Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
File: 8wmyGYl7xcKttIcCrC2jDeVj08s.mft (raw, json)
Hash identifier: VagIEbuLOpKWhgOB4n29shPpbDT9feFLV8tXLTOMDFs=
Subject key identifier: 98:11:15:55:ED:9E:27:1D:21:C0:41:40:31:8D:57:58:2A:20:C0:93
Authority key identifier: F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
Certificate issuer: /CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Certificate serial: 019921B1A1330A138A7BACA8E230D2D03EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
Manifest number: 13A7
Signing time: Sun 07 Sep 2025 01:01:53 +0000
Manifest this update: Sun 07 Sep 2025 01:01:53 +0000
Manifest next update: Mon 08 Sep 2025 01:01:53 +0000
Files and hashes: 1: 8wmyGYl7xcKttIcCrC2jDeVj08s.crl (hash: KEyOkW9vBcntwDZ52TXQVc5py6c9tm7vkH8V2wFhzNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:a1:33:0a:13:8a:7b:ac:a8:e2:30:d2:d0:3e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Validity
Not Before: Sep 7 01:01:53 2025 GMT
Not After : Sep 8 01:01:53 2025 GMT
Subject: CN=98111555ed9e271d21c04140318d57582a20c093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:8e:3d:a8:6c:13:59:32:c8:61:01:4a:47:
81:d7:88:42:7e:9a:24:6d:7c:f7:03:94:55:93:c0:
91:c3:f6:4d:9d:e6:65:84:95:bc:3f:30:f7:c3:3c:
62:dd:2d:66:9f:9a:ac:f6:78:22:b7:f3:30:d2:80:
34:95:bc:cd:19:fd:e6:a8:b5:17:1b:18:ae:be:bc:
7b:49:02:9b:fe:ed:86:dd:ca:41:f3:65:82:65:5d:
58:d5:a7:42:2d:2a:43:f8:ec:b9:6d:96:09:93:46:
e6:b5:ab:9f:64:0f:3b:d6:b9:70:fd:48:8f:0e:69:
38:17:5b:1d:5d:bb:f2:ad:95:ee:34:3b:68:bd:de:
03:83:e0:a5:a3:8f:26:03:81:27:c1:24:08:07:6b:
eb:91:e9:82:aa:d2:b3:e3:0c:d6:d8:bf:d5:96:02:
89:2e:85:4f:95:24:15:db:fc:82:11:08:36:30:5c:
15:36:0e:a4:98:20:56:d8:b0:0b:71:0b:ff:5e:3e:
65:a0:0c:78:f3:36:1d:15:e9:7f:d0:9e:43:e5:1e:
42:97:c5:3a:0b:8e:2f:f1:73:f0:ad:07:d6:bb:4a:
e3:c8:27:db:bf:cb:7c:ea:2f:9c:3d:a9:5f:d1:fb:
3a:2c:92:0c:1d:ce:3e:83:54:3b:c9:4a:d3:90:99:
cc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:11:15:55:ED:9E:27:1D:21:C0:41:40:31:8D:57:58:2A:20:C0:93
X509v3 Authority Key Identifier:
keyid:F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ba:61:01:b7:b3:a6:fc:bc:aa:ca:fd:c2:cc:d5:87:34:a6:
41:ef:c7:87:e1:7a:dc:18:0e:78:35:c8:9a:c6:e6:bc:00:01:
cc:e5:9a:4a:af:12:b6:70:53:aa:d7:63:f0:53:ad:77:5c:d0:
67:2c:c3:a6:54:08:ca:28:f5:5e:56:2b:8f:7d:74:39:40:ef:
02:bc:d3:b2:4c:ac:98:a9:8f:65:5b:2a:a5:ba:e5:4f:56:a8:
b4:ed:40:eb:2a:fd:a9:52:0c:25:52:1c:c4:21:f4:ce:f2:16:
55:02:4e:b4:c9:1f:57:70:24:7e:28:a2:2b:af:02:b8:99:eb:
59:6c:34:6c:e4:5a:38:b3:90:4b:a1:87:7e:e4:cd:5e:25:47:
40:48:68:f2:09:b8:2e:49:d2:42:2b:91:b5:41:e6:0f:a0:57:
00:ed:01:89:2b:8f:fc:49:05:6a:6c:2a:11:85:18:3d:34:fd:
4a:e5:68:4c:f7:e5:ea:65:0d:6f:a7:66:dc:a0:18:55:19:25:
7c:2a:7d:37:ee:68:f6:52:34:48:52:47:a9:00:de:b5:43:c4:
e7:25:80:ca:f5:ce:a8:f7:20:d6:ea:ba:15:01:fe:a5:14:05:
fd:00:ac:af:37:9a:e5:d0:7c:bc:a4:b1:f5:6a:69:8a:fd:be:
dc:a2:7a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:25 2025 by rpki-client