
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
File: 8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft (raw, json)
Hash identifier: SPdb900SP1941Fe0jysJbSyseQgm+nchqQSSki1jtLk=
Subject key identifier: E2:DB:50:4A:9E:DA:38:D8:97:60:42:8E:3B:15:40:E9:AC:2C:4D:69
Authority key identifier: F3:FC:4E:F2:32:AE:23:94:E8:88:54:4F:52:AB:08:B1:7A:FE:32:48
Certificate issuer: /CN=f3fc4ef232ae2394e888544f52ab08b17afe3248
Certificate serial: 0198D65FD976B954B2A4523D09D7085F45E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:01:02 +0000
Manifest this update: Sat 23 Aug 2025 10:01:02 +0000
Manifest next update: Sun 24 Aug 2025 10:01:02 +0000
Files and hashes: 1: 8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl (hash: XPcJY/w8j8a5YHXqcj1ILLowPTJ/uyNwlcQfB04dBK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:d9:76:b9:54:b2:a4:52:3d:09:d7:08:5f:45:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3fc4ef232ae2394e888544f52ab08b17afe3248
Validity
Not Before: Aug 23 10:01:02 2025 GMT
Not After : Aug 24 10:01:02 2025 GMT
Subject: CN=e2db504a9eda38d89760428e3b1540e9ac2c4d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:03:4b:51:99:e5:86:03:40:d0:45:63:49:
47:b8:f1:b6:0c:d7:f3:25:64:f7:b9:5b:dd:e1:42:
af:cb:b6:15:c8:0e:e2:0e:ea:c9:12:87:4e:20:94:
9a:2e:97:27:eb:b2:05:35:dc:eb:73:e3:bd:b4:09:
32:e4:ee:5e:f0:06:e2:ac:01:38:b5:7d:c0:a3:ff:
71:1c:7e:8c:60:80:6a:d4:e7:46:1f:0e:2d:50:37:
40:1e:cd:ad:6a:c8:52:ee:6c:c8:a0:11:e2:a4:cc:
0c:ee:6f:d4:e5:5a:af:01:95:bf:c7:d9:6f:c4:fd:
03:72:94:53:bf:4f:34:d5:44:65:94:63:2a:e8:42:
92:14:e9:9b:97:a4:74:ee:ce:3b:d6:ed:b2:93:5c:
40:ff:b4:08:cf:07:d1:f7:86:f1:53:6d:27:f7:5f:
67:8a:db:66:88:f0:6a:26:e8:ec:8e:12:14:2e:50:
2a:65:bb:59:f1:d3:7e:46:7f:ec:3f:d9:17:6c:95:
cd:6f:bd:33:9d:30:73:22:b0:e2:74:f3:80:1e:53:
02:ff:59:da:ca:1b:24:ef:23:3c:07:ad:e5:8a:91:
7d:55:a6:df:77:cb:dc:23:47:ca:8b:86:06:33:e7:
eb:23:00:89:5b:bf:39:29:82:f1:1d:ed:0f:ee:68:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DB:50:4A:9E:DA:38:D8:97:60:42:8E:3B:15:40:E9:AC:2C:4D:69
X509v3 Authority Key Identifier:
keyid:F3:FC:4E:F2:32:AE:23:94:E8:88:54:4F:52:AB:08:B1:7A:FE:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7f:3d:d9:b1:80:ef:5c:41:90:62:80:9e:14:4f:d5:d4:c7:
45:79:cd:42:3b:78:e8:3f:43:ce:7f:26:38:76:9d:6c:11:77:
6c:c3:4a:52:89:e9:62:eb:da:5b:ed:5f:37:87:ac:2e:a1:b5:
a1:f9:40:25:35:de:f0:ff:2f:bb:10:d3:e3:41:1d:7d:5f:e3:
68:b4:ce:3b:16:2f:d3:fd:13:d4:48:2c:0d:dd:ec:48:c8:d6:
a0:33:b6:1a:4d:da:21:85:a9:11:6b:eb:73:80:e8:36:95:2b:
c1:44:fe:20:40:9d:43:74:16:f5:92:e7:22:a5:56:7e:ae:84:
48:f4:e1:5e:2c:3c:51:82:93:e1:05:d8:77:47:a7:56:5d:9e:
e9:70:81:2a:d9:be:90:69:3f:db:6a:1c:ac:ea:9a:cc:fa:30:
92:da:8b:1f:d8:82:68:6b:7f:3d:89:cc:73:f2:58:e0:e9:a9:
62:7c:12:f4:ed:b1:95:65:65:3f:8c:69:eb:26:60:f9:7b:cd:
8f:8a:6f:2f:79:c2:ac:9a:2d:4b:97:d5:49:3c:bd:45:94:24:
bd:01:9f:ab:b2:2c:72:22:9c:97:67:b3:ce:ad:5a:fe:b3:14:
e5:94:f6:43:0a:52:84:a6:b2:7a:97:d2:14:3a:af:92:d5:46:
bc:38:ff:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:43 2025 by rpki-client