Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft
File: 8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft (raw, json)
Hash identifier: 6xUhxGBObuvccYOr9pQ7x4p61l3aSluFNqHQTiiGrkY=
Subject key identifier: 2D:1C:FF:A6:3E:6D:B2:3C:F8:39:87:DE:3A:9B:17:A1:59:4E:60:87
Authority key identifier: F2:BD:D0:DF:C2:1F:CB:2F:41:C8:41:D3:58:96:91:B2:2B:9E:EA:05
Certificate issuer: /CN=f2bdd0dfc21fcb2f41c841d3589691b22b9eea05
Certificate serial: 0198277E271C030A9DFE3FABD566F081609A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8r3Q38Ifyy9ByEHTWJaRsiue6gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft
Manifest number: 2D
Signing time: Sun 20 Jul 2025 11:00:35 +0000
Manifest this update: Sun 20 Jul 2025 11:00:35 +0000
Manifest next update: Mon 21 Jul 2025 11:00:35 +0000
Files and hashes: 1: 8r3Q38Ifyy9ByEHTWJaRsiue6gU.crl (hash: g+u3YppepIcIQ0/HgYprSd7miJHXNPfJaLGSnml4K9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8r3Q38Ifyy9ByEHTWJaRsiue6gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:7e:27:1c:03:0a:9d:fe:3f:ab:d5:66:f0:81:60:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bdd0dfc21fcb2f41c841d3589691b22b9eea05
Validity
Not Before: Jul 20 11:00:35 2025 GMT
Not After : Jul 21 11:00:35 2025 GMT
Subject: CN=2d1cffa63e6db23cf83987de3a9b17a1594e6087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:2a:a8:d8:8d:a7:40:86:d8:17:8c:fc:1e:
c9:d3:c5:a0:74:fd:94:44:55:78:3f:2f:87:28:d1:
55:74:ca:ff:43:c9:2b:21:5c:64:13:a2:8f:37:02:
21:08:54:fc:b5:e6:61:ea:ec:e3:f4:8f:78:7a:ce:
c8:1d:8c:8a:1f:d7:56:e1:63:3e:19:ec:bb:43:6b:
d6:15:f6:5f:4e:31:ad:54:40:ff:4b:9a:d3:b4:48:
bd:fe:9b:5d:3b:ff:ff:30:af:59:ea:4a:d4:9a:02:
cc:64:66:2e:88:3d:cd:7d:44:35:7f:b6:ef:d1:98:
07:06:8f:59:73:ef:96:d4:fa:64:13:56:85:ac:aa:
89:72:0d:05:ac:69:49:35:a8:6a:d9:b7:1c:bd:87:
51:a0:bd:95:a8:98:e6:18:8e:db:62:d9:98:42:da:
92:e6:22:ea:e9:bc:b4:96:24:f5:f6:3b:e9:57:6d:
23:e9:4a:fd:bc:a1:f5:bc:36:a4:77:a7:97:8f:5d:
07:ca:99:65:65:5a:d2:6d:c7:b1:ca:cb:ab:1d:89:
3f:46:e1:d0:14:a4:cb:20:53:6d:dd:c8:94:20:3b:
c5:85:eb:a6:17:0a:cb:0d:f0:aa:f4:72:9f:3d:04:
c9:6e:eb:8a:69:0b:57:57:4f:ce:e8:43:c2:04:3a:
ae:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1C:FF:A6:3E:6D:B2:3C:F8:39:87:DE:3A:9B:17:A1:59:4E:60:87
X509v3 Authority Key Identifier:
keyid:F2:BD:D0:DF:C2:1F:CB:2F:41:C8:41:D3:58:96:91:B2:2B:9E:EA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r3Q38Ifyy9ByEHTWJaRsiue6gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:72:ef:b5:2f:94:a0:2f:06:a5:44:c2:11:97:5b:b6:ee:7b:
35:91:6c:74:26:2b:75:a0:bc:f8:3d:d4:d9:84:8c:2e:b4:18:
df:cb:73:8d:cd:ab:cd:7b:d6:51:b3:dd:c8:24:ce:f4:dd:a5:
e5:b6:d8:91:3e:58:95:43:9d:50:a0:1b:ac:04:a6:7c:8d:88:
4e:fe:45:88:c4:74:1f:e5:58:6f:8c:e5:0d:1a:b1:cc:90:d1:
fc:97:02:34:06:97:37:96:11:2d:bf:25:56:1a:c2:e1:a3:5a:
b1:d3:76:14:ab:3f:c4:2c:69:ed:63:62:1f:0c:9c:34:f7:24:
ad:c6:bf:ed:66:29:2f:7c:44:5d:c8:0e:1a:0c:a9:36:e7:2b:
f6:7f:cf:c1:d0:90:5c:c6:6e:de:30:c8:0f:37:6b:f3:e9:79:
ab:f9:dc:4f:f4:94:54:3d:43:fd:f6:bb:4a:50:ac:3a:68:d1:
2b:27:d1:a6:d5:64:f7:9b:2b:39:35:4f:8c:f2:b6:2f:0b:ed:
db:48:75:c7:9d:6a:02:8f:b3:50:21:e2:92:c7:dd:84:33:94:
d9:62:e3:fd:3b:75:a3:25:8e:36:bc:d6:e5:a9:f9:b0:19:be:
8d:9c:47:d4:77:92:15:49:dd:48:f1:85:dc:89:77:25:aa:b9:
31:3c:68:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:22:30 2025 by rpki-client