
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
File: k8QjPQuo54YYoJpyVh3M0GSYyE4.mft (raw, json)
Hash identifier: rXIJdGcx3KzRs1j+ToXwErDm4lKeymI66hhGYG7FLDc=
Subject key identifier: BE:D1:43:E5:9F:53:AA:17:9E:AC:82:71:70:BC:2E:39:00:4A:D3:C4
Authority key identifier: 93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E
Certificate issuer: /CN=93c4233d0ba8e78618a09a72561dccd06498c84e
Certificate serial: 01988355618F59363771C5B72A6C1A847498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
Manifest number: 161C
Signing time: Thu 07 Aug 2025 07:01:07 +0000
Manifest this update: Thu 07 Aug 2025 07:01:07 +0000
Manifest next update: Fri 08 Aug 2025 07:01:07 +0000
Files and hashes: 1: k8QjPQuo54YYoJpyVh3M0GSYyE4.crl (hash: +xu4YiCWqmGNHgwzhkblT2E8LUuhspyTNmUeUnt+jx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:61:8f:59:36:37:71:c5:b7:2a:6c:1a:84:74:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c4233d0ba8e78618a09a72561dccd06498c84e
Validity
Not Before: Aug 7 07:01:07 2025 GMT
Not After : Aug 8 07:01:07 2025 GMT
Subject: CN=bed143e59f53aa179eac827170bc2e39004ad3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:6f:8c:6d:56:0e:83:96:da:5b:c7:4c:c0:
2b:c3:7c:55:95:c3:d4:54:5a:f5:94:10:05:cb:97:
06:1c:20:1a:bf:a5:4f:e7:21:c2:64:71:bd:70:70:
2b:4c:99:16:42:76:eb:79:57:09:0e:4e:c0:cf:c1:
6d:37:98:4f:cc:3f:e3:9f:ec:64:80:c6:1d:ad:98:
ef:e0:16:ce:68:da:32:9b:69:73:8c:5e:81:f6:ff:
3d:5e:25:ad:91:89:b4:fe:08:9f:8b:1e:a5:3b:52:
16:23:e6:de:8f:4e:62:b4:22:5d:8a:cb:b9:36:ce:
d0:76:99:37:02:a7:87:54:ca:7b:1e:cc:ff:fa:6f:
af:b0:4d:d3:4a:bf:af:59:ee:ed:a0:2a:5d:47:c6:
1d:01:1d:71:83:35:51:79:81:9c:40:49:97:88:0b:
23:7d:3e:37:22:c8:04:44:34:db:af:6e:d1:77:b5:
a1:9d:be:4f:a6:34:72:fc:60:85:11:70:51:68:f1:
da:2a:c3:b4:fa:bf:1a:c6:00:0b:68:5a:45:f2:c6:
9c:49:f8:76:52:7f:3b:70:1b:53:d1:d2:47:59:91:
f1:e3:6d:c7:c5:4f:87:07:40:92:1b:dd:f3:2e:8a:
70:61:42:2f:a7:36:dc:5b:0c:67:74:b3:a3:c8:07:
06:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D1:43:E5:9F:53:AA:17:9E:AC:82:71:70:BC:2E:39:00:4A:D3:C4
X509v3 Authority Key Identifier:
keyid:93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:15:2f:d9:cf:16:82:be:ef:6e:48:66:64:8e:68:3c:33:f0:
04:e4:59:8e:23:43:76:3c:c4:7c:fb:5e:e3:e6:7b:dd:8d:a5:
17:e4:49:dd:e5:fe:9c:da:fb:1c:b8:52:c7:f0:9d:f3:e3:a6:
2b:f5:5c:43:36:29:09:70:ef:5a:f4:fd:0e:c6:6d:bc:ef:8a:
02:4f:83:14:3b:22:e1:e9:9f:6d:d1:93:5f:56:6e:53:1e:36:
d9:dd:06:ee:d6:74:2e:93:a1:8c:d2:d4:25:91:47:e1:dd:30:
67:5d:f9:73:bd:8f:02:c0:98:22:60:b4:40:91:1a:22:a2:fd:
81:b3:b5:f7:f3:83:48:0d:1e:fc:1a:19:96:9a:bc:4b:ca:92:
a9:7a:c4:45:d5:31:f0:56:b2:34:bb:47:e9:9a:d7:31:45:39:
3c:63:32:96:30:e5:31:9a:02:87:aa:20:34:bd:2b:fe:e8:08:
68:3a:8a:34:05:98:1a:66:39:ec:d3:64:ea:1d:e7:6e:c9:8a:
75:55:87:a6:e4:da:66:30:62:32:e7:9a:db:e3:1a:56:9e:b7:
8c:b3:f7:f3:b0:c7:b8:c5:31:50:11:db:ec:7d:98:d0:dd:12:
cf:f1:9b:e9:55:47:58:e3:22:5d:00:13:84:ae:b5:cd:1b:5f:
d0:60:38:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:07:41 2025 by rpki-client