Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
File: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft (raw, json)
Hash identifier: ZpEhMnmE+cipgMoQPdMLdYDN3lgxaJdWO0Cd11l7lzg=
Subject key identifier: F7:1C:B9:68:7C:3B:22:D5:19:A0:7A:54:0F:CA:30:61:2C:56:DD:9A
Authority key identifier: F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27
Certificate issuer: /CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
Certificate serial: 0198D58369C5607C13D04C6DE6A162CF858B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
Manifest number: 0204
Signing time: Sat 23 Aug 2025 06:00:15 +0000
Manifest this update: Sat 23 Aug 2025 06:00:15 +0000
Manifest next update: Sun 24 Aug 2025 06:00:15 +0000
Files and hashes: 1: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl (hash: TCgByvBQ0twNeBIRJbJjFERBW7jbJEl/2VDXZp8C3PA=)
2: MDg3SGQivd4Gkhmi2ar9KtkbxPw.roa (hash: kp0L4LourZESQv5PNyUfmc/3RRGNdSH3s5Vl6lYig18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:69:c5:60:7c:13:d0:4c:6d:e6:a1:62:cf:85:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
Validity
Not Before: Aug 23 06:00:15 2025 GMT
Not After : Aug 24 06:00:15 2025 GMT
Subject: CN=f71cb9687c3b22d519a07a540fca30612c56dd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:bf:e8:88:b0:9f:28:e2:22:25:ef:ec:bc:
8e:84:68:71:b9:86:d2:e3:a2:80:ad:e7:a5:b3:94:
11:93:4c:33:ca:17:54:4c:99:e8:93:fb:18:df:4d:
eb:f0:ae:46:b7:7b:cf:3a:34:05:b8:50:02:d5:4e:
6d:c4:8b:f8:e1:48:8f:18:a0:f4:b3:4c:c1:f0:24:
e8:87:cb:5a:eb:86:62:5c:2c:d9:1d:5d:ad:d8:62:
9a:e0:69:61:3a:c9:af:02:68:b3:e7:81:82:ff:fb:
8a:5e:37:49:7b:96:47:67:37:9f:be:b1:3b:65:b9:
a2:9f:ee:86:4c:a1:8b:ff:87:01:dd:37:9c:a1:e0:
7d:8b:d4:22:8e:df:32:6b:0b:4e:3e:ef:00:3e:6a:
e7:99:95:7b:ee:53:0c:a2:88:2a:34:b9:17:a9:1f:
60:cf:84:2b:2a:f2:83:57:5b:0b:28:b1:f3:0b:3d:
2d:61:ef:d6:1c:ef:0a:d4:14:37:5c:e5:88:14:74:
8b:e2:d2:56:28:70:96:54:3e:76:d5:77:ef:92:94:
32:54:3e:3b:22:29:2c:56:2f:a9:80:f0:cc:85:d3:
27:2b:3a:5d:85:3b:5a:87:47:11:85:7f:66:8b:74:
96:67:2e:d4:a8:70:fd:48:bd:3d:a4:5f:ff:18:c5:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1C:B9:68:7C:3B:22:D5:19:A0:7A:54:0F:CA:30:61:2C:56:DD:9A
X509v3 Authority Key Identifier:
keyid:F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:64:c5:cc:26:4f:85:d3:2b:e3:5e:9a:59:4e:44:6e:c3:49:
b2:e1:02:0e:90:d3:9d:ca:76:46:d6:8f:3b:55:00:3d:7a:9a:
88:60:ca:d2:00:ae:0c:af:3c:b1:7c:8b:f1:e3:55:56:87:91:
bd:99:a4:38:05:24:52:c1:bb:c3:69:bf:79:34:c1:bb:5e:c6:
86:8e:fa:03:85:80:15:64:f8:90:9e:82:2a:ce:82:5f:98:be:
f7:10:bb:7f:30:1a:06:4e:65:89:ab:dd:55:61:07:8e:31:bc:
38:a5:ee:82:af:a9:3b:5a:8d:c4:33:a7:b5:46:51:c3:33:d1:
9d:be:12:19:18:f8:ec:36:5b:7f:3b:33:eb:6c:b8:31:53:3a:
15:17:fa:c9:f3:9a:6d:2e:c9:e6:84:c2:9d:26:50:b1:f2:b2:
09:04:3e:c8:8e:b8:fa:cf:ac:41:72:1a:66:0c:4b:dd:b7:a7:
be:b1:e0:19:05:c3:77:b0:27:ec:5e:fd:55:a1:58:e7:b5:85:
49:8c:e8:3a:19:5a:ee:0e:09:4a:f7:84:f3:d3:cb:c7:44:d7:
20:07:46:4f:e6:af:4b:6f:c5:3d:98:39:71:22:80:2f:5e:e7:
75:34:ea:ec:3a:a9:51:2e:fe:33:cd:0f:fb:d1:3f:10:f3:90:
24:54:0e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:13:49 2025 by rpki-client