Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
File: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft (raw, json)
Hash identifier: yg3vLYmsCqpTLUsKrmFt8iF7LPvyz9p64W+bkXnuLJs=
Subject key identifier: D2:37:54:26:A6:95:3E:54:45:72:B8:89:6B:00:2B:61:EB:E9:78:A4
Authority key identifier: F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
Certificate issuer: /CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Certificate serial: 0198D660372F76D7296DFA4375B3AB9AF75E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:01:26 +0000
Manifest this update: Sat 23 Aug 2025 10:01:26 +0000
Manifest next update: Sun 24 Aug 2025 10:01:26 +0000
Files and hashes: 1: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl (hash: IpXmKzJK/DXhKFrPBm1J94DlH1CEX/wJQT8zHD1sF7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:37:2f:76:d7:29:6d:fa:43:75:b3:ab:9a:f7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Validity
Not Before: Aug 23 10:01:26 2025 GMT
Not After : Aug 24 10:01:26 2025 GMT
Subject: CN=d2375426a6953e544572b8896b002b61ebe978a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:aa:18:ff:29:62:f4:3b:39:be:09:6e:fa:
65:38:69:bb:ea:c8:8b:07:e2:ea:f5:7b:a8:1a:d9:
fd:49:14:1a:68:b7:b9:fe:44:67:60:39:dc:67:fd:
05:42:79:96:be:9d:5c:52:9b:41:59:1f:c2:1b:da:
aa:98:41:03:6f:56:05:8d:0c:03:69:44:4c:f9:11:
98:57:46:10:3e:c5:c4:e0:d1:60:ff:3f:0e:8d:fd:
61:20:21:b0:98:c9:92:cf:d5:43:8b:c3:73:48:99:
c7:a8:74:67:b9:74:d7:6c:10:6d:62:3e:40:d2:5c:
7d:1d:26:ca:11:ff:cd:16:ac:d6:f4:03:da:b7:b0:
90:ca:88:1b:9d:47:47:29:3b:90:dc:1e:7b:2b:a2:
2a:09:2d:9f:ca:47:e0:de:42:93:11:8d:b5:83:80:
4f:e4:06:27:4b:10:b9:f2:f9:06:82:1d:3a:66:d6:
0c:c7:29:b1:94:c0:63:fa:38:5e:75:4c:d5:d9:1e:
97:63:c2:33:83:6f:e2:e5:18:12:d1:f1:09:47:34:
3a:2b:52:9f:50:a4:a7:a1:39:8c:be:d8:2e:8a:b5:
3b:1d:e8:25:28:ca:d3:9c:3d:7a:cb:74:6d:d7:97:
09:ca:26:3b:9a:2c:a7:de:05:2c:d6:3c:78:43:e2:
69:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:37:54:26:A6:95:3E:54:45:72:B8:89:6B:00:2B:61:EB:E9:78:A4
X509v3 Authority Key Identifier:
keyid:F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:bd:7e:35:c6:93:29:57:16:40:24:53:ed:b9:e8:dd:96:36:
d4:7f:d4:05:9d:45:2f:05:17:9d:41:34:ec:af:91:9b:36:77:
2d:29:55:a2:1d:8b:d6:f2:c7:fa:0f:c9:8e:af:0e:f6:5a:d9:
e2:7e:a3:11:00:5d:88:bd:db:61:e3:2c:11:18:14:ef:45:91:
75:83:54:ab:01:03:d7:d2:44:dd:ed:62:35:36:14:97:ac:cf:
cb:01:5b:f9:e3:82:3e:88:95:08:39:3c:5c:cb:95:3d:77:cd:
31:01:46:37:fa:a7:46:d3:90:51:88:b1:5c:f0:79:1a:db:5e:
09:c8:18:9b:95:83:2c:5e:94:30:97:60:b4:d7:4f:dd:03:a4:
04:1b:cf:4a:91:4f:be:7a:b9:eb:40:a1:dc:4b:59:db:9b:b7:
e7:06:72:ab:8a:9b:b2:3a:52:1c:1b:55:02:61:cb:05:da:6e:
07:28:53:57:ce:e5:0e:45:cd:e2:f9:b6:47:f3:ad:2d:89:68:
b6:1d:09:37:2b:23:99:e3:20:1c:53:7d:90:b1:24:e5:0d:64:
2d:11:cd:20:7f:7d:23:4c:3b:a7:28:65:25:eb:11:09:95:7d:
52:3c:8f:4e:1f:68:24:e9:3b:62:c4:7e:54:af:5e:e4:19:e8:
13:14:52:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:15:56 2025 by rpki-client