Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
File: 8AI84rpaHU_QpeIn3nTLxB0rucg.mft (raw, json)
Hash identifier: RTdOp7IscLyeV3P7gEFESGN9G1aJym0RydAbixZmJxc=
Subject key identifier: FE:E6:6C:DD:93:E3:3B:91:CD:18:B6:40:7D:91:EC:9A:3B:54:6B:35
Authority key identifier: F0:02:3C:E2:BA:5A:1D:4F:D0:A5:E2:27:DE:74:CB:C4:1D:2B:B9:C8
Certificate issuer: /CN=f0023ce2ba5a1d4fd0a5e227de74cbc41d2bb9c8
Certificate serial: 019849D31E242C0661DE8AD7B62BD743D02B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
Manifest number: 134A
Signing time: Sun 27 Jul 2025 03:00:29 +0000
Manifest this update: Sun 27 Jul 2025 03:00:29 +0000
Manifest next update: Mon 28 Jul 2025 03:00:29 +0000
Files and hashes: 1: 8AI84rpaHU_QpeIn3nTLxB0rucg.crl (hash: KxzvmZCN7bbrAAzxwlt+yDTHSzypCcntydwrtgiIKCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:1e:24:2c:06:61:de:8a:d7:b6:2b:d7:43:d0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0023ce2ba5a1d4fd0a5e227de74cbc41d2bb9c8
Validity
Not Before: Jul 27 03:00:29 2025 GMT
Not After : Jul 28 03:00:29 2025 GMT
Subject: CN=fee66cdd93e33b91cd18b6407d91ec9a3b546b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9c:65:be:5c:ff:ec:10:d6:8d:cb:8c:fa:2b:
38:f9:b4:b9:e4:a1:7b:c2:26:08:ea:0e:ce:03:0c:
88:43:80:3f:f9:60:e3:c5:6c:e5:6b:2e:a6:34:a1:
47:ae:ef:86:c4:fa:81:06:21:8d:3b:b4:7d:c7:7e:
42:c5:3e:c0:93:b5:54:e9:df:22:f5:33:c3:ab:45:
51:7f:30:55:4c:1f:71:7e:0e:21:bd:31:7f:74:75:
c0:d5:ae:81:a2:f3:d2:74:43:22:5d:ac:47:d2:cf:
21:1f:42:19:13:8d:1e:a7:e4:51:9f:77:c0:97:7b:
9e:b5:e0:be:24:5b:44:22:8f:f8:a6:d8:3b:eb:7d:
66:0a:e4:05:c0:c7:21:7a:69:b7:63:88:55:df:4d:
c3:2a:b4:65:65:4c:9f:89:c9:c8:4e:6e:5a:58:63:
8b:e9:b9:b8:c0:53:83:23:6a:36:de:17:50:75:48:
c0:fb:c9:a6:8f:b4:49:d7:7a:17:be:30:51:75:b8:
5f:03:c8:24:f5:28:c9:3b:1f:23:4e:06:ac:f2:9e:
67:1a:0a:f2:20:73:fc:af:8b:99:c7:fd:dd:e0:50:
5c:1c:80:ce:d8:1c:4a:35:f6:e3:a8:cc:48:03:a3:
f7:b5:8a:2c:0f:c1:6f:ad:fd:fa:9c:91:90:83:d1:
cf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E6:6C:DD:93:E3:3B:91:CD:18:B6:40:7D:91:EC:9A:3B:54:6B:35
X509v3 Authority Key Identifier:
keyid:F0:02:3C:E2:BA:5A:1D:4F:D0:A5:E2:27:DE:74:CB:C4:1D:2B:B9:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0d:16:98:25:a1:ef:31:ff:08:6b:76:56:0c:c6:1d:05:6f:
90:08:40:9b:79:09:fe:37:ea:2d:3c:c7:c9:2d:a6:ab:bb:e2:
28:31:12:92:ce:19:da:33:32:b5:c0:c6:4c:dd:8b:c4:fb:a0:
c0:f4:e3:4e:53:3c:68:93:a2:c2:2b:72:da:0e:df:8a:e2:f0:
11:03:2c:de:2c:01:b0:b6:33:6a:76:d6:5d:11:81:2d:2c:91:
12:bd:f3:81:6a:76:12:9d:69:49:de:50:42:5a:35:ad:e7:f4:
74:0c:b5:39:8f:37:cf:36:b5:d6:c2:7c:2c:a3:a4:23:c7:8f:
92:d6:2c:4f:43:2f:82:bf:51:98:87:db:cf:bf:1c:3c:6a:bd:
9c:0d:d0:15:6d:fb:a6:20:b8:38:43:47:a0:76:be:19:44:35:
16:f3:df:8f:ec:5b:1b:f8:06:e8:a3:ec:d9:b7:50:44:23:70:
0e:d3:86:2f:1c:5e:77:97:93:18:28:9d:8d:e6:03:1f:53:be:
f1:ae:70:bd:d3:c7:6e:9f:9e:53:3f:65:bb:5b:1d:99:72:4c:
57:7d:39:62:eb:cf:a5:09:c4:59:a7:04:34:f7:7b:88:f8:6a:
4b:d2:58:9d:df:31:5b:1b:87:00:c8:3f:5c:a4:a4:69:ff:d9:
f9:8a:6d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:25:41 2025 by rpki-client