Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft
File: n8UDUANWwjcveVsQ0PfVid9p_Is.mft (raw, json)
Hash identifier: w3GHtSBVD4ZXMuCEOHBjizgrMtKjx2hgGN/flRHSLRw=
Subject key identifier: 98:0A:41:E0:02:F1:D1:33:CC:9B:A4:7F:9D:5A:44:53:9F:42:C0:A6
Authority key identifier: 9F:C5:03:50:03:56:C2:37:2F:79:5B:10:D0:F7:D5:89:DF:69:FC:8B
Certificate issuer: /CN=9fc503500356c2372f795b10d0f7d589df69fc8b
Certificate serial: 01988B0EEF0278038C4CF72D83E75637E999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8UDUANWwjcveVsQ0PfVid9p_Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft
Manifest number: 1620
Signing time: Fri 08 Aug 2025 19:01:08 +0000
Manifest this update: Fri 08 Aug 2025 19:01:08 +0000
Manifest next update: Sat 09 Aug 2025 19:01:08 +0000
Files and hashes: 1: n8UDUANWwjcveVsQ0PfVid9p_Is.crl (hash: eJ8Qb/RX11faK36FXQoUuUx1jTSAXLVY4u+0EunZLC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/n8UDUANWwjcveVsQ0PfVid9p_Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:ef:02:78:03:8c:4c:f7:2d:83:e7:56:37:e9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fc503500356c2372f795b10d0f7d589df69fc8b
Validity
Not Before: Aug 8 19:01:08 2025 GMT
Not After : Aug 9 19:01:08 2025 GMT
Subject: CN=980a41e002f1d133cc9ba47f9d5a44539f42c0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dc:10:de:61:47:aa:86:b3:02:89:b7:66:97:
c1:b4:46:66:6c:7c:3a:96:55:f7:f3:f8:b6:bb:61:
1a:89:f8:f9:76:26:3c:5c:a9:41:82:e9:61:80:6a:
23:2e:ad:18:29:8e:e4:a8:80:14:1c:69:de:f5:30:
39:79:7d:20:a0:6c:83:25:bc:9b:51:cd:da:70:d4:
0e:d6:a8:3d:cc:88:25:f2:3c:a4:34:d2:3a:b7:99:
13:b6:f3:a2:f5:f0:75:36:b1:d9:d2:bc:ce:ce:af:
a9:15:89:3f:22:ce:72:80:4c:09:df:6b:77:ab:b3:
48:84:98:53:15:d2:0d:dc:f3:ea:2f:09:08:d9:95:
d3:49:16:33:81:c2:fe:42:44:fa:ba:0a:8f:0b:e7:
7b:06:04:9b:d0:2e:48:05:17:d2:de:0a:6d:1b:1a:
18:e2:18:b3:d8:9f:b4:cf:ab:dd:00:da:ac:a8:01:
04:17:dc:b5:0f:72:be:a4:c3:1e:87:b3:74:6f:6a:
9f:03:b0:bc:a9:d0:df:c8:ae:a8:af:4b:a0:77:ae:
22:14:cd:cc:16:1d:69:dd:5a:7f:7d:51:d1:06:e8:
1a:21:92:a1:2d:b5:33:7f:e4:a2:28:d0:da:1a:85:
ea:2f:41:9b:c2:14:cf:79:1c:b4:7a:46:9d:28:16:
94:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0A:41:E0:02:F1:D1:33:CC:9B:A4:7F:9D:5A:44:53:9F:42:C0:A6
X509v3 Authority Key Identifier:
keyid:9F:C5:03:50:03:56:C2:37:2F:79:5B:10:D0:F7:D5:89:DF:69:FC:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8UDUANWwjcveVsQ0PfVid9p_Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3f:c2:00:b2:55:6b:de:1c:89:b7:02:a1:20:6f:da:66:74:
ac:b3:9e:ca:a2:44:53:90:d0:19:69:43:d7:06:06:31:78:4e:
4a:2f:f0:58:02:6b:1e:33:9b:fa:b4:1a:57:07:a3:fb:fa:15:
3e:6f:51:3f:e0:69:3d:e8:49:96:83:d1:f7:78:5f:41:6f:99:
58:85:16:12:a4:16:c8:ad:de:e2:a4:c6:3f:7e:18:4a:06:f4:
1e:e9:7d:41:aa:a5:a6:f4:0f:b2:52:c6:10:ad:9f:ce:47:36:
5e:29:df:c3:59:91:16:1b:bc:24:a6:7a:04:20:89:3c:d1:9d:
fe:38:84:53:99:eb:80:a5:e8:c2:1c:f0:a2:8f:c0:e3:ce:88:
49:ff:d5:be:69:f8:75:6a:33:c7:2c:a5:64:84:85:de:25:eb:
3a:9d:db:08:82:16:c3:1c:ae:f5:e2:cb:af:3c:cf:fa:21:8b:
d9:5c:f5:17:49:2b:0c:97:1c:cb:9d:dc:e1:03:fa:f6:ba:9d:
28:c3:4f:42:04:d6:13:47:5c:6e:3e:67:56:b3:14:98:ec:16:
63:b0:47:ef:0f:dd:c7:b1:2b:9f:0e:5e:fa:84:22:d1:93:14:
fc:8b:3c:70:28:74:b5:2b:5d:22:4c:68:47:e1:30:1e:ab:23:
a3:9f:01:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:48:34 2025 by rpki-client