Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.mft
File: g8t2BW38QWNCZu0C0GkCA6dUoXs.mft (raw, json)
Hash identifier: yHYSZtPB2NdMDD/xZppJSY2I1S/h6J7pmJvz05U37YA=
Subject key identifier: 84:86:BB:2C:47:91:47:37:79:76:16:3A:1D:ED:58:C1:CF:B9:C7:88
Authority key identifier: 83:CB:76:05:6D:FC:41:63:42:66:ED:02:D0:69:02:03:A7:54:A1:7B
Certificate issuer: /CN=83cb76056dfc41634266ed02d0690203a754a17b
Certificate serial: 0198D65FCE06701106A3E7461F5CA9526C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8t2BW38QWNCZu0C0GkCA6dUoXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.mft
Manifest number: FE
Signing time: Sat 23 Aug 2025 10:00:59 +0000
Manifest this update: Sat 23 Aug 2025 10:00:59 +0000
Manifest next update: Sun 24 Aug 2025 10:00:59 +0000
Files and hashes: 1: g8t2BW38QWNCZu0C0GkCA6dUoXs.crl (hash: mraZMo1o6GRrEm/NCs3kVXGR5SBQVTeSiqqxI42ireo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8t2BW38QWNCZu0C0GkCA6dUoXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ce:06:70:11:06:a3:e7:46:1f:5c:a9:52:6c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83cb76056dfc41634266ed02d0690203a754a17b
Validity
Not Before: Aug 23 10:00:59 2025 GMT
Not After : Aug 24 10:00:59 2025 GMT
Subject: CN=8486bb2c479147377976163a1ded58c1cfb9c788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5f:15:b7:f4:1f:81:b5:a5:9b:de:f6:d3:c8:
87:df:31:0b:47:cb:94:72:3c:da:41:dd:07:f8:8e:
f3:5b:e8:8c:fa:d1:49:22:bc:e8:c6:cf:04:bc:99:
fb:b1:33:e2:1e:93:c0:84:8e:a7:af:65:b8:28:7a:
a9:f3:0b:cf:15:ba:b0:b7:c4:d3:f8:bf:81:52:4e:
81:5e:fd:b5:38:5b:4e:d6:74:66:06:68:cc:0f:ff:
bd:71:8e:c6:82:2e:7b:d7:47:17:df:60:10:5d:d6:
25:ad:07:26:3a:2a:1d:20:45:87:96:f7:4d:b7:d6:
a5:1c:e6:52:27:95:9d:20:1f:c0:ed:86:c9:ca:74:
bf:59:50:08:e3:a2:34:7a:7f:2c:15:14:bd:fe:a9:
5c:d9:d1:ef:84:af:68:a9:37:b0:b9:04:e7:71:a3:
0a:58:76:5b:bd:7e:e4:16:9f:6a:32:2e:ab:d6:10:
65:40:45:33:cf:fb:7f:8e:7a:19:22:b8:94:58:8a:
a1:3f:2a:dc:34:6c:19:83:5d:68:90:73:58:f4:38:
0d:db:43:cf:a1:49:a4:da:e2:d3:1c:fc:a8:8c:f2:
98:e3:5c:b7:ec:3c:39:bd:3e:b3:4a:6f:76:8f:6f:
d8:1d:db:b6:5e:31:09:3f:ea:8e:0a:3c:33:d5:e9:
07:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:86:BB:2C:47:91:47:37:79:76:16:3A:1D:ED:58:C1:CF:B9:C7:88
X509v3 Authority Key Identifier:
keyid:83:CB:76:05:6D:FC:41:63:42:66:ED:02:D0:69:02:03:A7:54:A1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8t2BW38QWNCZu0C0GkCA6dUoXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/5ebf50-dea3-4778-8923-dfef1d2b669c/1/g8t2BW38QWNCZu0C0GkCA6dUoXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c0:b8:f5:f9:c7:f7:3a:3c:41:31:75:9f:73:38:29:4d:97:
a8:4e:71:3f:ec:ac:e8:34:62:d5:0d:46:20:99:4c:10:1f:f6:
d4:67:93:4d:8b:23:3c:4f:16:dc:05:21:70:9a:47:bd:d8:42:
ca:33:e9:a1:6a:37:a4:6b:68:45:8b:e8:77:4b:ae:17:24:69:
14:0d:15:28:8f:08:bd:96:68:f0:b9:e6:ae:81:17:e3:7c:14:
8f:af:a3:4c:f3:a5:e8:15:ba:55:b6:19:0b:45:74:74:38:c8:
39:8b:eb:9a:70:c7:88:bb:07:2a:21:b1:fd:aa:3f:9a:5c:de:
83:fd:b0:7e:ec:16:79:92:8f:86:55:6e:c6:9f:ca:e0:a2:a6:
31:9e:fd:40:46:c8:41:98:f2:d0:37:25:b9:f6:94:86:f6:d7:
e1:40:88:4c:18:69:81:8d:54:9f:f3:c2:0e:2e:57:e3:44:c3:
0e:82:4d:b9:33:22:7f:30:8a:e5:61:31:93:22:18:3a:3a:0e:
e8:7a:a3:db:11:f6:ff:01:39:88:3c:65:68:32:f4:18:03:31:
96:d2:c4:80:85:2f:7b:db:35:60:c5:50:0b:a0:59:0f:3b:3d:
f7:14:d9:f1:cb:17:ed:56:9f:1b:7b:d0:1a:e3:83:1f:72:80:
e5:64:b2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:14 2025 by rpki-client