Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
File: m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft (raw, json)
Hash identifier: MbO64HiVA02sC4mplIwslhcVQH7iERuysbjCva3UMUY=
Subject key identifier: AA:5C:61:38:9F:20:77:22:D9:30:8F:E6:C7:F5:F4:5F:6B:1A:F6:09
Authority key identifier: 9B:C0:C5:BE:77:EF:99:CA:4A:7E:91:DF:FD:58:E6:A7:98:74:3C:FA
Certificate issuer: /CN=9bc0c5be77ef99ca4a7e91dffd58e6a798743cfa
Certificate serial: 0198D6CDB29C407F083D3F437D65B2E1A8E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
Manifest number: 13B7
Signing time: Sat 23 Aug 2025 12:01:01 +0000
Manifest this update: Sat 23 Aug 2025 12:01:01 +0000
Manifest next update: Sun 24 Aug 2025 12:01:01 +0000
Files and hashes: 1: m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl (hash: ez+JXqqVqwZ5LVogd7YRjfGpQRxPXIfn/32qqX5ApEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:b2:9c:40:7f:08:3d:3f:43:7d:65:b2:e1:a8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc0c5be77ef99ca4a7e91dffd58e6a798743cfa
Validity
Not Before: Aug 23 12:01:01 2025 GMT
Not After : Aug 24 12:01:01 2025 GMT
Subject: CN=aa5c61389f207722d9308fe6c7f5f45f6b1af609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3d:82:48:e8:a5:17:91:27:6e:59:6a:8b:17:
00:65:ab:04:06:ab:20:df:21:47:b8:a7:a8:50:48:
85:11:6b:3e:cf:42:09:d0:15:3d:73:66:8f:11:cc:
b7:e3:26:0d:51:8b:53:95:27:f9:72:03:07:82:1b:
ae:70:a3:11:9e:0e:90:5d:8f:03:97:ef:ef:18:53:
ca:8b:bc:56:9b:a9:c5:f1:93:bb:66:b2:78:2a:80:
80:9e:e7:e8:9c:ea:6d:6e:65:23:04:97:55:cc:df:
4e:3b:2a:aa:0b:7c:a9:b9:3c:8f:dd:a4:46:37:60:
4c:c9:a1:7a:55:ec:5f:32:28:0f:0d:6d:c1:7a:5a:
b5:05:a9:fe:47:b3:25:26:57:92:cc:e2:d7:60:75:
04:c2:eb:4c:0e:c2:cc:ca:fb:94:74:4d:68:79:dc:
23:4e:48:02:f9:05:3e:88:e7:31:3e:67:57:24:c9:
48:91:a4:76:71:8f:15:f9:d6:82:23:73:c0:c3:05:
bd:38:05:25:7b:95:f0:8d:9d:06:dc:b7:9f:eb:22:
4f:b3:a3:2e:20:e8:a7:bf:eb:e0:f3:bf:7d:35:be:
20:bd:2e:ac:d0:f2:21:9d:0c:51:de:fb:33:15:81:
f6:b3:84:a0:ef:81:5e:38:69:09:fc:da:7b:cf:5c:
44:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5C:61:38:9F:20:77:22:D9:30:8F:E6:C7:F5:F4:5F:6B:1A:F6:09
X509v3 Authority Key Identifier:
keyid:9B:C0:C5:BE:77:EF:99:CA:4A:7E:91:DF:FD:58:E6:A7:98:74:3C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:7e:bf:88:06:a1:08:83:b5:e2:09:d4:9a:14:47:33:66:10:
ea:ab:ce:a4:cf:4b:17:e1:9c:6b:e2:e0:1b:a0:7e:14:c5:92:
cb:05:d4:f1:60:e9:e6:73:21:e9:c8:b3:3a:19:79:32:12:13:
97:3d:4c:33:0d:89:8e:10:7d:f0:b2:ad:1f:c1:c8:71:54:5a:
e5:5f:bc:11:92:a6:0c:e2:7a:c8:3f:d5:e3:a6:b7:84:ca:d5:
e8:ff:8a:db:4a:80:ef:37:00:61:bd:34:65:50:76:0e:3a:a9:
b3:50:72:1a:84:6b:ea:30:46:9b:41:61:d6:de:cc:97:d4:9b:
a6:95:24:6f:f7:a1:be:18:ff:64:af:56:85:e6:08:1a:0d:af:
54:dc:e1:e2:fa:74:38:88:a5:3f:a8:f4:41:dc:7a:df:85:cb:
42:05:99:69:99:66:ac:51:87:43:f3:af:e5:ff:53:72:90:35:
d9:ae:4f:56:d0:66:a0:1d:26:2d:33:7b:77:6b:8a:1d:cf:cd:
92:0e:a3:4b:37:42:f5:19:f8:25:b3:c2:f6:7c:46:90:8c:42:
74:bf:93:1c:5b:20:58:3a:02:b9:66:ab:15:d9:0c:ff:cc:2d:
db:31:77:9c:3c:cf:73:78:7b:5d:48:34:9c:39:7f:88:43:2f:
bf:58:0f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:57:07 2025 by rpki-client