
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft
File: V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft (raw, json)
Hash identifier: +8e+keK+IfzmjfclecZeYFyHPMiVVP5h0C57BumGAQo=
Subject key identifier: 98:EA:5D:EB:8C:7B:E4:10:F0:24:A7:13:56:1A:6D:12:73:D4:1C:90
Authority key identifier: 57:C3:5B:F2:0C:7E:43:31:2C:2F:08:DD:EC:7A:6D:E8:10:DD:F3:E5
Certificate issuer: /CN=57c35bf20c7e43312c2f08ddec7a6de810ddf3e5
Certificate serial: 01987FE6E1041CED89C2FD512AE86956707E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft
Manifest number: 0649
Signing time: Wed 06 Aug 2025 15:01:33 +0000
Manifest this update: Wed 06 Aug 2025 15:01:33 +0000
Manifest next update: Thu 07 Aug 2025 15:01:33 +0000
Files and hashes: 1: V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.crl (hash: s1K2P9pzu6Km8rjirFGdjiDmXOaz8peJfymJoC4Sqlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 15:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e6:e1:04:1c:ed:89:c2:fd:51:2a:e8:69:56:70:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c35bf20c7e43312c2f08ddec7a6de810ddf3e5
Validity
Not Before: Aug 6 15:01:33 2025 GMT
Not After : Aug 7 15:01:33 2025 GMT
Subject: CN=98ea5deb8c7be410f024a713561a6d1273d41c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:dd:f5:39:fb:04:c0:fa:03:e7:d2:ed:da:
34:ef:50:3b:e5:d5:fa:8d:98:ea:57:31:4b:29:f3:
61:5b:2a:87:b0:6c:a7:a9:54:41:29:08:88:2d:52:
30:24:62:08:7e:d2:2e:4f:a5:8e:e9:9c:38:50:75:
3c:43:ff:57:f7:86:97:f6:58:aa:c4:97:dc:ca:05:
5a:c5:db:39:3f:0e:89:ff:80:66:89:e7:4a:5c:d9:
e9:f4:a1:6b:6b:77:4a:1b:f1:d0:10:c1:19:17:d0:
4a:c1:97:2e:f6:26:8a:37:61:2a:f4:d4:14:d2:5a:
33:25:00:04:60:2b:ea:fd:f3:73:31:7e:9f:ac:20:
72:6d:2f:18:8b:db:4d:15:f0:aa:a0:ea:a3:1e:58:
4c:17:33:64:32:27:9b:bf:40:c2:db:5b:44:fb:24:
21:4c:93:17:0b:1c:b4:92:17:a1:88:41:97:08:26:
84:4b:c9:69:51:78:17:c2:c5:97:86:b6:2a:2a:61:
70:54:77:e5:55:48:59:53:02:d0:a8:c6:3a:da:d0:
0e:c9:13:a4:95:88:02:55:8a:7a:e8:2f:1a:24:2f:
e6:37:c1:51:96:cb:16:83:8b:72:63:09:f7:f2:15:
97:a0:02:26:a3:7e:f0:48:aa:91:55:68:0a:d6:12:
47:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EA:5D:EB:8C:7B:E4:10:F0:24:A7:13:56:1A:6D:12:73:D4:1C:90
X509v3 Authority Key Identifier:
keyid:57:C3:5B:F2:0C:7E:43:31:2C:2F:08:DD:EC:7A:6D:E8:10:DD:F3:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a3fc5f-7378-4e2f-a152-8128b213a471/1/V8Nb8gx-QzEsLwjd7Hpt6BDd8-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:07:54:73:d0:cc:4a:cc:c9:44:62:e2:e8:ce:72:9b:10:59:
d9:5d:7e:4d:79:ad:d7:02:16:24:2a:a5:b6:c3:4d:91:4c:99:
7e:d6:d1:25:da:48:cd:d8:5a:cb:12:d2:5b:44:45:d9:7e:f4:
77:ff:cc:68:10:2e:36:23:38:9b:ac:1d:6a:c2:57:ad:86:bf:
ae:ef:a2:6b:9a:2a:0f:80:02:19:17:78:a6:9e:d7:5c:e2:82:
af:cc:fe:59:4d:1d:5d:a1:9b:f7:ef:aa:75:b0:26:07:78:66:
de:65:32:7a:49:10:b2:b9:47:b1:25:87:d8:d9:24:bb:8d:bc:
1b:44:c9:ec:ff:6d:28:aa:14:0b:ea:2b:ac:e7:cd:12:1d:d0:
50:2a:66:27:b3:a9:78:0f:92:26:f0:31:da:b6:ae:c8:0b:b2:
c6:17:97:e3:21:b8:6a:9c:06:3c:9f:aa:17:75:bc:3d:b2:20:
34:13:89:05:aa:48:a6:62:1a:5a:f1:1d:a2:77:bb:24:19:dd:
0b:96:40:f1:a3:b5:5f:28:3e:e1:d2:e5:61:13:98:fb:be:b3:
d4:5c:41:d6:e9:55:da:f8:de:8b:f4:b9:49:d2:68:83:22:b0:
f5:01:ff:16:44:46:32:12:b0:d8:62:ba:6a:a6:06:5c:56:d4:
08:a0:8b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:33:25 2025 by rpki-client