Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft
File: itC83pWbIDJiNJG_MnmtRanKC-g.mft (raw, json)
Hash identifier: f4zNx0vmAZGDvML7iHXG1tr5dW3f1MyQhIz89h25OE0=
Subject key identifier: F9:B2:54:DD:C8:82:80:14:A2:EC:6F:37:C3:BE:72:A6:D9:9B:5A:AC
Authority key identifier: 8A:D0:BC:DE:95:9B:20:32:62:34:91:BF:32:79:AD:45:A9:CA:0B:E8
Certificate issuer: /CN=8ad0bcde959b2032623491bf3279ad45a9ca0be8
Certificate serial: 0198D7734C5E48E193C5F570FF19297B54C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itC83pWbIDJiNJG_MnmtRanKC-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft
Manifest number: EB
Signing time: Sat 23 Aug 2025 15:01:54 +0000
Manifest this update: Sat 23 Aug 2025 15:01:54 +0000
Manifest next update: Sun 24 Aug 2025 15:01:54 +0000
Files and hashes: 1: itC83pWbIDJiNJG_MnmtRanKC-g.crl (hash: xdv/zi5/Kosyv1SILLi+NjMg02oFNuCeCYvmteoswPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/itC83pWbIDJiNJG_MnmtRanKC-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:4c:5e:48:e1:93:c5:f5:70:ff:19:29:7b:54:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad0bcde959b2032623491bf3279ad45a9ca0be8
Validity
Not Before: Aug 23 15:01:54 2025 GMT
Not After : Aug 24 15:01:54 2025 GMT
Subject: CN=f9b254ddc8828014a2ec6f37c3be72a6d99b5aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:07:f0:47:74:3d:7c:ab:d8:56:6c:bb:19:39:
cc:8d:ea:cc:05:2e:35:31:51:81:9b:a7:8a:17:ac:
66:81:16:40:63:6e:f0:51:d2:aa:72:b7:f0:fd:4f:
17:10:2f:3d:ca:b6:bc:b9:73:f2:4a:94:ac:4b:24:
01:d9:f4:dc:58:8b:15:2e:22:67:7e:ed:15:0c:8f:
b1:d1:57:d7:a9:9d:8a:7a:0a:dc:22:60:3d:cb:ae:
5a:d8:62:ff:38:fd:84:e5:f3:04:a8:4b:8a:7c:9d:
97:aa:53:78:22:14:10:75:8c:bd:fa:9a:9d:e2:ed:
5f:d2:4d:31:31:95:c3:f2:93:e1:06:48:5d:c9:e1:
6f:6a:2f:2f:52:dc:44:e6:36:f8:39:1d:a2:3d:e4:
31:44:32:cb:78:bb:ce:27:ad:01:c1:ba:3d:4a:7c:
da:c9:3d:e9:a6:03:a6:8c:72:03:76:c6:1e:df:e3:
c7:cf:2d:47:3d:b0:66:c2:a6:f8:a1:27:8f:a6:30:
e8:1c:b1:61:d0:7b:a8:a4:93:25:81:49:e4:84:32:
db:68:95:1c:b2:02:18:3b:60:d2:e0:03:e9:78:dd:
76:b7:e9:f9:47:90:69:64:b3:03:de:d2:a7:92:50:
98:76:48:81:1d:11:0f:ac:3d:cc:00:17:64:cc:a9:
25:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B2:54:DD:C8:82:80:14:A2:EC:6F:37:C3:BE:72:A6:D9:9B:5A:AC
X509v3 Authority Key Identifier:
keyid:8A:D0:BC:DE:95:9B:20:32:62:34:91:BF:32:79:AD:45:A9:CA:0B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itC83pWbIDJiNJG_MnmtRanKC-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:dd:5f:b8:33:b9:12:7f:48:c1:69:e3:8e:77:21:59:52:2a:
53:f9:84:c8:3f:52:05:0b:d6:24:82:0c:47:3e:9a:bd:28:df:
61:f5:0b:0e:b0:ec:60:ca:df:99:c6:b9:06:e4:62:27:06:3b:
73:db:b5:12:8b:89:7b:5b:c7:19:48:30:1b:88:20:92:c7:f2:
57:25:c6:25:03:dc:99:47:a2:cb:aa:07:dd:a3:c8:21:5d:85:
11:62:28:2f:ef:74:59:db:d4:b6:74:9e:13:6c:3d:ce:d8:fd:
4e:7b:de:fb:a0:4d:85:f0:a9:a6:2b:8f:28:c7:bb:ab:7a:f2:
70:5a:7a:6b:6d:81:54:54:e9:ef:54:61:b5:39:12:35:c3:7b:
d8:6c:7c:96:3c:b3:76:af:75:9d:80:d2:ce:50:cb:0c:bb:71:
11:76:cf:ab:3f:4c:8d:de:08:46:2b:ba:21:e4:df:90:01:37:
c1:5b:90:2f:3b:23:f2:80:56:a1:4d:70:a7:7f:26:88:09:42:
7d:a6:ce:3c:e1:0e:8a:5a:33:d6:3c:b5:ff:5a:37:21:82:94:
28:13:eb:89:bc:b8:0c:fd:84:05:fa:80:46:0a:c1:ed:ca:50:
f1:48:0c:ce:ce:92:da:bb:60:7f:3b:65:b5:32:11:d9:37:d4:
de:92:e4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:46 2025 by rpki-client