Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
File: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft (raw, json)
Hash identifier: GJcrMYc+/gmFTjM+6dF0BsW9BBJLs1waYNwjPvZirFI=
Subject key identifier: 21:2E:69:B7:01:03:4E:AB:D7:F0:78:24:42:97:F2:F7:D2:A5:21:ED
Authority key identifier: 8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
Certificate issuer: /CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Certificate serial: 1808715AC69827FD9ED6B9A7274FD1925F8FE158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
Manifest number: CB
Signing time: Sat 23 Aug 2025 07:39:59 +0000
Manifest this update: Sat 23 Aug 2025 07:34:59 +0000
Manifest next update: Sun 24 Aug 2025 09:13:59 +0000
Files and hashes: 1: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl (hash: mWKZ09qsW2ty0yPtlxhgYqvAuvypVy6osyr9soRC1Pg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:08:71:5a:c6:98:27:fd:9e:d6:b9:a7:27:4f:d1:92:5f:8f:e1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Validity
Not Before: Aug 23 07:34:59 2025 GMT
Not After : Aug 24 09:13:59 2025 GMT
Subject: CN=212E69B701034EABD7F078244297F2F7D2A521ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8d:87:4a:57:41:ae:26:ff:a1:bb:f3:68:db:
53:e8:7a:be:2e:3d:75:e4:d1:77:b7:a7:c2:21:76:
d3:65:84:20:2e:e7:2a:95:0b:ad:92:9a:c2:72:25:
30:83:ac:a5:38:08:7d:d8:a6:71:3c:75:21:9e:d7:
38:38:47:01:70:fc:bc:51:7e:59:0a:b9:dc:5e:53:
20:4e:b9:c5:ff:b9:8e:5f:c7:e6:41:c8:94:81:56:
11:c1:b3:56:27:c2:aa:8a:4e:f0:7f:e7:3b:a5:88:
eb:5b:66:01:97:f7:5c:ab:b7:d6:37:04:47:75:eb:
3f:43:39:50:d2:a2:d7:ba:82:18:1c:dc:dd:5e:6b:
d9:bf:32:db:2d:55:5d:8e:d1:3d:07:b6:a4:52:b3:
38:6f:ee:d3:59:3e:05:9a:e4:f0:04:7b:b4:0c:ea:
1c:99:4e:59:4d:af:da:8a:2f:8d:cc:5f:88:cf:48:
bf:4d:15:cc:78:11:10:94:26:98:f9:f9:c9:63:bd:
f6:52:35:aa:09:50:8e:92:01:5f:56:4f:01:3f:71:
af:b8:16:99:fc:49:52:ba:ad:72:f4:1f:b4:ee:5a:
1d:2a:5b:e4:4a:10:a6:f7:20:60:31:15:4e:5d:23:
b1:a3:4e:95:c7:3b:d1:9c:ee:e5:20:17:2c:38:f2:
15:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2E:69:B7:01:03:4E:AB:D7:F0:78:24:42:97:F2:F7:D2:A5:21:ED
X509v3 Authority Key Identifier:
keyid:8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e5:9f:9a:32:a1:98:e9:84:51:25:b7:57:e9:e2:c1:4e:99:
d9:94:96:d9:6f:91:30:f5:e6:99:5a:df:bc:fa:0a:eb:77:b7:
9f:b7:25:b3:02:af:0f:1b:c5:b8:0b:52:99:e4:d0:4d:55:70:
c6:77:d6:e1:39:eb:78:7a:76:24:f6:21:7c:34:ff:c5:d0:ad:
9b:8b:43:97:5a:f5:dc:d1:92:73:8c:16:af:fb:75:d5:d9:5f:
7e:e1:ad:fa:75:54:37:17:50:69:92:3b:0e:6d:61:6e:ed:93:
61:37:5e:df:a0:fb:b6:ea:2a:d0:be:40:b2:0b:33:10:e1:94:
0d:aa:81:37:1c:c0:cf:c1:3e:2f:e5:8c:78:e5:a2:65:40:61:
04:c5:5d:76:23:5b:fe:2b:85:ad:6b:df:df:74:c0:0c:68:de:
b6:c8:e1:fb:a6:9f:d0:8e:7d:8a:37:78:c6:4a:84:b7:9e:e4:
72:cd:4c:eb:6a:e5:db:c7:05:ed:0e:71:23:a1:f2:8b:91:6c:
d4:cb:94:04:11:be:21:9c:e9:53:0e:5f:d2:5d:45:fc:58:38:
7d:f4:39:d4:00:f2:b3:ac:a6:50:d7:a6:a1:44:5c:f7:25:af:
aa:1e:0f:3e:ad:e1:78:f9:23:2a:6f:71:eb:0a:57:0d:90:c5:
5c:6f:50:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:27 2025 by rpki-client