Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
File: 8G37T34-N0VYDoyPxHAj_7H6kW0.mft (raw, json)
Hash identifier: xzhQQG0yJb73om0ZIbX9CoWof3DxmUsbBuQ/+Ehv1sU=
Subject key identifier: 30:23:A9:39:C4:95:0F:A8:B2:9F:90:24:63:AC:EB:EF:CF:DD:8D:67
Authority key identifier: F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D
Certificate issuer: /CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d
Certificate serial: 0198D472DE7B23635342F7135CC8226E8408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
Manifest number: 0580
Signing time: Sat 23 Aug 2025 01:02:34 +0000
Manifest this update: Sat 23 Aug 2025 01:02:34 +0000
Manifest next update: Sun 24 Aug 2025 01:02:34 +0000
Files and hashes: 1: 8G37T34-N0VYDoyPxHAj_7H6kW0.crl (hash: Y7ueSSgjEjh9IwmkUPrN17/jSni7RZrhdYxMX7LLXFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:de:7b:23:63:53:42:f7:13:5c:c8:22:6e:84:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d
Validity
Not Before: Aug 23 01:02:34 2025 GMT
Not After : Aug 24 01:02:34 2025 GMT
Subject: CN=3023a939c4950fa8b29f902463acebefcfdd8d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ed:b3:a6:2b:cc:bf:98:d4:65:66:8e:a6:8b:
17:d9:48:18:fd:5e:25:9c:b7:78:4b:a3:93:1c:6d:
59:fe:1c:65:22:dc:9a:07:84:b5:c4:54:5c:c5:30:
0e:40:70:88:47:23:41:5c:fc:b2:8d:9b:fc:46:6a:
aa:b1:26:6c:7c:6d:f9:47:7d:22:96:ac:9c:49:be:
e5:14:be:3f:59:ef:c2:05:4d:69:b2:eb:18:85:b3:
59:86:98:db:aa:16:13:39:f3:5d:65:93:2b:3b:88:
68:21:d3:77:ed:d4:13:21:0d:1c:97:8c:c1:88:3b:
80:0e:e9:16:4a:90:ed:51:e6:dc:ca:e5:4e:f6:24:
45:25:f5:c7:aa:18:05:b3:c9:41:f9:7c:4f:96:51:
ea:95:40:fb:b4:29:46:61:38:f4:5c:43:c1:8d:f9:
22:e0:fd:7e:99:24:18:4c:74:be:77:45:51:5e:74:
ae:ef:f6:6c:39:31:19:9f:a8:34:cb:cf:ba:b6:ba:
ef:74:d3:92:b2:a0:cb:3b:a7:16:4e:ca:e2:42:97:
33:00:b3:00:3e:62:b6:26:3d:fd:90:7a:08:49:95:
43:87:e6:6b:5c:d0:db:26:0b:55:8e:39:3e:03:96:
af:18:16:d4:8d:f4:65:b9:3d:b6:e1:3b:35:cc:d0:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:23:A9:39:C4:95:0F:A8:B2:9F:90:24:63:AC:EB:EF:CF:DD:8D:67
X509v3 Authority Key Identifier:
keyid:F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:72:40:35:4e:13:14:07:9c:16:83:7a:96:f5:ae:ec:85:e3:
6b:9c:60:c0:07:24:98:ff:65:66:56:b6:86:a6:6f:bf:0f:73:
ac:38:28:35:1d:87:8f:be:d4:7b:23:99:75:37:14:a5:11:04:
9d:e9:1f:df:c0:f8:6c:c9:86:8d:93:0c:59:4a:29:5e:e6:34:
2d:a0:c2:3d:e1:6b:d3:4a:85:a2:e9:2c:e6:29:d0:dd:81:d4:
fe:fc:f6:49:be:0c:32:2b:ad:d0:f8:a4:14:32:cd:f9:b1:ea:
c3:b7:f2:ac:ac:5a:06:1e:72:bb:fa:c9:e5:20:f9:07:ec:32:
0c:47:32:91:d6:cf:17:c3:fd:92:16:30:02:51:cd:f0:e6:36:
b0:d7:8b:06:b1:cb:23:44:4d:91:15:c6:eb:ca:cf:b7:82:27:
34:64:5f:7f:cd:e0:bf:5a:80:cf:07:cc:03:aa:08:e1:56:63:
a8:f9:67:a5:7b:1e:c9:37:aa:ed:46:61:4c:04:26:88:dd:3c:
42:df:91:69:c2:ec:31:92:b8:68:95:08:4a:f5:74:45:22:4f:
d9:02:b5:e4:4a:10:bd:20:58:e0:65:ca:07:10:e1:32:bf:c7:
c8:99:7c:cb:f5:56:25:33:21:91:7f:ac:69:11:b5:e5:d2:6d:
6f:d8:c0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:48 2025 by rpki-client