Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
File: I8cVVBujctWQ1odn14zmmEABMFk.mft (raw, json)
Hash identifier: 63rTgFpjgg2jk//27WKH0z/KLqNLOsqnydhGRcpS/eQ=
Subject key identifier: 86:B6:AE:58:57:6B:F0:F9:D4:0B:9E:0E:C9:98:4E:A1:FA:34:6A:3F
Authority key identifier: 23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
Certificate issuer: /CN=23c715541ba372d590d68767d78ce69840013059
Certificate serial: 0198D4743EE79C179E1E6686FA613691F01F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 01:04:04 +0000
Manifest this update: Sat 23 Aug 2025 01:04:04 +0000
Manifest next update: Sun 24 Aug 2025 01:04:04 +0000
Files and hashes: 1: I8cVVBujctWQ1odn14zmmEABMFk.crl (hash: QBB/pNGw6/OnCQE4Ooi96QK1PU9YYOm7rYCzSFGjckE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:3e:e7:9c:17:9e:1e:66:86:fa:61:36:91:f0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23c715541ba372d590d68767d78ce69840013059
Validity
Not Before: Aug 23 01:04:04 2025 GMT
Not After : Aug 24 01:04:04 2025 GMT
Subject: CN=86b6ae58576bf0f9d40b9e0ec9984ea1fa346a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:50:a4:08:0e:d9:6a:49:6d:4f:c2:bd:62:b8:
ac:ca:f4:8c:44:e0:d1:4c:e1:e3:9c:aa:3e:c5:a2:
40:e1:3c:f3:15:0f:9a:92:38:18:aa:2d:f2:ef:c3:
57:3d:90:79:cd:91:5e:aa:13:8d:67:4b:21:8a:bf:
e4:ff:00:79:ad:9a:53:91:bd:4a:80:df:2f:60:23:
bd:b9:a1:cd:b2:6d:c3:63:e7:9d:cc:d1:77:15:79:
39:6c:8a:37:0b:4c:d0:7a:64:4f:df:d8:37:bb:45:
f8:3c:1b:77:72:b2:64:c3:83:ba:13:e0:ca:4e:eb:
cd:df:7a:f4:a8:08:dd:34:0b:fd:a7:2e:8c:e4:4a:
85:8e:97:d2:3f:8d:90:cc:73:5e:32:d2:34:ed:74:
0e:ba:9d:e9:31:f8:1e:60:ae:a0:89:54:5f:31:97:
84:05:9c:07:99:0f:68:03:36:40:80:99:56:02:8a:
05:a4:d6:f9:a1:a3:46:98:b8:42:bd:36:e2:5c:9a:
b6:3e:51:c2:1c:e6:c2:df:c5:52:81:85:52:2e:e7:
10:ce:fb:4d:e1:3c:7e:e0:a4:bc:88:54:f9:d9:e9:
ff:69:5f:fe:bf:90:a0:67:54:50:c0:fb:12:3f:84:
e2:f3:d2:bb:68:01:20:26:20:72:a2:3c:d0:1f:10:
92:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B6:AE:58:57:6B:F0:F9:D4:0B:9E:0E:C9:98:4E:A1:FA:34:6A:3F
X509v3 Authority Key Identifier:
keyid:23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:62:0d:c9:f9:7c:51:2a:60:ef:0e:d3:e1:86:ec:9d:ba:c5:
6d:1b:bd:e3:21:f8:7c:47:45:d6:c7:bb:4f:c1:9d:1e:68:f8:
12:0f:00:d2:52:ab:e2:0c:85:84:22:25:45:ed:c0:e6:b9:7b:
3e:90:0b:7a:86:99:6e:28:2b:4e:b1:e6:eb:38:90:5d:42:ab:
81:ab:4f:0e:2b:b7:28:cc:bc:56:2d:a9:50:54:1e:76:d3:f0:
db:66:e3:7e:a4:91:f1:52:1e:4e:92:c6:b3:fd:2e:2a:63:1a:
8b:65:c4:06:ad:4a:a0:47:e8:e3:5a:fe:ed:01:89:85:cc:77:
80:19:ed:28:50:f3:4b:88:08:14:77:73:39:6d:96:ab:04:ba:
4c:c5:78:43:b8:73:73:8b:43:30:9f:e2:92:8b:0b:9c:44:b4:
05:7f:68:b2:a2:77:2b:b0:ff:1b:96:4b:a7:34:6d:56:c3:a7:
1a:46:89:ad:76:6b:ab:28:d4:fa:c9:dc:8a:4e:c5:3f:f4:2f:
44:a3:25:3b:d6:43:97:ef:7f:50:67:0c:6e:35:8a:ec:8d:23:
69:48:24:50:6b:7b:76:c3:7a:41:b9:a9:00:83:14:34:36:57:
ac:8c:fb:b8:e8:25:59:b9:51:c8:66:8f:06:99:2c:ff:8f:7e:
fa:ab:5b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:33 2025 by rpki-client