Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
File: 8j79S9kntM6jMSCiG09zFNy-oXk.mft (raw, json)
Hash identifier: fVzccR6r8XffPnyKC+bUdpE5bIIF/52y91Qj/JV4opo=
Subject key identifier: FB:3B:DC:25:3C:26:84:99:64:F1:5B:76:93:55:EF:2C:3E:88:C9:CD
Authority key identifier: F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
Certificate issuer: /CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Certificate serial: 0198D54E9F541D5680F7309804069083B8B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
Manifest number: 0DEE
Signing time: Sat 23 Aug 2025 05:02:36 +0000
Manifest this update: Sat 23 Aug 2025 05:02:36 +0000
Manifest next update: Sun 24 Aug 2025 05:02:36 +0000
Files and hashes: 1: 8j79S9kntM6jMSCiG09zFNy-oXk.crl (hash: EF8GJtg+vXR/d0uYhoB0Ig/NshycqOnt1kMf4jJ8Yic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:9f:54:1d:56:80:f7:30:98:04:06:90:83:b8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Validity
Not Before: Aug 23 05:02:36 2025 GMT
Not After : Aug 24 05:02:36 2025 GMT
Subject: CN=fb3bdc253c26849964f15b769355ef2c3e88c9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cf:1e:95:d6:04:2c:ee:ab:b3:0d:40:a4:09:
76:1c:6f:0d:4b:42:03:9a:d6:e0:54:fa:a2:1d:df:
a9:1f:58:28:55:72:99:ba:67:12:57:2f:4a:d8:02:
f2:4e:c1:f6:26:e1:90:6c:b9:3f:00:70:fd:76:42:
26:4e:df:e0:9d:09:8f:7c:dc:4b:43:8c:3c:33:0a:
26:ce:1a:fe:45:06:96:f2:d6:e0:66:fc:6c:db:f1:
7a:5c:f6:c1:9e:ca:36:ab:12:db:e2:8c:a8:70:e3:
91:07:1e:c9:24:ef:aa:f7:e0:2d:c4:ba:f7:fd:20:
ce:22:27:3e:b7:fe:8d:ea:d4:bd:a8:9c:6d:91:dd:
5d:25:b6:43:a4:3e:39:94:44:06:46:a4:e7:f7:f4:
b4:a8:2c:39:75:30:d6:a3:f8:33:38:19:a6:db:95:
e5:91:d2:ba:c9:7d:f5:31:fc:f9:6a:e8:97:22:19:
81:ab:ee:e3:e9:01:de:c2:79:33:f6:de:d4:f2:a1:
85:dd:fd:49:dc:18:a3:30:b8:01:8c:12:2d:f2:38:
e1:70:a0:33:9e:d2:d6:d2:7d:75:5b:ff:57:bc:1b:
e3:cd:e7:bb:ff:db:7e:67:94:ae:c2:c5:03:b1:b3:
40:dd:ab:a8:fe:cf:2e:a8:69:ad:f0:80:5b:bd:f9:
4c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3B:DC:25:3C:26:84:99:64:F1:5B:76:93:55:EF:2C:3E:88:C9:CD
X509v3 Authority Key Identifier:
keyid:F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:cb:b8:8d:5b:bc:5b:a9:0c:9b:1f:1e:b8:cf:ad:35:ac:85:
44:5b:97:78:e5:56:d8:14:af:a4:c7:c3:96:6c:d1:be:e9:c7:
66:2d:8f:ab:9e:cb:a0:5c:26:e8:9b:97:d5:e0:4c:6a:52:90:
af:64:4b:5c:9e:fa:52:d4:11:41:c0:50:3a:64:5e:da:ca:3a:
4f:24:54:e0:28:39:dc:5a:a5:d5:ab:8e:93:b0:ab:d1:4b:3a:
42:84:59:bb:06:9a:e3:5e:22:97:2b:e4:34:3e:2f:5c:16:8c:
80:8a:cb:5d:66:d0:b6:5b:46:99:3c:c3:85:28:e3:21:e5:0f:
f9:a1:e5:54:ae:fb:70:31:26:3a:78:17:83:45:64:5a:b3:80:
5e:ac:d8:e7:f4:e8:1e:69:86:4c:19:32:c2:4b:37:83:8f:42:
ad:4f:7b:0e:f6:f2:0b:4a:58:4b:1e:c6:90:e6:b0:2f:dd:35:
04:6c:11:90:25:a0:d4:eb:b7:7c:69:38:de:6d:67:0f:61:5f:
b1:46:cd:7a:10:66:dc:c9:c6:42:06:aa:27:81:97:55:97:c5:
56:c5:85:b3:8b:8c:7e:7c:62:6f:6e:84:6e:0e:49:0a:e2:85:
5b:bf:2b:20:01:25:1d:23:9e:ab:f7:75:64:00:91:0e:50:32:
20:da:7d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:28 2025 by rpki-client