Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft
File: 8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft (raw, json)
Hash identifier: N48UNqMy64LJwWMkR/FgA6A6jH1YKbRLXHBPaeR2hS0=
Subject key identifier: C0:EF:99:11:43:82:F8:1C:AB:DA:D6:35:E3:01:9D:D3:1F:99:1B:E3
Authority key identifier: F2:BD:D0:DF:C2:1F:CB:2F:41:C8:41:D3:58:96:91:B2:2B:9E:EA:05
Certificate issuer: /CN=f2bdd0dfc21fcb2f41c841d3589691b22b9eea05
Certificate serial: 0199228C8C4B885DF2CB9A835426AD267853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8r3Q38Ifyy9ByEHTWJaRsiue6gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft
Manifest number: AF
Signing time: Sun 07 Sep 2025 05:01:00 +0000
Manifest this update: Sun 07 Sep 2025 05:01:00 +0000
Manifest next update: Mon 08 Sep 2025 05:01:00 +0000
Files and hashes: 1: 8r3Q38Ifyy9ByEHTWJaRsiue6gU.crl (hash: 5FTI0tikfZ2S3qnY04f+DmsEvGS/uW4Ikh9PSJ6HTuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8r3Q38Ifyy9ByEHTWJaRsiue6gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:8c:4b:88:5d:f2:cb:9a:83:54:26:ad:26:78:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bdd0dfc21fcb2f41c841d3589691b22b9eea05
Validity
Not Before: Sep 7 05:01:00 2025 GMT
Not After : Sep 8 05:01:00 2025 GMT
Subject: CN=c0ef99114382f81cabdad635e3019dd31f991be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:7b:ad:8e:44:7b:a4:6d:8f:d0:ac:94:a9:
5a:d7:58:c0:09:e5:07:ef:a8:b1:a2:78:9a:e2:fd:
4e:1b:53:b6:2a:b2:b0:93:70:bc:d0:bc:95:46:f5:
92:f5:99:76:96:3b:c3:ed:d3:c6:ee:11:d9:62:d0:
b4:b8:ce:a8:a8:a4:06:54:c9:85:6d:cb:5c:43:6a:
84:80:4a:61:37:18:80:ec:d0:5d:b1:aa:f8:82:d6:
64:7f:7a:c7:04:f9:db:e9:8b:97:15:1f:69:50:6e:
4d:94:9a:e4:ca:13:f1:57:24:c0:60:7e:86:e5:39:
1e:3f:a7:82:63:f5:79:d4:ea:71:20:ee:7d:89:9f:
89:bb:01:88:6a:7e:46:05:92:e3:e8:97:0d:39:74:
f0:5a:a4:9f:bf:86:13:16:1a:85:d5:b8:ad:45:63:
4f:19:d8:cc:a5:03:8d:69:78:fc:ea:9b:89:90:90:
b6:55:0c:63:d6:96:0a:ff:bf:19:51:fd:83:8b:b9:
d7:67:3b:4b:d9:ee:bf:36:6a:12:ad:bc:a0:99:00:
11:71:72:2e:d0:aa:3d:bf:e2:9f:48:b8:cd:5b:d4:
31:6f:9a:4a:92:8b:e9:bb:64:84:e9:8b:38:ac:44:
7d:01:c2:f7:c2:91:c8:a3:3d:17:89:0f:31:a3:8e:
3c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EF:99:11:43:82:F8:1C:AB:DA:D6:35:E3:01:9D:D3:1F:99:1B:E3
X509v3 Authority Key Identifier:
keyid:F2:BD:D0:DF:C2:1F:CB:2F:41:C8:41:D3:58:96:91:B2:2B:9E:EA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r3Q38Ifyy9ByEHTWJaRsiue6gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:21:82:8c:f0:92:b3:4a:ce:1c:06:27:5f:15:cf:33:4c:ea:
3b:70:c4:73:d6:d7:47:96:b0:03:b9:5f:02:d6:8b:1f:b8:3d:
1b:74:d9:39:ce:f1:11:ae:03:dd:1e:08:86:29:57:70:0d:ab:
be:ac:48:f5:4a:84:fe:11:d5:69:04:a2:73:80:4a:90:2c:55:
e3:f8:60:80:ef:c2:3c:85:36:bc:57:ac:e5:f9:d3:a1:71:8b:
dc:a1:94:c6:7b:17:0e:d0:e0:84:76:72:91:fd:0a:e6:1c:91:
33:60:28:5e:b8:70:63:06:fc:cf:70:bf:ca:af:5c:8f:50:b8:
fa:e2:dc:19:9f:b1:9f:4e:f5:41:36:75:6c:88:64:ba:34:2e:
0f:ff:e5:99:5d:5f:e4:c6:d8:3b:e9:d1:75:93:1f:2b:fb:0d:
3c:dd:9a:b0:81:f6:8e:32:9f:6d:dd:99:9a:93:ef:ec:b6:cc:
cf:90:11:ed:4b:ca:19:80:b0:34:e6:c2:11:90:89:be:eb:a3:
fe:19:64:28:61:15:7d:f9:a7:9d:0e:70:ad:11:0b:64:00:e2:
b3:8d:54:6d:2c:60:0d:99:b8:a3:d0:7a:7f:ba:82:29:d5:13:
b0:a6:f2:34:ec:cb:86:00:ae:8c:d9:6d:8a:a5:7e:19:6b:93:
45:d0:69:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:18 2025 by rpki-client