Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
File: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft (raw, json)
Hash identifier: Px6WISOEoKRrVro/mmT8B8ai3DospsSVTrB89BDKtAo=
Subject key identifier: 3D:B4:C7:48:4B:65:98:38:9D:78:0B:96:1D:B3:98:84:8E:F4:55:AD
Authority key identifier: F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
Certificate issuer: /CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Certificate serial: 0198D515C1AED2AC62389A3416144A6F876E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
Manifest number: 0533
Signing time: Sat 23 Aug 2025 04:00:29 +0000
Manifest this update: Sat 23 Aug 2025 04:00:29 +0000
Manifest next update: Sun 24 Aug 2025 04:00:29 +0000
Files and hashes: 1: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl (hash: U9vAaSQtRK5TUuIorcuZersTo/W+7ojDNWyAF/blKz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c1:ae:d2:ac:62:38:9a:34:16:14:4a:6f:87:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Validity
Not Before: Aug 23 04:00:29 2025 GMT
Not After : Aug 24 04:00:29 2025 GMT
Subject: CN=3db4c7484b6598389d780b961db398848ef455ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:91:b0:e2:80:43:c7:d3:21:3b:07:d9:b3:38:
23:11:12:88:d9:ec:78:05:f6:25:75:76:e5:dd:b7:
22:ad:2b:88:04:b6:e0:fb:f9:98:1c:36:6a:96:7b:
2e:d4:77:f6:8d:3c:14:ce:a3:84:c5:d2:d8:df:f0:
1a:f7:e7:55:05:60:7c:49:7e:a6:0c:70:ae:3f:2e:
e3:ea:64:b1:fc:e5:f9:93:bc:dd:bb:3c:16:d3:92:
5e:56:48:66:d7:ec:3f:1f:1a:fa:6f:a7:fe:8b:8d:
35:be:08:a4:78:06:ed:12:ee:c8:60:2b:e9:c8:1e:
93:f3:8c:26:35:63:09:62:b0:4e:19:e8:c0:c2:e7:
cf:72:70:6c:c2:d7:f6:fc:10:35:b3:95:b7:02:6d:
a6:f3:50:38:87:90:b3:c9:18:a8:10:2a:78:f2:b2:
21:f5:47:9d:35:a0:83:0e:4c:2b:20:6e:20:35:43:
b8:6c:d6:8c:60:87:86:f8:47:38:c8:ad:07:30:b7:
d6:de:2e:ff:3d:a4:93:ec:67:e8:c0:c2:50:bd:d1:
df:f0:39:54:85:d3:b1:16:40:90:75:33:c5:6e:80:
3e:cc:65:16:34:a4:36:8a:c1:a3:74:f9:49:0c:62:
44:25:11:37:c7:05:df:1b:14:88:a2:2b:87:d2:3f:
d5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B4:C7:48:4B:65:98:38:9D:78:0B:96:1D:B3:98:84:8E:F4:55:AD
X509v3 Authority Key Identifier:
keyid:F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f8:bd:7e:fe:04:9e:e7:18:35:c8:fc:dd:1c:64:46:f1:5a:
f3:08:2f:62:35:bc:31:98:a5:1a:28:8c:ff:1e:6d:e1:03:2d:
de:77:c2:18:d5:24:25:88:d4:6c:1f:c2:31:81:35:eb:e0:e6:
bc:6d:50:08:30:16:46:0c:c8:3d:68:46:32:9f:a6:a5:fc:48:
2f:85:72:d5:df:64:da:8c:38:47:a7:cf:f7:4c:41:f5:53:c7:
a1:82:17:b8:0b:6f:78:86:e6:eb:6e:fd:a6:93:a9:83:a1:57:
09:e4:33:c3:b5:5c:4c:43:3e:1b:3e:53:aa:e1:38:12:82:84:
5f:95:11:08:be:e7:5f:b5:f8:db:de:66:b6:3f:61:c3:fb:7e:
61:f5:b2:91:76:97:bf:56:33:fe:54:91:4b:be:03:7a:26:5d:
13:2e:e0:c0:b9:9c:94:7e:08:b7:1c:79:0b:5d:12:7b:29:2c:
3e:cb:11:5d:6a:2a:b7:71:2f:76:16:5f:14:82:cc:79:a2:3b:
9d:ac:a2:ed:61:a2:bd:99:34:ab:95:32:aa:aa:2e:57:21:3b:
87:0a:56:38:02:59:ce:ef:38:1e:5b:c8:e4:90:29:56:38:26:
51:e5:34:4d:a0:8a:91:b0:5b:ca:28:77:73:92:df:e8:5c:97:
bb:f9:e1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:39 2025 by rpki-client