Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
File: 88q2j7sMl5R2WUvfxWwZIEK43t8.mft (raw, json)
Hash identifier: /8SOD4+n9zn7vc9pvrRXDLZUjWs1jMi9pN4B2Z3EpuI=
Subject key identifier: D3:6B:81:D1:50:5B:4F:A0:04:8E:DF:80:79:E4:56:AC:2C:E4:77:67
Authority key identifier: F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF
Certificate issuer: /CN=f3cab68fbb0c979476594bdfc56c192042b8dedf
Certificate serial: 0198D4728F4A22A1FE1F997205056641086A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
Manifest number: 118D
Signing time: Sat 23 Aug 2025 01:02:14 +0000
Manifest this update: Sat 23 Aug 2025 01:02:14 +0000
Manifest next update: Sun 24 Aug 2025 01:02:14 +0000
Files and hashes: 1: 88q2j7sMl5R2WUvfxWwZIEK43t8.crl (hash: rQ2mD+Bbhzesdr2AZJi5Vl9arp3XZRHv6EcLUMH1fVs=)
2: uhzHg_0oTjSNISZWz69g2JwlZBI.roa (hash: SYDZB0vXv8S1CegMsOsTpWapvWlbrYaUA5uYqL/hcv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:8f:4a:22:a1:fe:1f:99:72:05:05:66:41:08:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3cab68fbb0c979476594bdfc56c192042b8dedf
Validity
Not Before: Aug 23 01:02:14 2025 GMT
Not After : Aug 24 01:02:14 2025 GMT
Subject: CN=d36b81d1505b4fa0048edf8079e456ac2ce47767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f9:c6:d2:32:d3:64:7d:91:27:b6:76:5e:20:
77:35:96:d1:f9:26:c5:10:79:9a:33:83:56:73:a2:
5b:99:8a:32:dc:2a:6e:85:8b:24:f6:ac:4b:f8:2e:
f2:36:54:60:55:fd:b2:05:39:29:9d:c0:a7:00:71:
7e:7c:c2:80:48:5c:92:ce:f7:fb:df:0d:b3:8d:ed:
67:db:05:ea:21:a5:cc:05:d1:d3:43:c2:e7:17:73:
1d:0c:8a:4d:65:c3:71:cd:2a:30:b0:15:1f:73:e7:
2d:c8:56:6b:b7:84:f7:7d:ac:8c:24:b3:e2:89:ee:
ef:7b:54:c6:4b:2c:f5:f3:c0:00:12:62:92:8c:18:
95:09:93:73:29:24:95:7f:ac:7a:ef:58:e4:11:90:
63:18:e4:f2:80:ff:89:de:1c:5f:de:4d:c3:85:c0:
d2:e6:77:5d:56:ec:bb:ee:3b:22:3f:0c:a8:a6:af:
76:ab:b2:78:be:0b:81:b9:19:b2:bf:85:89:b6:d7:
3f:70:26:60:9a:25:51:d3:d7:fd:5e:2b:fe:32:40:
7e:d4:61:fc:86:a6:d9:e9:e0:0e:fb:0c:d3:05:bf:
94:eb:ef:58:2b:37:50:cc:10:99:71:a9:43:76:6a:
fa:5d:82:f3:54:55:95:be:b9:2b:1c:d1:55:26:16:
a2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6B:81:D1:50:5B:4F:A0:04:8E:DF:80:79:E4:56:AC:2C:E4:77:67
X509v3 Authority Key Identifier:
keyid:F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f8:26:f5:6b:ab:91:44:83:d7:1f:d7:41:f8:d2:bd:95:5c:
bd:cd:d0:3a:6c:56:5c:00:11:82:66:89:4a:60:cd:04:9b:0a:
00:01:63:49:83:67:cc:05:e9:31:bb:9f:a9:f0:60:24:1c:dc:
92:35:09:09:c1:fc:eb:a7:a9:80:b9:0a:90:2c:b8:da:20:f7:
ab:1d:c4:2d:9c:6f:6c:ee:d8:bf:98:6f:5e:af:cd:63:8b:42:
29:95:60:3d:65:78:29:65:52:73:54:7d:c8:3e:91:58:27:4d:
ac:41:ba:be:aa:60:bc:ad:7d:23:e0:b0:95:15:a4:f1:c6:5d:
9c:f2:e3:d8:ad:3d:9f:9b:57:e1:ac:ba:7a:cc:9a:29:05:e2:
33:04:fc:22:a6:9e:f9:dd:39:1c:a4:36:a2:1f:c1:e7:ad:e9:
57:a3:ed:38:21:82:dc:9c:d4:e8:b5:cb:86:19:dd:c2:7f:3e:
74:19:88:61:39:95:3b:0b:c9:d7:a9:d7:60:3b:24:92:45:7b:
ac:49:03:c9:51:50:39:ec:16:d3:49:72:23:ca:8b:ed:08:6f:
c3:86:c9:f8:26:77:7f:a1:74:3d:0a:38:0d:c0:ee:cc:5b:97:
ee:e5:1f:98:c4:b3:86:4f:30:05:cc:35:c4:98:ec:26:5a:0a:
4a:20:3f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:54:53 2025 by rpki-client