Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
File: tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft (raw, json)
Hash identifier: 4dXa6QQekao8KVjHxH6JCtVBmLBMsjAtRk2qyI78EG0=
Subject key identifier: FC:98:51:2B:A8:35:83:07:83:27:E2:46:83:E8:D4:55:D6:B5:C9:25
Authority key identifier: B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5
Certificate issuer: /CN=b483bc0a71a52d0cf3989522367575959ebdcef5
Certificate serial: 0198D4E081BEA2E435D247466D4C7987DB86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
Manifest number: 15D7
Signing time: Sat 23 Aug 2025 03:02:19 +0000
Manifest this update: Sat 23 Aug 2025 03:02:19 +0000
Manifest next update: Sun 24 Aug 2025 03:02:19 +0000
Files and hashes: 1: tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl (hash: 6Qh9aGdkhr8fF5dDE1GNDZqSkXgsW0UMQYFnDQKs4RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:81:be:a2:e4:35:d2:47:46:6d:4c:79:87:db:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b483bc0a71a52d0cf3989522367575959ebdcef5
Validity
Not Before: Aug 23 03:02:19 2025 GMT
Not After : Aug 24 03:02:19 2025 GMT
Subject: CN=fc98512ba83583078327e24683e8d455d6b5c925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1a:af:db:68:a5:11:3e:3a:d9:07:bc:10:44:
09:12:db:5f:f3:c2:43:b3:b1:64:2c:7e:10:4f:36:
48:47:5b:a5:61:c6:49:e8:a5:42:92:c1:e2:ee:0c:
b3:37:d3:be:1d:fc:19:2d:b1:95:c6:8b:31:3d:54:
c2:9b:df:37:d0:3b:52:76:df:fa:95:83:dc:2d:58:
76:3f:a2:50:69:82:c8:39:a1:72:5d:ed:1b:ee:4e:
e6:0d:21:2b:b7:36:c1:98:fd:a4:2f:41:42:6c:08:
b5:59:2d:c3:8a:83:08:d6:b5:a1:61:e2:82:20:2b:
31:a6:f2:38:a3:4c:46:b7:d3:34:5c:87:c4:8b:44:
37:4f:1e:6f:23:e8:2a:c1:a8:63:d1:e8:8d:b0:cd:
b7:1b:60:ad:ad:c6:38:fa:f9:5b:f9:11:1d:5c:ad:
04:39:39:99:97:94:aa:69:b6:d5:a2:97:e1:7b:0b:
8a:e6:9f:bd:bd:af:fa:bc:42:40:39:ae:ec:db:0f:
cd:98:02:6a:ab:44:0f:1e:12:17:da:29:bb:43:4b:
1f:4c:22:be:6d:c5:ab:eb:2f:f2:ac:89:eb:ce:b8:
cb:36:67:e0:5a:64:54:9b:c8:01:77:b3:0d:5b:6d:
56:36:4d:00:f7:79:9f:78:00:98:68:39:3b:70:3b:
d8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:98:51:2B:A8:35:83:07:83:27:E2:46:83:E8:D4:55:D6:B5:C9:25
X509v3 Authority Key Identifier:
keyid:B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c6:0f:87:b6:d6:e7:91:23:44:43:86:8b:67:8c:1e:d6:0b:
91:9c:ea:64:a0:48:f3:c5:09:e9:11:14:19:70:fe:fa:8b:b1:
65:89:93:b4:a9:60:60:86:b7:94:0e:85:dc:9f:40:f5:b5:aa:
7d:1f:6c:9a:19:10:f6:23:38:03:d1:98:80:f1:63:e4:d3:be:
fe:6a:6b:87:a0:fa:16:3d:68:10:50:31:f8:84:b0:48:1c:c8:
0b:bb:56:6c:93:58:33:91:f4:cb:65:86:d2:cd:00:75:87:ff:
ba:b7:49:9a:50:31:53:cb:77:f5:a1:05:ad:86:4a:2f:ca:ce:
8a:46:46:48:3b:cd:b6:2a:db:09:5f:b2:62:88:46:72:9e:51:
fd:3e:ad:d2:c3:2b:08:c5:de:4b:bb:2a:51:0a:ea:66:c7:d1:
3e:12:82:66:08:c6:86:22:a0:67:7b:0d:d6:f9:11:f6:37:ab:
2e:48:0b:81:22:71:4a:4e:c6:96:44:6a:cf:32:35:ce:88:10:
9a:b3:dd:a2:5f:f1:71:a1:22:5e:a0:83:2c:53:71:60:9d:ed:
d9:d8:b8:5d:c8:26:05:53:35:63:24:c1:40:db:40:3d:4a:08:
11:15:2a:b0:49:2b:ab:e7:f9:9b:73:8e:7c:64:5e:51:0e:54:
d3:e2:a6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:27 2025 by rpki-client