Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
File: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft (raw, json)
Hash identifier: aqHeNMak8OLQTb2ZVqBuLXdi1ILDwJ+6sC2L34XUk34=
Subject key identifier: 15:DE:4E:CA:D6:98:D3:FF:B7:AB:7C:E5:1D:B9:D1:CD:DF:02:F0:F3
Authority key identifier: F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86
Certificate issuer: /CN=f12b381e00d61621acc45cf18a3e70597d5b9186
Certificate serial: 0198D660F26F640CCF135CE351DF9EEB0A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
Manifest number: 12EA
Signing time: Sat 23 Aug 2025 10:02:14 +0000
Manifest this update: Sat 23 Aug 2025 10:02:14 +0000
Manifest next update: Sun 24 Aug 2025 10:02:14 +0000
Files and hashes: 1: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl (hash: S5Md7ZYnYN0VxDN6DM6jD3agVb8VrthhB1gdlYuzhn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:f2:6f:64:0c:cf:13:5c:e3:51:df:9e:eb:0a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b381e00d61621acc45cf18a3e70597d5b9186
Validity
Not Before: Aug 23 10:02:14 2025 GMT
Not After : Aug 24 10:02:14 2025 GMT
Subject: CN=15de4ecad698d3ffb7ab7ce51db9d1cddf02f0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0a:3f:c5:bf:98:e9:d8:a9:44:66:3a:85:cf:
1b:ca:cf:38:be:68:04:ce:d5:6b:10:bc:a9:c5:4d:
dc:93:55:43:ed:fa:a3:f6:3a:4e:a2:18:d4:a3:77:
da:f1:cc:cd:10:7b:6d:7f:0c:98:95:1d:b2:eb:5c:
ed:1b:cd:5b:50:bd:9f:a5:d1:08:7a:dd:ac:1a:ae:
d0:d5:9f:ea:16:7e:88:e9:4f:77:85:23:3f:fb:f1:
61:8f:1e:b7:a5:23:33:be:88:cf:2d:7c:b2:2a:55:
15:30:ff:79:dd:1f:e2:5f:b5:7e:6e:40:81:bc:97:
d2:07:8e:7b:8b:e9:6a:bf:c2:53:67:0a:77:5c:85:
51:14:5d:ca:b4:3a:b0:33:26:8a:05:60:0e:35:e1:
20:9f:73:d6:89:cb:b6:53:8d:eb:11:d2:93:a2:84:
2f:9b:83:26:c5:fe:8e:0d:02:d9:c5:d5:17:2b:1b:
38:79:92:ad:53:b2:d5:a8:eb:1c:78:68:38:7f:c8:
e2:e0:fd:ca:51:41:af:b3:a5:e5:19:c8:3b:06:fe:
9a:1f:39:35:75:21:0c:2b:3a:6c:7b:22:7c:fe:d5:
72:21:9f:c8:5b:4b:b6:9f:57:a0:38:16:d6:54:28:
cb:a9:ce:4e:f5:71:4b:cc:9b:d5:7c:39:03:55:df:
11:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DE:4E:CA:D6:98:D3:FF:B7:AB:7C:E5:1D:B9:D1:CD:DF:02:F0:F3
X509v3 Authority Key Identifier:
keyid:F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:18:46:66:07:b8:35:25:95:f7:ef:ba:32:2b:7f:1e:26:c9:
9c:46:68:de:94:65:1b:0b:26:4f:ed:e3:fd:99:8c:4f:34:94:
ad:d6:b8:a5:22:a6:53:f9:19:a8:58:61:a2:38:10:aa:f0:a8:
55:17:f0:7e:f2:74:c8:b1:68:dd:53:67:0c:0b:0a:76:70:b1:
3f:2e:7d:22:99:91:e7:ab:f7:05:27:0a:25:2b:dd:45:28:f5:
c0:48:61:f8:ee:77:07:69:67:8e:3c:6b:c3:ad:a1:8a:b0:0d:
82:99:90:0f:b6:c7:a9:25:2f:55:3f:0e:39:37:a1:51:a0:95:
0c:74:56:a2:f4:dc:a5:5b:1c:f5:9d:51:f9:48:f3:67:ca:40:
81:bb:4b:c5:51:52:91:ca:76:9a:9b:9c:e0:cd:e2:6c:29:4d:
5f:ec:a1:3c:16:13:3e:78:90:67:c6:b4:37:31:e8:a7:94:2d:
8a:44:fa:d1:a0:e5:08:64:ed:e1:e5:9c:18:29:69:5b:70:36:
08:0b:df:71:29:84:eb:0f:d0:25:d0:a4:a0:7a:f2:c9:ee:a4:
ce:bf:aa:36:60:04:e2:c3:c7:0a:89:86:ff:a0:2a:b3:72:c8:
37:a8:ce:80:45:3b:b6:4b:98:4b:ac:ed:75:3b:2c:47:db:70:
33:6b:4e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:37:47 2025 by rpki-client