Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
File: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft (raw, json)
Hash identifier: 7iwNFkRpzfwNCQRzkIrRrzRBqwsAi484O0zZu4gfhBo=
Subject key identifier: 68:E5:B3:C6:B1:59:53:E1:BD:E7:6D:4D:76:FB:F9:1A:F8:E7:8A:BF
Authority key identifier: F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27
Certificate issuer: /CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
Certificate serial: 0198808B3714B00FC3C507EC2E21553FFDED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
Manifest number: 01D8
Signing time: Wed 06 Aug 2025 18:01:03 +0000
Manifest this update: Wed 06 Aug 2025 18:01:03 +0000
Manifest next update: Thu 07 Aug 2025 18:01:03 +0000
Files and hashes: 1: 9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl (hash: USqNlptFURg1xSetUC12UWX+Wc9YmPu1j9LQDNVb2c8=)
2: MDg3SGQivd4Gkhmi2ar9KtkbxPw.roa (hash: kp0L4LourZESQv5PNyUfmc/3RRGNdSH3s5Vl6lYig18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:37:14:b0:0f:c3:c5:07:ec:2e:21:55:3f:fd:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ff3e7d8659e8ae9f6f4f31d3f24fdb3c6df527
Validity
Not Before: Aug 6 18:01:03 2025 GMT
Not After : Aug 7 18:01:03 2025 GMT
Subject: CN=68e5b3c6b15953e1bde76d4d76fbf91af8e78abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:b6:d0:50:16:34:95:b1:80:e1:99:27:29:
d4:62:1d:06:bc:21:7d:a5:fc:8b:9b:ea:3a:a5:9b:
34:dc:1b:d3:36:62:78:96:8b:29:80:b6:aa:cd:07:
36:11:6c:97:91:a8:6d:bc:40:cd:98:b1:3a:b7:44:
8c:df:f3:6b:a4:fd:02:86:f4:39:2d:a1:1b:bd:c3:
2c:6c:8d:d7:69:e4:37:d2:ed:f9:98:dd:3d:49:96:
fb:59:7b:f7:13:0b:96:54:71:68:6e:c9:cb:14:a9:
e2:ea:51:be:5b:15:88:54:e5:68:a2:70:53:58:3e:
3d:89:bd:48:dc:a2:f5:4e:71:13:3f:2d:28:f6:c7:
ce:ab:0b:2f:cc:30:e5:05:33:b6:67:7d:fd:07:73:
7d:b1:a7:e1:64:5a:ad:25:75:06:b8:6d:a5:19:83:
4e:b6:34:1a:4e:49:b0:ca:5d:a1:8d:84:44:ae:a7:
4f:68:c5:f3:bc:a3:92:1e:b7:5c:87:38:d8:a0:71:
56:5f:6a:50:5d:14:ec:e2:62:cf:2f:b6:62:a3:11:
bb:9c:6a:64:ba:a6:db:39:35:48:9c:85:a7:37:0d:
73:20:5e:d3:b9:d3:45:d6:a3:60:56:32:e8:03:ee:
18:cb:3a:92:f0:a3:e9:65:bd:0e:10:3a:25:91:ca:
64:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E5:B3:C6:B1:59:53:E1:BD:E7:6D:4D:76:FB:F9:1A:F8:E7:8A:BF
X509v3 Authority Key Identifier:
keyid:F7:FF:3E:7D:86:59:E8:AE:9F:6F:4F:31:D3:F2:4F:DB:3C:6D:F5:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/89688c-e094-4316-8130-aa2f8a2b0e88/1/9_8-fYZZ6K6fb08x0_JP2zxt9Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5c:43:b9:81:e7:c0:d9:cb:4f:d1:38:4d:1a:4c:56:b4:f3:
ce:41:71:57:ee:46:12:23:78:05:17:1f:2b:6d:cd:eb:3c:0d:
18:87:24:61:59:75:c3:4e:71:2f:3e:37:99:6a:30:6d:65:9d:
63:ae:1b:4c:55:fe:1d:b1:30:ca:24:e7:48:32:81:f8:a3:60:
a5:79:d6:08:a1:10:98:d9:a3:de:6e:0f:3c:14:d0:e5:81:b6:
05:45:a7:b8:61:e6:ef:08:0c:3c:10:ee:f7:5e:16:89:b6:46:
08:83:e2:c0:d9:9a:b6:d3:7d:7f:03:67:3d:b7:7d:98:51:ea:
8e:d6:a8:71:55:15:e3:bc:57:2b:70:a1:79:24:84:c6:60:2d:
d1:68:50:85:bf:93:56:12:11:59:99:eb:94:b3:6a:e7:ff:2f:
9e:53:e3:3d:67:29:44:66:bc:cc:91:fd:bb:0a:dd:cc:95:d9:
51:57:31:b4:b6:d3:68:ab:20:df:68:85:40:b1:97:b6:cc:3a:
12:ea:81:23:3c:2c:39:3c:f7:09:ae:63:b0:65:0d:ed:08:30:
3f:92:3f:d8:f6:7c:71:6c:a3:58:f6:67:87:f6:2c:d8:f8:02:
80:ac:0c:4a:ac:10:be:16:ab:10:d1:56:b7:14:12:5a:a0:7c:
fe:d5:f2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:44:16 2025 by rpki-client