Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
File: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft (raw, json)
Hash identifier: xbqME1duBIRJdeGW3ssAtSgw8Jp7NZ9Y0vIOuWb2KsQ=
Subject key identifier: EC:3A:EF:B4:C7:70:8F:8D:FA:91:E5:5E:4C:6E:EF:D8:B3:8F:01:41
Authority key identifier: F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
Certificate issuer: /CN=f32220b696e2e766516c05743d137dbbc17fd261
Certificate serial: 0199239FBEE6ADE3651639F16C30B628B7E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 10:01:35 +0000
Manifest this update: Sun 07 Sep 2025 10:01:35 +0000
Manifest next update: Mon 08 Sep 2025 10:01:35 +0000
Files and hashes: 1: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl (hash: HkvNimmDCD9wYLH/FvRFpF9d4El0C08vhMSwAyMAbgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:be:e6:ad:e3:65:16:39:f1:6c:30:b6:28:b7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32220b696e2e766516c05743d137dbbc17fd261
Validity
Not Before: Sep 7 10:01:35 2025 GMT
Not After : Sep 8 10:01:35 2025 GMT
Subject: CN=ec3aefb4c7708f8dfa91e55e4c6eefd8b38f0141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:26:a5:a5:50:46:95:eb:c6:da:b4:93:3d:e3:
63:0a:f8:d1:fb:9d:66:33:6b:44:ca:aa:f9:41:b4:
7f:a9:16:34:f6:c3:11:d5:6f:de:24:05:3b:bd:03:
ae:2d:96:a2:8a:a5:1d:72:02:cd:f7:06:91:50:65:
62:96:ad:90:9f:bd:c0:45:03:87:28:df:aa:00:ab:
8d:67:d1:dc:3e:6c:90:82:1b:f0:d7:34:d6:fc:89:
05:1f:d7:86:a2:6d:a3:68:7d:cf:d5:95:57:3a:ac:
ac:1d:6f:17:c7:8b:ca:48:eb:c6:e4:98:7f:f1:4f:
3f:84:c9:64:73:d9:88:9f:37:0a:90:31:80:39:f4:
35:60:16:3e:cc:6c:97:4a:49:5e:6d:84:ba:30:12:
a8:44:12:02:71:c7:c9:ec:ea:ea:3b:de:a0:59:b8:
53:71:70:24:c5:ab:d4:c6:63:47:9b:5c:e7:3f:a1:
ac:a7:8c:f2:aa:ba:f5:fe:ac:12:d2:9c:48:d2:1b:
85:ae:94:bc:6a:a4:68:17:2c:04:7b:4d:d6:be:6d:
b0:3b:cf:26:cd:07:cf:17:5f:80:1c:2a:9f:f5:89:
9f:0b:57:d9:68:9f:15:cb:2d:61:e3:5d:8d:86:c2:
8a:cf:6f:8b:da:8a:28:f4:cc:4c:b5:86:92:ae:28:
6c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3A:EF:B4:C7:70:8F:8D:FA:91:E5:5E:4C:6E:EF:D8:B3:8F:01:41
X509v3 Authority Key Identifier:
keyid:F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:40:39:84:00:a5:3f:23:7f:3c:25:4b:d4:25:87:1c:73:ef:
43:82:39:25:88:99:0a:9a:27:9d:61:db:06:38:be:11:5c:45:
51:40:7f:aa:ae:02:20:7d:32:20:1b:44:3f:1d:b2:0e:0f:be:
13:7e:17:7e:0b:c5:bd:26:9e:7f:c2:35:0c:63:e4:24:e5:d4:
ed:cf:94:15:37:1c:8f:3e:8a:c1:0f:45:9a:ef:27:14:d0:07:
77:3b:72:25:8a:c2:46:9f:6c:0b:97:77:ea:49:36:c6:3a:ff:
ac:31:9b:52:05:83:a5:0c:91:c8:89:66:52:2b:07:32:80:ad:
7f:fa:93:3c:9a:47:5e:52:44:43:37:25:b6:3c:bc:dd:41:6d:
0b:94:60:fd:c7:65:78:fd:83:32:13:f9:f0:ab:ab:af:8b:91:
bc:b5:7b:21:95:22:85:ad:02:68:99:51:41:1d:51:cc:7e:ea:
b6:a3:ed:47:88:aa:a6:5e:0d:22:57:1d:69:d2:ea:69:18:e9:
20:10:2b:54:04:62:ba:d8:04:c4:6e:43:c5:6e:17:f4:55:ec:
4a:34:49:6c:d8:e3:84:da:ab:72:fd:14:ab:fb:82:8b:39:63:
aa:ff:36:96:c6:fa:a5:e9:3e:0e:c6:5a:17:17:3e:05:9f:9c:
1b:22:3a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:18 2025 by rpki-client