Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
File: 88iZC9bpMHET6DgyxpFf2lys_C8.mft (raw, json)
Hash identifier: nf8ef+ZjLY2tDqzaDnpsJbTByjYVrWETh/Q0V1DrY7k=
Subject key identifier: 42:71:31:7C:FD:FC:04:E1:2E:F0:4C:55:DC:D2:8A:D6:78:41:5C:44
Authority key identifier: F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
Certificate issuer: /CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Certificate serial: 0198D5BC52C05917B68464D4440763AD3FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:02:25 +0000
Manifest this update: Sat 23 Aug 2025 07:02:25 +0000
Manifest next update: Sun 24 Aug 2025 07:02:25 +0000
Files and hashes: 1: 88iZC9bpMHET6DgyxpFf2lys_C8.crl (hash: C5fWyzPduxXlm7UDDjoSJT0bYvpXQZwBxJF11YobTwU=)
2: ic2AvQV4fn5mQGurv_9LydC-BbI.roa (hash: mD0dAfaF87izkBorR76KrAgNEqpqvPq8C6YXxT1+QYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:52:c0:59:17:b6:84:64:d4:44:07:63:ad:3f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Validity
Not Before: Aug 23 07:02:25 2025 GMT
Not After : Aug 24 07:02:25 2025 GMT
Subject: CN=4271317cfdfc04e12ef04c55dcd28ad678415c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:39:f0:77:7b:63:f7:db:37:b4:c3:02:89:
c0:61:e4:47:ec:f4:ad:3e:f9:a2:b4:34:83:e8:f9:
49:86:e3:37:7b:63:35:45:fa:f9:3b:ea:21:f3:d6:
86:f4:7b:e2:05:93:f8:f6:3f:67:7a:50:90:b7:3f:
48:7b:d5:dc:5d:c7:af:e6:ff:64:9e:0e:9c:00:ec:
62:27:f8:1b:9d:25:f1:c3:fa:f6:ca:8e:88:43:14:
a1:f0:21:c2:25:a3:29:69:f4:77:86:f6:4c:b4:13:
de:fd:68:4b:0c:c3:51:40:6b:93:93:fa:67:c6:b8:
bd:03:d3:83:87:9a:b1:93:8f:5e:cb:c4:a4:48:9a:
50:b0:a3:d8:f4:2a:f4:71:78:fa:1e:70:0e:99:0a:
ca:aa:f8:06:71:b4:da:3d:65:2f:87:0e:95:94:e7:
8b:a2:96:b0:e2:d3:dd:68:8c:ba:0d:3d:d0:50:3e:
d2:b6:41:5b:2d:25:26:6e:84:e5:83:81:d6:cc:51:
9d:cc:a9:1e:56:6d:56:b5:41:78:23:58:c1:39:2b:
d0:23:88:e6:ff:05:c8:c8:67:59:4b:71:e6:9d:20:
5d:22:4d:ab:b8:9f:9b:4b:f3:40:00:79:0a:0a:d3:
94:f3:e7:0d:cf:1c:c2:39:47:1b:f4:50:2f:ab:cf:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:71:31:7C:FD:FC:04:E1:2E:F0:4C:55:DC:D2:8A:D6:78:41:5C:44
X509v3 Authority Key Identifier:
keyid:F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ce:66:54:4b:7a:8f:3b:be:fd:ab:12:ee:fb:a3:7a:db:b3:
6f:68:7c:74:86:70:90:e6:71:d5:06:79:f3:d7:f3:a4:90:bc:
4d:b6:66:f9:1b:5d:a4:c6:d5:f4:d6:8a:bf:ca:04:e2:ff:69:
22:bb:4e:f5:81:02:fb:ae:f5:b4:1c:d1:80:3d:b2:6b:dd:42:
f8:1b:0e:51:3d:c5:06:f0:d0:14:56:eb:f6:b9:28:1a:12:ff:
86:c5:f9:70:76:c9:4a:6a:9a:b8:d1:96:1b:3b:a0:5d:63:dd:
71:18:c0:29:fd:be:5e:13:e8:4c:02:77:de:ef:55:f9:be:b1:
d1:24:62:96:6b:29:e7:84:8c:56:f1:b2:fc:73:71:49:60:af:
e3:f1:66:65:91:b9:ae:fe:22:b2:50:ea:a8:75:a2:c7:aa:89:
8d:69:f7:a0:aa:6c:31:9f:5f:f1:44:c1:62:85:31:35:aa:c2:
f7:1a:7a:68:94:f2:13:31:b4:65:b3:c7:8b:3f:18:7c:22:10:
f2:4a:4b:c3:09:70:e8:67:83:cc:28:92:d8:29:f2:45:ee:e4:
60:ca:5e:23:a3:ae:df:34:64:66:25:8a:92:b4:bb:8e:39:47:
e8:89:c6:c6:0b:4d:9f:34:8a:9f:47:f6:3b:38:42:a0:35:e5:
a4:29:26:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:19 2025 by rpki-client