Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
File: i7AWzMBcV2V0az92QtBD6BEgNwU.mft (raw, json)
Hash identifier: 37DG6lpkJgSe8G0LUunn2rCg28r9PaAXSZg+l9u9pZQ=
Subject key identifier: F0:BE:A1:F4:11:7D:8B:DC:C0:65:42:0B:18:D8:0F:41:93:DD:58:76
Authority key identifier: 8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05
Certificate issuer: /CN=8bb016ccc05c5765746b3f7642d043e811203705
Certificate serial: 0198D69860F0D43CFB401D10ACC6B3BC6281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
Manifest number: 0134
Signing time: Sat 23 Aug 2025 11:02:47 +0000
Manifest this update: Sat 23 Aug 2025 11:02:47 +0000
Manifest next update: Sun 24 Aug 2025 11:02:47 +0000
Files and hashes: 1: i7AWzMBcV2V0az92QtBD6BEgNwU.crl (hash: vlFirnv7xLzOKxIQYgmQj3jae3ULOr1ESs26Femt798=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:60:f0:d4:3c:fb:40:1d:10:ac:c6:b3:bc:62:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb016ccc05c5765746b3f7642d043e811203705
Validity
Not Before: Aug 23 11:02:47 2025 GMT
Not After : Aug 24 11:02:47 2025 GMT
Subject: CN=f0bea1f4117d8bdcc065420b18d80f4193dd5876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:09:ed:c5:11:cb:24:b6:2f:1e:18:90:e2:0b:
46:bb:73:71:b7:44:71:6c:e7:92:88:a8:50:49:c9:
be:34:1d:0d:85:4a:a3:b5:2d:81:61:ef:c9:8f:b2:
1d:44:c3:f1:4b:db:dc:2d:48:ca:cf:ae:72:9f:68:
01:54:ea:06:ac:b9:ce:d4:67:8d:99:77:7c:a3:fb:
ff:53:92:c4:fa:30:12:9d:35:0d:97:25:c6:80:68:
90:61:b0:42:f0:f8:aa:9e:ce:f9:9c:ad:83:df:31:
a6:dd:e9:bd:d9:68:fa:7a:ec:0c:d7:16:d5:02:83:
5b:33:d0:a4:5c:48:59:48:62:8d:bb:fe:1a:3f:9b:
6b:cb:64:ea:b1:b2:22:82:9f:4e:0f:04:9f:5a:6f:
88:cb:4d:82:57:8a:81:70:9b:ca:20:80:5b:6a:5c:
76:1b:6d:87:d1:f3:ef:d3:6a:a2:05:f3:d5:51:ca:
29:a8:7c:c1:16:29:a5:78:5e:9e:82:9d:0c:b7:d2:
d1:6b:05:02:16:a3:59:56:04:de:7b:c4:61:d6:86:
3c:d1:68:2f:e6:12:3d:fc:c5:a8:32:11:9a:3a:16:
14:87:4d:a2:16:6a:c9:ee:a8:7d:31:8b:41:55:37:
58:d7:3b:82:9c:30:36:cc:e5:c6:e5:4f:10:16:66:
3e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BE:A1:F4:11:7D:8B:DC:C0:65:42:0B:18:D8:0F:41:93:DD:58:76
X509v3 Authority Key Identifier:
keyid:8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1f:26:45:55:c7:24:9e:8d:f1:64:69:30:53:4f:ea:ab:d1:
d1:20:9a:76:36:a2:8f:68:b7:a7:0b:72:89:50:44:78:57:0b:
c6:ad:9c:7a:12:d0:64:87:3a:02:23:42:99:31:b7:c1:fb:6f:
ed:96:a6:76:19:b9:fe:f3:3c:5f:df:ed:81:4e:f2:07:01:4c:
b4:3b:7c:a7:26:ec:11:5d:2f:a6:08:d5:80:6d:03:f2:fc:3a:
0b:86:16:85:5e:12:1f:5e:f4:31:a6:a6:bb:29:db:ba:11:69:
99:2a:1e:fa:ce:8d:18:85:6f:18:2c:e0:61:de:75:9a:61:4e:
ad:e6:e6:3a:9d:51:ef:79:f4:84:9d:86:cb:0c:10:42:b2:ef:
3c:52:a0:b5:9c:45:04:a0:b6:3f:94:b1:50:f2:15:09:84:08:
52:9e:ad:35:c9:e2:8f:82:b3:71:11:74:e5:6d:4c:cb:fe:ad:
16:aa:ba:8f:18:fb:8b:47:ba:ba:fe:62:15:6b:6c:6a:2c:95:
b4:16:d3:1d:8e:d2:7c:ac:3c:2f:dd:82:c9:c6:ac:56:a2:d9:
e6:f8:82:b0:69:2e:2d:f0:8b:09:12:5a:35:25:da:e2:fd:40:
bc:b3:03:93:57:ee:43:69:40:c6:18:ea:ac:3c:1d:a3:6a:41:
d6:52:29:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:07 2025 by rpki-client