6A:4B:56:D5:95:6D:95:02:13:80:D5:FE
X509v3 Authority Key Identifier:
keyid:F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:37:c9:6c:5c:90:04:09:c7:b7:d5:3e:71:0e:1f:fe:b7:f0:
19:b5:56:e2:e5:0e:c2:8c:14:cc:86:93:6a:05:58:1d:87:3c:
b2:d4:41:c5:d7:99:8b:a8:83:d0:ac:31:8c:68:cc:c4:ae:91:
99:08:ac:37:40:c9:f7:fc:25:3b:c7:50:96:80:00:1a:cc:88:
e3:54:70:7f:3b:d3:eb:4c:78:76:95:8c:02:29:15:83:61:69:
84:a3:ce:26:1b:45:ef:8d:c0:28:8b:4d:f0:67:cf:e9:c9:41:
bf:6a:72:90:fd:ce:3b:3e:aa:d3:d2:b8:2b:5c:6d:58:dc:99:
e6:99:d3:1f:28:ab:6d:e0:36:95:5c:3f:8d:56:d9:f5:91:27:
3b:4d:ab:09:ad:7a:d1:2b:d8:c3:9f:9f:e7:90:00:e0:55:00:
57:24:ae:a3:19:a2:12:fa:83:c8:67:f0:e9:ea:42:0c:4f:9f:
5b:ae:10:a3:1d:ed:46:6d:26:67:b7:56:81:04:d0:a5:72:73:
46:00:4b:2c:e4:52:9b:be:ed:22:4f:bb:b3:a5:48:67:2b:f9:
49:fb:b4:34:22:a0:7c:62:7f:7b:6f:16:bd:d0:b6:6b:ce:90:
fb:0b:14:d3:0a:6c:f4:b1:82:59:c5:9a:4b:ab:48:84:5a:20:
6c:f1:1c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:13:04 2025 by rpki-client