
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
File: 88iZC9bpMHET6DgyxpFf2lys_C8.mft (raw, json)
Hash identifier: 2nr52XSOPqRdBdjvpqAZutVf5D2oA5EMqQxxATZS19U=
Subject key identifier: F7:C1:37:6F:DE:5D:EA:5D:D3:CA:F0:C1:5D:9C:45:11:79:AC:20:20
Authority key identifier: F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
Certificate issuer: /CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Certificate serial: 01987AF733F759DC4F1C438B3CF1FF0E9DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 16:01:17 +0000
Manifest this update: Tue 05 Aug 2025 16:01:17 +0000
Manifest next update: Wed 06 Aug 2025 16:01:17 +0000
Files and hashes: 1: 88iZC9bpMHET6DgyxpFf2lys_C8.crl (hash: //Wa7h8k/CzYo3NGmZVwXvkDEvVpjdaP9FE1b/v6GyA=)
2: ic2AvQV4fn5mQGurv_9LydC-BbI.roa (hash: mD0dAfaF87izkBorR76KrAgNEqpqvPq8C6YXxT1+QYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:f7:33:f7:59:dc:4f:1c:43:8b:3c:f1:ff:0e:9d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Validity
Not Before: Aug 5 16:01:17 2025 GMT
Not After : Aug 6 16:01:17 2025 GMT
Subject: CN=f7c1376fde5dea5dd3caf0c15d9c451179ac2020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:8b:a0:62:c5:a9:5d:6d:49:20:f8:40:d8:
d8:61:b4:14:3a:5e:8c:b8:4e:80:3b:1a:aa:03:53:
a2:b1:9e:59:11:a4:4a:84:95:ab:34:eb:13:aa:94:
61:0b:83:10:6f:f3:a4:7f:f5:5e:df:ef:aa:6b:a2:
22:ec:16:f2:46:21:63:8f:75:ca:09:91:b7:4f:f2:
5a:db:9e:ae:01:5b:d4:af:76:ff:22:92:de:9e:6e:
a6:60:e8:fc:79:89:75:59:36:df:cd:60:bc:b0:af:
ff:2f:cf:cc:e1:3f:79:24:7c:71:ab:88:4c:03:2a:
9b:c1:22:e5:71:8f:ee:10:85:49:11:57:8a:85:fd:
37:3f:8e:43:6d:d5:c5:de:c4:ee:7a:45:82:d6:fd:
d5:87:9e:b8:1d:54:a4:24:84:af:50:80:95:99:26:
ca:5a:b3:9b:51:7e:30:b4:b7:23:27:77:61:c3:f3:
4d:c6:cd:13:80:68:85:22:c1:4a:14:ee:43:a6:c2:
f1:02:32:f9:7e:15:a1:bd:e4:bd:9e:07:34:c9:02:
9e:f2:91:fd:51:39:12:ef:18:1a:17:9c:48:25:41:
39:7d:93:81:72:b0:21:dd:17:ce:6b:3f:2c:45:8e:
2b:82:53:ae:28:46:44:05:33:76:b2:67:0f:74:0b:
cb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C1:37:6F:DE:5D:EA:5D:D3:CA:F0:C1:5D:9C:45:11:79:AC:20:20
X509v3 Authority Key Identifier:
keyid:F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e0:78:bf:4c:00:d9:ff:96:7a:d4:2f:49:ab:05:ed:70:6f:
2c:93:64:a6:66:95:a9:0b:86:8e:a6:31:77:d6:1e:24:2c:c6:
1b:3b:c8:96:3a:a5:34:69:20:33:43:0e:00:56:a7:c8:3e:bd:
da:92:87:7b:7d:53:82:05:34:39:bb:66:af:e4:31:3d:60:f7:
81:65:f5:a2:65:39:9a:4c:a2:0e:3f:e0:54:95:ac:80:67:c5:
d1:e4:90:64:83:d1:20:ce:db:2c:23:e1:eb:b6:ac:c9:b9:0e:
ef:9e:14:0c:33:d5:53:fa:a4:d3:47:14:72:e8:77:f3:50:02:
11:5c:01:6d:c7:1a:ab:7c:59:76:43:10:24:a7:3d:f9:62:bb:
6d:d1:94:f7:5e:35:ef:cc:71:51:bf:80:df:99:52:b4:8c:b0:
1e:e3:ac:e7:e1:57:08:87:14:07:bf:da:62:9d:2c:1a:ba:f1:
dd:99:f4:d4:7f:c9:9d:45:68:4e:52:4f:24:af:98:53:43:a8:
97:fc:c6:22:70:7e:ea:4e:80:24:16:f0:56:cb:04:27:0d:c1:
d8:a5:29:9a:a4:b4:b2:df:e0:a7:73:48:cb:8d:0b:a5:70:17:
a6:7e:5c:c6:2d:ba:8b:97:43:7a:35:c0:08:b2:f3:b8:64:6e:
4d:b1:95:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:21:53 2025 by rpki-client