Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
File: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft (raw, json)
Hash identifier: Wv2Z0NJjIdrlDG7LIXfU/5zJbeF2Om1CtaUeDhyYxtM=
Subject key identifier: A7:9F:C7:03:B1:2C:68:97:75:92:C7:A6:A6:E3:5F:AF:54:C4:36:F4
Authority key identifier: F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
Certificate issuer: /CN=f32220b696e2e766516c05743d137dbbc17fd261
Certificate serial: 0198D4723D5A48A50564C233CCA9025E9006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 01:01:53 +0000
Manifest this update: Sat 23 Aug 2025 01:01:53 +0000
Manifest next update: Sun 24 Aug 2025 01:01:53 +0000
Files and hashes: 1: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl (hash: Z4Rj9yyNEuv6Edh2Ps1QDCwW+wVbFCTmhQb00TfHCYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:3d:5a:48:a5:05:64:c2:33:cc:a9:02:5e:90:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32220b696e2e766516c05743d137dbbc17fd261
Validity
Not Before: Aug 23 01:01:53 2025 GMT
Not After : Aug 24 01:01:53 2025 GMT
Subject: CN=a79fc703b12c68977592c7a6a6e35faf54c436f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cb:d5:ac:c5:82:46:4a:5a:4f:d0:d1:d6:40:
92:dd:d4:ff:88:0b:ef:c3:7d:64:d5:aa:c0:6f:29:
08:18:52:b7:f8:2d:e7:b8:ac:79:dd:c2:9d:aa:a0:
a3:7b:56:b4:ff:23:a0:21:1b:ce:5b:56:95:27:1c:
ee:36:73:92:1a:d5:80:69:af:bf:46:1b:cc:e2:37:
f9:24:f8:19:a9:90:75:76:3f:69:c5:f4:7b:52:ca:
b8:81:76:eb:03:b1:94:b3:60:a1:20:0f:64:7d:a4:
a7:c5:da:29:d8:16:28:4e:2d:1e:73:e9:6d:31:a6:
f2:d2:3f:4e:bd:32:ee:f1:8c:26:fc:82:df:69:42:
38:f8:6b:2f:bd:f0:03:1e:39:ee:4d:1c:1b:ab:06:
1a:4f:b3:e8:f2:b4:8f:90:c7:38:7d:fa:bf:84:b4:
f5:a4:a3:80:f3:6a:6a:1f:c1:b1:2d:fa:87:be:0c:
ad:e1:cf:9b:80:5a:fe:a1:2e:0f:b7:00:96:c0:f7:
80:0e:11:9d:b8:2b:e4:c3:ec:12:a1:d0:d9:34:4d:
bd:3a:87:06:3c:cb:a4:53:54:10:ac:b8:26:75:c0:
0b:00:b4:da:ec:04:0d:58:48:ea:ac:00:18:e3:08:
26:bf:5e:ac:04:04:5d:28:7e:73:b1:59:3c:2e:1e:
69:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9F:C7:03:B1:2C:68:97:75:92:C7:A6:A6:E3:5F:AF:54:C4:36:F4
X509v3 Authority Key Identifier:
keyid:F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b3:fc:14:0f:52:3e:7d:68:ea:ec:c9:ca:34:ad:32:a6:0c:
18:b9:19:70:c2:94:da:2d:88:f7:59:55:99:f1:64:67:d3:04:
db:34:04:e1:db:26:b5:5c:f5:41:4b:42:15:5e:15:9e:5c:7a:
b9:6f:16:1e:5b:3d:3c:80:5c:e0:69:d3:ff:b9:43:81:e6:b2:
72:d5:94:f3:c7:bc:57:03:16:16:44:75:88:a2:1e:11:60:75:
c8:14:bd:a6:fc:15:8f:d1:73:95:cd:6e:45:85:b7:c6:ed:2d:
09:14:2b:cd:d1:f5:21:b5:3b:e8:78:41:15:8c:20:56:dc:d4:
62:d8:7e:16:53:05:dc:21:09:6f:a6:b7:65:95:74:ab:e8:c9:
0e:f6:22:c1:2d:5f:93:d8:16:40:bf:1b:50:bb:ff:84:79:f3:
05:46:cb:a5:d7:7a:8f:ab:f2:05:84:86:f9:b4:c9:f9:99:66:
89:0a:1b:6d:16:b8:a3:64:32:f0:ed:2c:ca:92:2f:ae:b9:3f:
c3:75:f7:3f:db:47:94:41:99:b4:a5:c1:43:b9:66:77:ad:25:
44:64:c8:bc:0c:f7:dd:5d:5b:c1:22:01:16:bf:bd:ce:77:92:
43:44:1a:50:27:85:90:22:8c:4b:50:97:cc:6d:17:9e:2b:99:
a8:b6:a0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:21 2025 by rpki-client