Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft
File: 8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft (raw, json)
Hash identifier: YlpSd8h0DrxYBQDOP7TLpYoTiPPS/HzEl3sQeWLnRME=
Subject key identifier: BC:55:D9:68:C0:95:94:71:D5:5C:3B:70:9B:28:D0:B7:A0:07:84:29
Authority key identifier: F2:BD:D0:DF:C2:1F:CB:2F:41:C8:41:D3:58:96:91:B2:2B:9E:EA:05
Certificate issuer: /CN=f2bdd0dfc21fcb2f41c841d3589691b22b9eea05
Certificate serial: 0198D54E2A403F99C3802E7816DE6A92A80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8r3Q38Ifyy9ByEHTWJaRsiue6gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft
Manifest number: 87
Signing time: Sat 23 Aug 2025 05:02:05 +0000
Manifest this update: Sat 23 Aug 2025 05:02:05 +0000
Manifest next update: Sun 24 Aug 2025 05:02:05 +0000
Files and hashes: 1: 8r3Q38Ifyy9ByEHTWJaRsiue6gU.crl (hash: tD8OQDsZqD0ObtImLSzotnC4p6AKYwX9z6/LbWnpp60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8r3Q38Ifyy9ByEHTWJaRsiue6gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:2a:40:3f:99:c3:80:2e:78:16:de:6a:92:a8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bdd0dfc21fcb2f41c841d3589691b22b9eea05
Validity
Not Before: Aug 23 05:02:05 2025 GMT
Not After : Aug 24 05:02:05 2025 GMT
Subject: CN=bc55d968c0959471d55c3b709b28d0b7a0078429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:84:4f:f6:96:82:61:3f:b4:51:3c:8e:f7:33:
9c:88:bf:61:e3:7d:91:ce:66:07:64:16:27:91:a4:
b7:c1:b6:6e:74:d1:6b:f0:3d:fd:72:00:0f:fe:bd:
58:5e:9b:7b:5b:fd:79:91:69:81:72:6c:7f:c7:1c:
a7:70:1e:50:ab:69:33:7e:8e:04:6b:2f:a5:55:30:
bf:ae:9d:bf:ce:a7:37:26:7b:b1:29:7d:df:20:af:
fa:05:13:ec:5f:a6:7f:75:a0:68:9f:05:8a:43:ea:
10:83:d3:59:05:07:06:50:56:5d:5c:e8:55:60:b8:
71:dd:88:29:10:45:a9:54:c5:ed:05:c8:dc:0c:f1:
5f:6a:64:9a:1c:94:39:e2:d3:18:fe:96:1d:99:d9:
1e:9b:cd:d4:30:92:8a:c8:08:fd:78:c6:1f:00:de:
1d:41:ee:7d:c3:12:47:44:db:74:26:48:54:d3:6f:
77:8c:46:3e:47:ab:58:63:ab:a1:d1:73:c8:5f:ce:
eb:04:97:20:4e:c5:8b:b9:c2:25:e9:6d:88:7e:dc:
71:2d:b3:35:11:0b:ef:ad:23:d6:0b:76:15:16:ed:
94:24:b5:ce:75:60:42:ef:92:34:11:b5:f2:29:8f:
c5:c7:22:1b:30:df:a9:96:0c:bf:25:50:30:ed:70:
e5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:55:D9:68:C0:95:94:71:D5:5C:3B:70:9B:28:D0:B7:A0:07:84:29
X509v3 Authority Key Identifier:
keyid:F2:BD:D0:DF:C2:1F:CB:2F:41:C8:41:D3:58:96:91:B2:2B:9E:EA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r3Q38Ifyy9ByEHTWJaRsiue6gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/caa9a2-0be2-4825-8558-40f90d8c74e2/1/8r3Q38Ifyy9ByEHTWJaRsiue6gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:59:fa:d1:d8:87:94:71:3b:33:c2:31:06:4e:b1:9a:6a:33:
77:14:6d:d9:37:31:f5:10:ee:f7:b0:13:7c:00:5d:2c:f4:35:
db:9f:8e:b6:42:d4:60:1d:d6:a8:b5:db:6a:b4:11:2a:f0:8a:
69:9b:2f:f5:73:c6:33:45:bf:43:08:bd:c4:4a:78:e3:a7:7f:
ff:1b:44:33:3b:95:00:18:ff:c6:bd:f9:4c:fc:6a:e0:24:cf:
d4:ea:96:0e:0d:ce:97:40:25:88:ff:1f:63:de:da:23:65:85:
2f:8b:6e:3b:89:d2:ee:bd:93:86:80:5d:a1:2a:21:7a:46:64:
28:70:44:63:96:2b:9b:60:3f:e1:ab:86:bc:27:da:a8:47:b0:
53:fe:a0:d7:e1:38:bf:77:96:a2:2b:19:bb:fe:53:2e:0e:b2:
70:4d:33:29:68:61:74:fa:f3:29:f9:f1:31:a4:cf:9d:a7:55:
d1:3e:ca:64:21:12:19:b1:4e:32:a0:29:bd:22:dc:70:5f:d0:
a3:9d:10:cc:f7:c7:18:8f:67:fb:c3:65:39:ff:6e:65:89:bd:
b4:ca:ef:9d:e5:7c:ad:77:5e:7c:85:54:86:5f:7e:35:27:a9:
75:4e:d9:9a:14:7f:12:c9:50:85:0b:71:90:65:c0:3e:5a:2a:
86:7c:08:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:59:58 2025 by rpki-client