Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
File: 8BGVyAze5CsGiNuOk6aLRZuFjm4.mft (raw, json)
Hash identifier: 69zlh5eRoIT6ZPg7mUGQksegrOHO9JbNn6urRN8yuaQ=
Subject key identifier: DD:9D:6D:82:20:8E:61:E9:09:A6:17:D7:D0:E3:66:D9:8B:DD:11:4C
Authority key identifier: F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E
Certificate issuer: /CN=f01195c80cdee42b0688db8e93a68b459b858e6e
Certificate serial: 01987C09A733D312C8D6BD2ECA936B7D582A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
Manifest number: 0402
Signing time: Tue 05 Aug 2025 21:01:03 +0000
Manifest this update: Tue 05 Aug 2025 21:01:03 +0000
Manifest next update: Wed 06 Aug 2025 21:01:03 +0000
Files and hashes: 1: 8BGVyAze5CsGiNuOk6aLRZuFjm4.crl (hash: IfxprWXmha0F8B2PyNKXcSrlUouKQeTLeT/Vvk6r0Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:a7:33:d3:12:c8:d6:bd:2e:ca:93:6b:7d:58:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01195c80cdee42b0688db8e93a68b459b858e6e
Validity
Not Before: Aug 5 21:01:03 2025 GMT
Not After : Aug 6 21:01:03 2025 GMT
Subject: CN=dd9d6d82208e61e909a617d7d0e366d98bdd114c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:69:f6:b0:b8:66:15:e9:b4:17:cb:e9:92:06:
9f:57:e6:a8:4f:10:ff:6c:5e:a0:b3:32:bb:02:8b:
17:db:b8:f9:8d:31:ed:35:54:04:57:b9:6d:14:47:
0d:e0:66:10:d3:76:4d:5a:79:52:d2:81:6a:5d:d1:
61:02:75:8f:29:75:85:4b:32:1d:dc:c0:0e:74:42:
37:50:ed:eb:5a:03:47:d2:34:45:49:8f:a4:07:cd:
68:e8:68:6b:e8:5f:4d:d8:43:96:71:b4:c2:d6:e3:
49:c5:73:b9:65:42:f4:6f:58:08:2d:ca:22:7c:f4:
8c:05:f3:d6:3d:a3:e3:e6:86:72:96:3c:95:6c:19:
a5:70:41:52:58:f6:9d:f9:eb:0b:f0:cb:34:a6:ca:
82:c9:54:e2:d3:81:bd:19:88:2d:35:13:0a:8d:9c:
36:75:22:6e:f1:4e:5b:ba:80:57:f0:0d:b0:2d:24:
89:1a:03:bd:9a:ad:f1:5f:d1:58:19:bf:df:72:e1:
31:b2:41:b7:7e:f6:4a:d9:a6:cf:7b:d0:58:cb:b8:
49:35:1f:f4:33:b6:17:9a:6f:0c:68:ab:a6:8d:22:
65:7a:5f:cc:54:f6:ff:26:ff:d9:d6:16:c1:9c:9b:
53:8a:60:f2:6c:9b:26:b8:b9:e9:b4:f5:a9:b8:f2:
5c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9D:6D:82:20:8E:61:E9:09:A6:17:D7:D0:E3:66:D9:8B:DD:11:4C
X509v3 Authority Key Identifier:
keyid:F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:cb:eb:26:cd:bb:dd:2c:ba:22:97:29:48:1b:1e:c2:29:e8:
03:0e:fc:bb:1b:c8:74:a3:91:c1:9e:75:4f:34:22:36:be:28:
aa:c0:4d:8f:74:1a:10:13:1d:45:46:cb:72:a7:28:0a:e6:6f:
68:12:4d:98:30:c7:c7:48:6c:b7:10:2c:24:8e:73:ce:f3:44:
f4:f1:9c:ba:4a:55:05:c5:bb:17:43:52:78:36:55:8a:f7:9f:
2a:87:4b:ed:af:2e:42:ff:47:c0:ec:63:38:40:88:ee:53:66:
77:89:76:93:bd:e5:e7:84:07:81:04:aa:40:e7:c8:5f:42:2a:
ee:25:b9:3d:67:a1:30:ed:3c:f8:53:dc:77:f9:86:dc:6b:ad:
98:0c:3c:04:5a:8a:fd:fd:56:8c:84:7d:2b:e2:68:e8:d1:fd:
38:f1:f8:a2:eb:e3:f4:41:4c:da:b3:b6:c2:96:4c:e8:ff:6c:
6d:cc:f1:71:af:93:b5:1e:c4:ee:0d:8f:37:3b:0b:01:46:23:
19:7a:92:77:3f:32:8e:c8:c6:bd:90:ac:03:48:06:41:50:b8:
d1:e1:2f:32:50:7f:b0:38:77:43:2f:34:d2:12:db:11:49:65:
c9:4b:99:fa:49:92:e6:9b:ce:2e:bc:9e:84:49:68:2f:99:fa:
4d:61:67:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:02:39 2025 by rpki-client