Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
File: 8hFTAR3kWGrYqAOIfufSsArv1hs.mft (raw, json)
Hash identifier: WiUZsaSdKbXRSteBl80cApTd6ro2FcBtYbqywmJCO04=
Subject key identifier: 0E:26:71:A8:0C:DB:32:AC:F8:93:6C:B2:FC:99:FD:49:36:AE:AF:CF
Authority key identifier: F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
Certificate issuer: /CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Certificate serial: 0198D4E030349D30F2CB9B2D80D27416C80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
Manifest number: 04A0
Signing time: Sat 23 Aug 2025 03:01:58 +0000
Manifest this update: Sat 23 Aug 2025 03:01:58 +0000
Manifest next update: Sun 24 Aug 2025 03:01:58 +0000
Files and hashes: 1: 8hFTAR3kWGrYqAOIfufSsArv1hs.crl (hash: MgwQH33po9+5HCgpf+0KCiO+gdOJSgQ5fgBkA6tcCQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:30:34:9d:30:f2:cb:9b:2d:80:d2:74:16:c8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Validity
Not Before: Aug 23 03:01:58 2025 GMT
Not After : Aug 24 03:01:58 2025 GMT
Subject: CN=0e2671a80cdb32acf8936cb2fc99fd4936aeafcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:c1:cb:66:9a:53:27:7d:a2:b5:36:03:72:
3d:33:59:85:3c:e1:1e:5d:25:9a:3d:15:f4:d0:d6:
3b:6c:e2:fd:b8:3c:19:41:3d:e6:fd:a2:02:8e:ff:
7d:90:7a:70:9f:f4:eb:c4:ba:77:aa:64:45:6c:2a:
4b:42:be:bd:f2:4a:69:a1:53:0c:3d:cf:3a:ce:52:
2e:9a:5e:0b:23:15:f1:55:4f:eb:84:c9:08:9d:93:
33:7d:9f:98:f3:fe:2c:a1:75:89:a1:6d:a2:a7:7c:
52:9a:94:42:94:7e:1d:ea:8e:8c:75:04:c9:7f:91:
53:c6:17:0f:ac:3c:d2:f0:5b:77:c9:c4:e7:9e:67:
e0:79:af:34:6b:9b:d8:3e:34:71:48:d9:c1:b4:4d:
15:57:b5:aa:00:a8:07:9c:76:b8:9c:d3:af:20:18:
49:b2:fc:54:4c:85:82:d8:82:3a:90:71:9b:73:26:
74:ec:9b:c4:cc:7f:ed:e9:f3:38:d7:5c:fe:ba:80:
cf:d1:12:23:63:da:cd:09:5d:fc:2b:6f:e2:f9:06:
31:3e:fc:d7:16:45:c8:0f:f7:cc:d0:38:8b:61:a4:
1d:ae:dd:34:ab:52:d5:b5:b2:f4:8d:ca:78:63:e2:
00:c7:77:42:a5:b4:00:c3:b6:35:7b:bd:16:82:86:
17:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:26:71:A8:0C:DB:32:AC:F8:93:6C:B2:FC:99:FD:49:36:AE:AF:CF
X509v3 Authority Key Identifier:
keyid:F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:07:2a:70:fb:4f:26:94:9f:f2:61:07:a5:8d:0c:4b:0d:02:
54:77:be:1c:ec:14:f0:d4:5c:b1:b8:26:97:c4:d4:58:70:8a:
f6:04:55:0c:34:c5:e7:e3:9f:6b:5a:d0:6a:0d:40:8b:11:75:
5a:83:0d:f4:59:b2:5c:39:a3:c0:80:fe:81:87:e6:42:c3:69:
77:3d:1d:31:37:77:d6:6f:4f:72:f4:2d:85:55:6b:07:69:7c:
42:9f:a7:eb:7b:e1:01:71:49:7d:d0:5e:7f:17:27:21:b0:69:
c1:b6:33:2b:a2:ce:ff:f5:a1:ba:5e:ea:78:8e:1c:14:e9:96:
28:9e:d6:c0:4f:82:a6:b6:c3:e3:c9:41:6d:12:84:28:f6:0b:
71:f7:6e:6d:5f:95:83:4b:b7:44:75:a8:67:24:61:f1:2d:8e:
66:9f:9c:4a:dc:a0:ac:b9:fb:88:4f:ac:e4:79:4a:aa:3f:ba:
d4:10:49:b2:02:16:99:ed:09:66:75:d2:ef:61:85:ad:b3:e8:
b3:ab:93:04:6e:0f:0f:74:d8:0e:94:e2:43:49:29:d5:1c:05:
a3:85:c4:fb:fb:ea:e9:18:b0:1d:98:c2:3e:28:47:04:d4:3c:
2f:14:97:69:9b:2d:47:2a:34:e5:a1:66:c0:12:99:5a:41:88:
15:38:31:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:57 2025 by rpki-client