Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
File: 8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft (raw, json)
Hash identifier: FUR3LTB7Lyvgm/fmXz4nT/xgurrrLPJfZS51CR06US0=
Subject key identifier: B8:1D:DE:5C:4F:6A:4B:A8:81:55:4A:44:5C:2E:70:54:9E:98:08:8E
Authority key identifier: F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF
Certificate issuer: /CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff
Certificate serial: 019922556116A18DB57C6DE30531876376D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
Manifest number: 074D
Signing time: Sun 07 Sep 2025 04:00:44 +0000
Manifest this update: Sun 07 Sep 2025 04:00:44 +0000
Manifest next update: Mon 08 Sep 2025 04:00:44 +0000
Files and hashes: 1: 8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl (hash: XGvEcbyagXniGbSIZ2yit4aVPmN+HyIpGn2ZAOLhuDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:61:16:a1:8d:b5:7c:6d:e3:05:31:87:63:76:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff
Validity
Not Before: Sep 7 04:00:44 2025 GMT
Not After : Sep 8 04:00:44 2025 GMT
Subject: CN=b81dde5c4f6a4ba881554a445c2e70549e98088e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a5:b4:12:18:14:5a:9d:85:42:0b:33:32:22:
df:ab:39:f8:f5:ed:0b:47:19:35:27:02:d0:f1:b7:
39:c3:af:1c:a7:17:df:9b:d3:df:cd:16:7b:aa:24:
59:4c:55:d7:d0:e2:9e:53:2f:20:c3:37:b8:56:07:
93:90:cf:5e:cd:a4:c5:77:c1:04:98:37:b6:c3:15:
33:9f:d7:f5:71:8f:a0:29:64:27:e6:2a:b6:f5:06:
49:82:53:90:10:6f:8b:b8:1f:e9:3f:dc:b6:7d:bf:
76:71:5a:1c:cc:a5:d0:3f:64:cb:e0:e7:f1:42:e1:
76:01:c8:3f:62:9c:42:91:8b:22:f1:c3:85:bb:6e:
64:8b:87:79:10:14:b3:3d:f4:37:a2:51:59:8a:19:
62:3b:4b:ec:87:aa:56:55:4c:33:6a:ac:d5:17:10:
63:38:f4:ce:f9:2f:e7:98:f9:fa:81:a3:b6:d7:60:
ea:53:b5:19:94:47:d9:6c:85:2f:de:ed:ef:e3:8a:
b0:e0:8e:52:8a:ae:df:8a:80:7c:da:a6:4d:f6:a7:
ad:b3:ae:e1:10:8a:cb:6b:f3:bf:24:2e:d4:d2:b3:
e4:52:37:a5:e4:44:32:88:58:b4:1e:cd:11:ab:f3:
d8:ad:f8:41:7e:12:14:9f:20:2a:b9:03:81:7c:ad:
d0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1D:DE:5C:4F:6A:4B:A8:81:55:4A:44:5C:2E:70:54:9E:98:08:8E
X509v3 Authority Key Identifier:
keyid:F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a4:ed:99:5d:1a:87:3c:7f:3c:2c:d0:7a:11:71:05:15:c6:
2b:72:cf:38:50:d9:ed:9e:b7:55:89:52:0c:18:0c:70:6a:86:
e1:4b:5b:5c:a4:b2:87:9f:74:25:64:06:a0:05:58:d5:08:1d:
3c:c4:4d:77:ec:15:b0:c8:26:e0:2f:52:ee:32:a9:22:34:0e:
1a:dc:55:d1:c2:9a:af:ad:9a:07:58:40:2a:c5:d3:96:c1:15:
e5:9e:1a:35:64:33:66:68:11:23:09:06:11:81:9f:cb:fa:8e:
27:cf:35:22:f4:24:77:63:7e:40:64:59:cb:71:09:e2:2b:8c:
c1:91:8d:a4:57:17:a0:0d:e5:25:4f:79:79:69:f7:f7:c6:fb:
d3:bd:ea:da:dd:92:c7:6b:55:3b:03:d8:d4:9b:1f:fd:09:3b:
14:77:97:53:ee:b5:8c:ed:3c:e5:0b:db:62:6d:ca:92:43:bb:
43:fc:8b:67:89:88:99:ae:47:3b:ff:6a:5c:e6:4f:8f:0f:e8:
1b:9b:9e:a0:9e:3c:1b:34:aa:e8:43:09:8e:7e:fb:30:a9:93:
d4:95:a9:34:72:f8:d6:1f:22:11:f4:42:b9:40:8d:60:53:02:
b3:59:1f:6b:ae:3b:b1:9f:b3:32:88:0d:e0:04:9e:8a:72:0a:
af:a7:20:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:55:32 2025 by rpki-client