Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft
File: 8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft (raw, json)
Hash identifier: q/7JVFroYmr+A8+rWhJEC734pn2dG4Hb+UOb2GJpsfg=
Subject key identifier: 7D:FB:C7:CD:C9:B5:9F:E9:B8:97:51:AD:8D:CE:01:44:29:46:79:25
Authority key identifier: F2:BD:D0:DF:C2:1F:CB:2F:41:C8:41:D3:58:96:91:B2:2B:9E:EA:05
Certificate issuer: /CN=f2bdd0dfc21fcb2f41c841d3589691b22b9eea05
Certificate serial: 0199FAD8018E5CDEB65561FFB7ED29ECC849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8r3Q38Ifyy9ByEHTWJaRsiue6gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft
Manifest number: 011F
Signing time: Sun 19 Oct 2025 05:01:24 +0000
Manifest this update: Sun 19 Oct 2025 05:01:24 +0000
Manifest next update: Mon 20 Oct 2025 05:01:24 +0000
Files and hashes: 1: 8r3Q38Ifyy9ByEHTWJaRsiue6gU.crl (hash: LsmIpHgSoTg9f/2h8ddGeK9PBZGkNXV7oY+6fNAanGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8r3Q38Ifyy9ByEHTWJaRsiue6gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:01:8e:5c:de:b6:55:61:ff:b7:ed:29:ec:c8:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bdd0dfc21fcb2f41c841d3589691b22b9eea05
Validity
Not Before: Oct 19 05:01:24 2025 GMT
Not After : Oct 20 05:01:24 2025 GMT
Subject: CN=7dfbc7cdc9b59fe9b89751ad8dce014429467925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7a:79:d0:56:64:ca:e0:f5:81:c4:7e:d8:2b:
4c:38:0f:5f:b5:fa:d9:39:05:2c:11:28:1d:0b:a6:
0c:63:eb:a5:18:90:ed:01:95:9c:97:80:d1:41:90:
f7:4a:ef:96:3a:84:49:f9:b5:b9:72:0f:bd:4b:f0:
eb:1a:c0:24:7c:88:10:17:7c:80:66:70:52:b4:e3:
c9:f2:78:70:0e:e5:f6:c6:c4:c1:e0:b6:0f:e2:e1:
b5:0a:76:88:3c:3d:be:4b:b5:ac:8c:28:bc:f0:d5:
37:30:c9:4d:f5:b6:e8:90:c2:2f:f7:6b:35:0c:74:
59:48:c3:da:9c:0b:03:98:29:62:a8:c6:b5:bd:14:
10:1a:f7:46:d3:b2:97:77:73:fa:ca:a8:a9:ec:7b:
9b:58:8b:18:b8:5f:73:13:f9:c8:07:5c:a7:ee:0d:
3a:fe:54:d4:5f:f5:3e:c0:19:f8:a2:c4:59:50:8f:
fa:4c:e5:da:5d:1c:3c:2c:6e:c3:af:ae:fb:bc:2d:
14:c5:8c:77:d4:06:5e:29:db:99:b4:1f:cb:e7:b1:
13:f2:98:dc:44:52:fb:8a:e5:9a:4b:46:cc:95:d6:
f6:cd:de:5f:92:92:2a:8f:36:1f:80:19:fb:f8:f7:
51:7a:bd:fc:d9:1d:d5:20:a3:31:61:6a:60:2a:2c:
b9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FB:C7:CD:C9:B5:9F:E9:B8:97:51:AD:8D:CE:01:44:29:46:79:25
X509v3 Authority Key Identifier:
keyid:F2:BD:D0:DF:C2:1F:CB:2F:41:C8:41:D3:58:96:91:B2:2B:9E:EA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r3Q38Ifyy9ByEHTWJaRsiue6gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:23:7a:8a:ea:42:c5:cd:70:aa:c3:a9:c9:63:04:ad:29:84:
f6:30:2b:f9:d7:ba:c1:66:b8:be:0d:ba:57:aa:d0:b5:6b:6a:
b5:bc:59:cb:7a:e8:b6:52:28:b6:22:f0:23:2b:3c:84:79:a5:
97:0d:9c:db:bc:2c:50:7b:91:b2:fb:f4:d3:dd:6b:42:9b:f6:
ac:1f:15:cf:5e:db:50:a1:c3:99:a1:ce:71:98:6d:c1:be:93:
a4:62:7f:f2:2d:4b:d5:63:1f:b2:1a:a1:06:2b:df:5c:92:ef:
7d:36:7d:39:7d:73:b3:3c:31:be:9d:af:81:3b:3c:66:80:7f:
d9:11:e3:a3:0b:7b:fd:a1:dc:85:3f:bc:9b:13:c3:93:ff:4f:
9d:60:9f:fe:59:ea:c4:c6:56:66:1f:c5:9f:ac:aa:cf:7e:96:
8b:1a:73:99:9d:ce:70:27:39:5d:8f:80:c6:41:ce:2d:f7:d6:
b0:77:22:19:30:ba:98:1d:80:ff:62:b3:6b:e8:17:85:e4:93:
0b:0d:f0:70:6e:a2:57:b8:9d:e9:e5:34:b7:91:dc:bb:65:a2:
2d:0e:9b:65:de:e6:f2:7e:d5:c7:03:fd:06:b0:f6:8e:c8:a8:
47:6e:3a:35:bf:1a:16:18:b6:db:ab:01:fc:22:8a:c4:99:6d:
21:2d:64:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:54 2025 by rpki-client