Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
File: 8DqRN3TbyeYF3BerI6BaFoA5jeU.mft (raw, json)
Hash identifier: QqqxI1DDmX+UJ3wZzhcfNYac7Rbsn3aO6tyGTSwKFig=
Subject key identifier: 86:AC:44:29:EE:D5:1E:54:46:1E:2E:E9:EB:62:DD:1A:FD:9A:9D:13
Authority key identifier: F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
Certificate issuer: /CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Certificate serial: 019896A5C4EDAAF97924EEEEF0BBA24EB212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
Manifest number: 09EC
Signing time: Mon 11 Aug 2025 01:01:42 +0000
Manifest this update: Mon 11 Aug 2025 01:01:42 +0000
Manifest next update: Tue 12 Aug 2025 01:01:42 +0000
Files and hashes: 1: 8DqRN3TbyeYF3BerI6BaFoA5jeU.crl (hash: WDQH+jmenxBuX6DoUtzvf0tNufOJZeWH1yo4xg7o5hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:c4:ed:aa:f9:79:24:ee:ee:f0:bb:a2:4e:b2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Validity
Not Before: Aug 11 01:01:42 2025 GMT
Not After : Aug 12 01:01:42 2025 GMT
Subject: CN=86ac4429eed51e54461e2ee9eb62dd1afd9a9d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9c:19:a6:de:eb:2c:34:a3:5d:9c:09:f8:27:
31:ba:03:98:c9:8f:8b:86:6e:09:05:e0:81:3a:dc:
d8:82:dc:fc:c2:67:98:b5:28:66:71:c3:38:cc:ed:
93:07:4a:22:4d:11:21:02:2f:da:96:01:8e:49:1f:
69:5d:01:ff:72:fb:79:05:80:15:71:81:39:f8:93:
9f:fc:57:d8:2d:48:43:f8:60:56:c8:bc:33:21:b6:
80:d8:61:14:a1:36:4e:28:2d:41:57:4f:38:bd:d2:
e1:24:46:3e:67:c9:90:42:41:cb:07:c7:b7:bb:e0:
10:76:4e:65:65:99:5e:04:c8:3e:a9:ac:79:b4:4a:
73:cf:91:24:d3:85:52:e2:1e:e8:47:bf:a2:b7:09:
97:54:eb:b1:41:00:9e:4e:14:5e:3c:c6:45:dc:be:
ad:08:e4:4f:4c:1a:ef:6b:0c:22:d5:69:2a:6c:b1:
8c:d7:8e:4b:ff:2b:2e:16:19:5a:e3:08:3e:2f:e6:
77:15:fc:28:49:3e:8e:0c:a4:ff:0e:82:da:b0:67:
23:ae:0c:26:cd:49:57:98:5f:c6:4d:c8:a7:7b:a4:
ee:1c:cb:b7:54:a8:b9:2d:04:3a:c8:49:26:65:93:
7f:d6:7e:23:31:eb:b1:c9:1f:54:bb:92:8e:f0:59:
98:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AC:44:29:EE:D5:1E:54:46:1E:2E:E9:EB:62:DD:1A:FD:9A:9D:13
X509v3 Authority Key Identifier:
keyid:F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:bd:6c:c7:fc:ec:3c:d4:90:ab:82:c5:ed:73:0b:ae:20:f3:
5c:14:85:d7:1b:18:c9:87:c8:2d:35:37:c6:42:18:47:b5:e2:
b7:a8:87:de:ad:1f:ec:45:88:32:4f:e9:3b:24:25:00:aa:ea:
cd:4b:35:6c:3a:23:c3:4c:ae:66:28:86:0a:a6:3c:58:4f:bc:
b7:60:58:ae:07:a1:bf:74:8a:ea:a9:53:5f:cc:7e:88:0f:6f:
bd:ff:30:b8:f2:34:cf:c4:38:59:b8:51:77:7d:1a:ec:df:1e:
75:43:ab:05:e2:72:6e:d5:82:7b:d6:67:7c:ef:e8:ff:ef:69:
9c:7f:c3:71:ad:1b:0f:4b:b1:16:46:48:66:10:33:45:bb:5d:
97:80:a0:86:e9:89:c1:2c:35:7f:a6:5d:10:1a:44:5d:44:de:
86:59:76:7b:9c:11:a9:c3:28:79:67:78:09:db:6b:81:e0:a8:
f7:a5:f9:12:ba:41:ed:31:ab:03:6d:8a:82:00:a2:18:06:88:
ae:b7:a6:89:73:4f:e6:51:b7:af:c7:f1:d9:a5:4b:b1:ba:41:
d6:fd:db:1d:10:d1:ab:5b:82:de:4a:d8:3a:bb:53:19:48:2b:
72:5f:8d:d8:bb:98:c5:b4:f5:59:fc:18:4b:f0:33:fb:00:f5:
fb:79:8c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:32:31 2025 by rpki-client