Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
File: 8z9sz1fxxI8RwU_QBUBazONtA7g.mft (raw, json)
Hash identifier: upJvLIcOlorhLa++sAOs1zMRXV88tDQRtLzpViZ6npE=
Subject key identifier: 06:4E:98:8F:B1:55:D9:49:68:1B:ED:2D:8C:5A:BB:C0:81:0F:4A:AC
Authority key identifier: F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
Certificate issuer: /CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Certificate serial: 0198D4E041DA95A3A5C597C4867D020EC91C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
Manifest number: 1644
Signing time: Sat 23 Aug 2025 03:02:03 +0000
Manifest this update: Sat 23 Aug 2025 03:02:03 +0000
Manifest next update: Sun 24 Aug 2025 03:02:03 +0000
Files and hashes: 1: 8z9sz1fxxI8RwU_QBUBazONtA7g.crl (hash: 9pmtBi5jY5bLaUN+O4vtlXgGYotYq9JQqNhmAlD4gxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:41:da:95:a3:a5:c5:97:c4:86:7d:02:0e:c9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Validity
Not Before: Aug 23 03:02:03 2025 GMT
Not After : Aug 24 03:02:03 2025 GMT
Subject: CN=064e988fb155d949681bed2d8c5abbc0810f4aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cc:f7:6a:6c:d1:c3:a2:a9:16:3f:0b:8f:cd:
14:f4:3f:83:ef:45:19:f1:50:8f:fb:3b:eb:c2:4e:
71:30:aa:39:3c:92:13:bf:5f:41:46:9f:5e:af:bc:
89:96:d0:39:55:59:cb:e7:40:d3:56:f7:96:f6:69:
dd:8e:26:7a:9c:a7:44:6a:4b:58:30:72:bf:89:70:
1a:20:ec:c3:06:49:18:98:fc:2c:9a:cd:26:4d:ae:
a0:81:5f:e7:eb:5c:38:1a:8d:75:14:d6:17:79:c7:
37:e5:2f:fc:a0:ee:28:c8:d7:11:3c:e9:05:2c:ae:
57:76:8f:a8:5b:c3:94:1e:71:16:ae:f7:bb:87:a0:
84:16:df:ae:11:fc:96:3f:f8:5f:c3:78:8c:17:76:
f1:1b:eb:ae:48:e9:b9:2d:12:74:21:cc:f3:82:c2:
b2:f9:0c:40:75:9a:b9:87:60:96:d1:ac:7e:79:60:
a1:ee:fd:ea:d5:04:31:68:a4:be:dd:c7:92:bd:d4:
7f:e8:9b:a3:0f:85:d7:08:22:5a:42:0d:79:ea:15:
29:fa:c6:ba:21:8a:aa:ca:d1:b2:48:14:89:26:f0:
fb:1a:d7:cb:f1:f3:6e:76:6b:f7:1d:aa:95:c5:68:
5e:3b:45:36:2c:69:68:76:18:5c:f8:fc:9e:c4:c0:
7e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4E:98:8F:B1:55:D9:49:68:1B:ED:2D:8C:5A:BB:C0:81:0F:4A:AC
X509v3 Authority Key Identifier:
keyid:F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:3f:d7:86:5a:6b:96:62:8c:be:36:f5:50:07:90:4e:d0:75:
15:5e:0c:53:3a:ae:8c:fb:36:cb:68:8c:44:cf:10:bb:2e:52:
5f:a2:91:e1:9f:ce:de:d7:a7:aa:9a:1f:5a:ff:98:bd:1a:e7:
68:da:45:24:0c:9c:47:93:ce:3d:42:84:14:05:6c:e7:36:97:
3b:30:d4:f3:11:5a:d7:01:30:51:94:d3:ac:05:52:08:eb:f8:
21:93:d4:da:4b:1d:23:e9:49:b8:8f:1f:3c:ec:25:88:5f:53:
6c:30:24:0b:a5:f7:82:dc:eb:08:6b:26:a0:77:8c:cc:43:f6:
e7:32:16:31:6b:09:28:01:e0:f1:1f:cf:b9:8b:c6:a9:38:af:
14:4f:93:14:1e:e5:d3:64:51:fe:22:68:cc:3f:f1:3f:09:fa:
74:a3:b8:8c:85:9e:9b:cb:d1:42:51:be:ab:ba:ec:2e:41:73:
0f:86:09:c1:24:ff:a8:6c:9d:d5:27:a9:4e:37:a6:7d:99:1c:
fc:61:b3:f4:db:9b:13:b0:4c:e0:46:77:7f:b6:f6:38:96:cd:
19:c5:01:15:44:12:0b:aa:1e:86:a7:28:15:a5:f5:39:10:e3:
d9:06:e9:e5:02:1c:03:08:d2:ea:88:54:fb:08:2b:5a:85:d5:
7c:4e:bf:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:44:20 2025 by rpki-client