Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
File: 7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft (raw, json)
Hash identifier: VObg2983Z4ggoxlKW973BmKJmHJTIhjuDsVkHRGFw5U=
Subject key identifier: DA:83:13:E8:BE:CC:E9:99:F5:67:87:F4:FC:08:8B:D4:50:4F:D8:A3
Authority key identifier: ED:FF:33:E8:A3:BA:AE:2D:8D:85:60:01:0C:97:C7:6F:3B:19:FA:C9
Certificate issuer: /CN=edff33e8a3baae2d8d8560010c97c76f3b19fac9
Certificate serial: 0198D65F9F062A794C2E2B1B3577F2CFDA89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
Manifest number: 1485
Signing time: Sat 23 Aug 2025 10:00:47 +0000
Manifest this update: Sat 23 Aug 2025 10:00:47 +0000
Manifest next update: Sun 24 Aug 2025 10:00:47 +0000
Files and hashes: 1: 7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl (hash: J9s9gAvtRmcGY839XSkxrGs3zahCwpKcswsB1VFxCUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:9f:06:2a:79:4c:2e:2b:1b:35:77:f2:cf:da:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edff33e8a3baae2d8d8560010c97c76f3b19fac9
Validity
Not Before: Aug 23 10:00:47 2025 GMT
Not After : Aug 24 10:00:47 2025 GMT
Subject: CN=da8313e8becce999f56787f4fc088bd4504fd8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:f1:02:4c:c4:4b:06:17:00:a8:9e:93:cc:
0e:4a:50:72:e2:2e:d4:94:23:32:0a:dd:c6:37:d7:
9c:cd:07:54:f8:4c:ef:3c:9e:3a:45:c7:ba:11:60:
ae:e6:f9:89:e7:56:71:8b:11:88:c9:5e:20:58:e1:
dd:89:2b:f9:31:fb:35:e8:82:d1:cb:65:a7:39:55:
76:c6:dd:55:53:68:10:09:57:4a:b0:c8:34:2a:8d:
37:a1:8d:49:fb:93:a3:79:c0:b4:92:eb:c4:d1:95:
a5:c7:53:79:50:1c:dd:4c:fa:ff:4d:54:82:64:31:
5d:b4:e5:2b:51:5b:9c:a9:3b:84:c4:50:fe:23:8b:
08:1e:11:6c:d2:5e:02:09:ff:5a:a7:32:81:79:9f:
d1:1a:40:9d:4c:7d:91:04:9c:aa:6d:94:ce:8f:10:
11:c0:df:d1:61:ee:1a:12:4c:3c:1c:41:02:82:78:
6e:2a:b4:da:fa:76:66:b0:f8:5b:26:02:c2:75:a4:
a5:1c:11:a8:2c:93:6d:68:7f:76:6a:c8:ee:91:f4:
be:d7:9b:b6:c9:fb:7f:17:fa:74:6a:a6:40:33:ab:
62:a1:d2:19:b0:b1:eb:54:7b:c9:01:5a:98:a4:97:
ca:5c:fb:a8:a7:7a:7a:46:f6:dd:9a:c1:21:b8:fb:
52:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:83:13:E8:BE:CC:E9:99:F5:67:87:F4:FC:08:8B:D4:50:4F:D8:A3
X509v3 Authority Key Identifier:
keyid:ED:FF:33:E8:A3:BA:AE:2D:8D:85:60:01:0C:97:C7:6F:3B:19:FA:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:18:ac:60:80:3d:3c:c0:b0:a4:f8:f3:03:72:b4:4e:14:c3:
04:03:21:23:14:5e:85:00:4a:bf:b6:8b:87:4e:ef:31:63:30:
e1:1d:4f:ab:92:b2:f7:bb:dd:92:a0:fa:90:c2:1e:eb:17:7b:
e2:c4:b7:ce:fa:43:8d:15:5e:08:10:9e:e2:b0:88:2e:57:7e:
d8:01:ed:46:87:eb:0f:9f:0e:da:4b:e7:82:d4:7e:7e:a6:de:
1b:31:35:ba:03:94:86:77:71:5a:d5:93:30:0f:4b:29:d6:95:
fa:52:d1:10:c5:06:3b:8a:bd:73:51:04:48:a7:0a:99:a9:5d:
3b:8f:59:af:53:16:c2:7e:52:de:01:60:ce:53:a5:12:bb:5b:
ab:0b:56:27:92:92:27:59:7d:b9:9f:f1:83:5d:40:98:f5:e8:
18:60:23:1f:88:72:5c:26:28:77:fd:39:fc:57:1a:b4:5d:fe:
c1:51:59:d7:fc:e7:bc:ec:ea:19:de:bf:3f:3d:20:a7:4a:a6:
a2:14:ef:6e:80:be:66:b0:8c:06:bd:5a:40:5e:cc:e5:60:bd:
96:ad:62:68:1c:00:cd:5b:39:21:64:df:67:2a:64:26:08:77:
ba:c2:3e:d4:1f:66:9a:cd:86:a3:24:67:ed:af:2f:b8:34:04:
68:48:ae:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:33:22 2025 by rpki-client