Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
File: 8-7mn4nyRS3K6JgpR7LRRpU3lns.mft (raw, json)
Hash identifier: hS7M9QUUAsSazjEisTsfKgZrBvHfFZ8S6yy7pupTiqI=
Subject key identifier: 98:A1:F8:58:8B:4D:A7:C4:5B:4E:C8:B1:FA:E5:FF:D1:21:C3:A5:46
Authority key identifier: F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
Certificate issuer: /CN=f3eee69f89f2452dcae8982947b2d1469537967b
Certificate serial: 0198D47249FB568C0CC84B9F89049576499E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:01:56 +0000
Manifest this update: Sat 23 Aug 2025 01:01:56 +0000
Manifest next update: Sun 24 Aug 2025 01:01:56 +0000
Files and hashes: 1: 8-7mn4nyRS3K6JgpR7LRRpU3lns.crl (hash: OSxcHP2NdzpJ/9XyU3rN+D7oFa5ztNF/XVZPrUmu0zM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:49:fb:56:8c:0c:c8:4b:9f:89:04:95:76:49:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3eee69f89f2452dcae8982947b2d1469537967b
Validity
Not Before: Aug 23 01:01:56 2025 GMT
Not After : Aug 24 01:01:56 2025 GMT
Subject: CN=98a1f8588b4da7c45b4ec8b1fae5ffd121c3a546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7d:df:48:e0:65:54:a1:62:a0:75:57:df:66:
00:84:00:96:2a:24:9d:93:9f:b5:3f:1c:ef:51:eb:
a6:0c:5b:0a:78:b5:c8:d1:43:05:78:b1:a6:f9:aa:
e5:ec:c8:7f:1c:c7:9c:01:9d:98:02:fc:05:6e:47:
69:70:a7:35:65:17:88:d8:0b:35:28:cf:88:71:ac:
56:cd:d8:c3:26:97:fd:71:ac:34:ed:c3:5c:6e:f0:
25:67:6a:f4:54:a9:b3:d3:1f:71:99:2e:96:00:61:
d5:92:24:16:69:8c:a2:5a:c3:47:5c:87:55:69:31:
e4:d6:0c:12:6e:13:82:26:29:34:43:94:c3:2d:c7:
9a:8a:ac:fa:be:f1:42:4b:d2:a7:0f:95:ad:ee:28:
0a:bf:40:05:fc:92:25:9e:2d:76:61:51:04:74:99:
b1:e6:76:e9:7d:45:a0:1b:0e:30:dc:33:7b:98:c2:
82:fd:7a:03:64:aa:9e:df:57:fc:82:b2:4e:09:b5:
72:a2:b4:87:fa:b6:02:83:2e:da:98:51:6a:b5:0b:
45:c2:89:f1:4d:81:f6:21:b8:cf:83:9f:d0:bd:60:
5d:83:2f:17:90:18:ce:11:57:00:e5:e2:ac:97:6c:
30:8c:23:2f:06:0c:f4:db:06:2a:2d:dc:a0:fa:0e:
4f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A1:F8:58:8B:4D:A7:C4:5B:4E:C8:B1:FA:E5:FF:D1:21:C3:A5:46
X509v3 Authority Key Identifier:
keyid:F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:25:50:70:f4:90:02:2e:98:c2:04:78:fe:05:a4:a3:06:e5:
4d:c9:c2:4e:c4:dc:bc:4a:79:ca:6d:64:fd:3b:ce:5b:55:46:
99:80:c3:22:04:52:3f:3a:22:66:b6:7a:9d:74:e1:70:c4:16:
6f:12:3c:83:3e:d8:12:95:4f:c4:56:62:57:98:26:8d:96:3c:
29:20:76:be:e3:17:23:11:ce:a6:e6:42:63:2a:40:75:bd:31:
c7:1f:b8:4c:00:a2:9e:71:1a:91:c3:51:5a:75:c8:8f:e7:05:
7e:d0:00:94:e0:44:eb:28:49:0d:1b:95:88:0b:7a:16:6b:cb:
1f:a2:85:3c:e7:71:47:be:57:01:e8:16:76:f2:5f:b7:ac:90:
d5:62:2d:4b:9d:fd:13:bf:00:45:80:3e:36:ee:c1:5b:7e:c3:
d9:1f:91:f8:79:b0:08:af:f5:7d:b1:ee:3f:50:ed:76:fb:71:
24:de:7c:e9:44:6a:df:21:28:df:ef:cc:e9:14:1d:12:5d:51:
31:a7:27:bf:d8:d5:13:df:b8:0c:3c:87:ca:4c:13:4f:ca:20:
0d:c9:a3:5f:c8:df:35:0d:79:5e:e2:4d:dc:4f:52:9c:34:07:
b7:af:0c:35:43:49:3b:ec:27:85:2f:21:ab:37:e6:3e:e9:e3:
0b:71:87:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:11 2025 by rpki-client