Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
File: 8E3LHKHUaLwERw8dtKRuz1uCeEg.mft (raw, json)
Hash identifier: mmU97fFZRdMDSL+ECgF3405TQBIcmHMeA/NQdjfSBsA=
Subject key identifier: 93:41:BB:57:46:8B:1C:2A:06:7E:A5:60:BD:06:3A:10:6C:1E:E6:48
Authority key identifier: F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48
Certificate issuer: /CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
Certificate serial: 0198D5161CEAE262006E79EAF93908C0F39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
Manifest number: 02C8
Signing time: Sat 23 Aug 2025 04:00:52 +0000
Manifest this update: Sat 23 Aug 2025 04:00:52 +0000
Manifest next update: Sun 24 Aug 2025 04:00:52 +0000
Files and hashes: 1: 8E3LHKHUaLwERw8dtKRuz1uCeEg.crl (hash: dW+9GlrojWz538qs4r3Dc+r1OAtr1v6IHd2vBSWPeD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:1c:ea:e2:62:00:6e:79:ea:f9:39:08:c0:f3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
Validity
Not Before: Aug 23 04:00:52 2025 GMT
Not After : Aug 24 04:00:52 2025 GMT
Subject: CN=9341bb57468b1c2a067ea560bd063a106c1ee648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:11:f5:4f:4b:a4:83:6a:be:a1:7d:fe:bd:7e:
10:3c:5a:10:f2:c7:5e:cf:da:72:56:80:d5:f0:9f:
ec:b2:16:ef:51:cf:62:85:5d:7d:2e:20:08:09:75:
ef:e5:f9:09:a5:b4:68:ee:56:c1:d0:6f:a4:34:63:
b7:77:28:7c:4b:dc:95:5e:ac:d5:b7:2a:dc:bd:85:
8f:43:ad:8d:57:09:7e:9e:e6:74:fd:1d:78:27:a7:
23:ac:0d:c0:61:9f:c3:0b:18:dc:c6:96:bf:93:04:
5c:8e:85:4b:eb:11:68:b6:73:af:66:d2:e0:d7:20:
d5:30:39:1f:f1:67:9e:49:d6:f8:c5:45:0c:34:7d:
29:06:00:f7:97:a6:b8:34:3b:a8:50:7a:1c:00:67:
07:4a:69:e9:2a:32:f6:02:36:3c:0e:8c:18:d9:3b:
0f:b3:fd:b5:e4:21:c7:41:55:a2:a8:66:f9:c6:9c:
2a:5d:2d:c1:eb:31:a1:f2:58:4f:8e:a5:8f:4a:8a:
d8:9d:e9:f5:65:7f:ed:d7:58:5d:6d:ca:68:32:87:
5f:f2:c7:69:4b:06:15:e7:6b:9a:5f:b3:41:ff:ff:
46:4d:7e:38:e1:c3:0b:47:b1:6c:01:8a:e3:28:bc:
e3:25:7d:e6:f6:ab:ba:6b:b2:de:3d:5d:37:66:af:
d0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:41:BB:57:46:8B:1C:2A:06:7E:A5:60:BD:06:3A:10:6C:1E:E6:48
X509v3 Authority Key Identifier:
keyid:F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:73:6b:ab:20:68:93:d4:01:ef:90:0e:23:35:b4:f6:91:94:
dc:93:09:15:68:03:ea:27:59:a8:9f:a3:d5:7c:a8:fa:43:a1:
06:09:da:2d:dd:7b:14:92:f6:24:51:4d:81:c4:1b:9d:d6:ad:
a9:59:3c:b4:55:42:fe:ed:6c:8f:b1:1e:79:37:73:a6:74:03:
e3:a9:6d:b7:cf:0d:14:54:5a:81:38:18:07:28:4b:2e:b5:10:
2c:ec:d8:26:c2:68:b3:53:3d:1d:f4:d6:af:7a:49:be:92:88:
3c:30:f1:af:89:c3:25:e0:ff:a2:a6:5c:af:af:d9:9b:2d:00:
dd:c0:31:90:2e:8d:a6:09:da:0a:36:73:81:61:2d:cd:d9:03:
3b:f3:87:29:5d:00:15:83:6e:60:6d:e8:83:05:33:47:b7:c7:
9b:42:1a:bc:c5:63:b0:d2:90:d7:37:dc:c2:2b:86:c1:7c:d5:
6f:14:0d:1b:da:3d:3e:c1:dd:87:a8:e6:90:b3:f7:d9:98:46:
89:c3:df:02:f0:dc:67:74:f8:ea:7d:ca:a4:fc:b5:da:a6:3c:
2e:7e:4f:53:4a:66:4d:8a:9c:19:cc:de:58:a2:be:3f:c9:6a:
bc:3b:03:86:95:ca:28:d7:61:7d:6a:a7:38:7b:76:eb:45:c7:
a2:01:c8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:32 2025 by rpki-client