Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
File: 8EDR-cl75GbgverISSieKjzKns4.mft (raw, json)
Hash identifier: luqpyk5wzy+OR28xdoAUxwsk0oRvpu1emv2QIPzUrEw=
Subject key identifier: 82:CB:68:29:8F:4D:54:11:49:2F:5E:36:32:4E:03:25:C6:5A:12:B0
Authority key identifier: F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
Certificate issuer: /CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Certificate serial: 01988D6AD8E3E5143688B4F3CC3F2C2F19B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
Manifest number: 161F
Signing time: Sat 09 Aug 2025 06:00:46 +0000
Manifest this update: Sat 09 Aug 2025 06:00:46 +0000
Manifest next update: Sun 10 Aug 2025 06:00:46 +0000
Files and hashes: 1: 8EDR-cl75GbgverISSieKjzKns4.crl (hash: 0A7kuCJG1mu4zkh5/5klsjp0n9JSVQcQZU7pKLtddl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6a:d8:e3:e5:14:36:88:b4:f3:cc:3f:2c:2f:19:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Validity
Not Before: Aug 9 06:00:46 2025 GMT
Not After : Aug 10 06:00:46 2025 GMT
Subject: CN=82cb68298f4d5411492f5e36324e0325c65a12b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:d1:2a:ea:f8:c6:63:5e:c7:4f:b9:d5:44:
e9:24:e0:01:93:3f:e5:5b:86:03:5b:78:56:8b:7a:
65:16:0d:4d:0a:8c:81:7a:e0:0e:c8:10:fa:ef:fa:
a7:d8:75:45:d4:c2:23:66:12:3d:3e:1a:32:59:aa:
e1:d7:a4:15:ab:d8:6c:d7:b2:26:bf:32:67:02:bd:
a7:20:07:26:fd:a4:fb:b6:b5:76:1d:e3:1c:8b:83:
ea:9a:ec:64:1c:d0:86:f8:94:70:eb:3c:86:54:a9:
00:60:65:08:53:97:6d:c0:82:c3:7b:e9:18:7b:dd:
db:7d:a5:47:62:38:b4:b9:81:cd:31:68:ad:44:01:
be:0b:e1:07:aa:49:0c:af:40:8b:6a:3c:ad:a0:e6:
0e:69:97:99:35:a0:ea:22:84:41:25:40:f2:6d:d3:
d7:34:c7:11:5a:11:d7:f3:19:84:ea:0c:c8:fe:c7:
ef:3f:c0:d5:c5:0b:66:b8:a7:42:21:db:1e:06:ee:
21:9b:19:02:35:7a:76:21:4b:09:9a:ef:e9:f3:fe:
0a:6d:30:ee:c1:44:48:5f:24:d4:30:00:b9:c9:e6:
6e:4b:71:0a:96:4f:ff:a0:87:e7:16:9f:17:28:a0:
00:0f:41:4c:04:a4:71:bf:a4:eb:bb:c2:90:d5:df:
b9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CB:68:29:8F:4D:54:11:49:2F:5E:36:32:4E:03:25:C6:5A:12:B0
X509v3 Authority Key Identifier:
keyid:F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:de:b9:da:79:7a:92:2d:22:e1:eb:44:b2:5d:67:db:bd:17:
76:63:96:d1:43:0f:ef:af:e7:22:81:72:c8:04:b7:cd:9e:cb:
3c:d9:1e:ba:54:bf:7c:b7:b3:65:8d:a1:40:9b:1a:ed:cf:db:
47:19:23:d5:a5:57:e4:3a:46:3b:74:77:19:ab:1e:ab:f9:96:
3a:90:cf:64:d5:6a:98:d9:99:36:4a:83:82:5b:8b:71:ab:ca:
25:2a:12:46:4e:e1:c4:a1:18:83:d7:8e:50:7c:5a:a0:52:d7:
72:a2:87:28:29:c4:02:23:46:91:cc:91:2b:04:0d:fa:81:77:
6f:40:07:68:db:b1:6c:b8:b1:5d:90:5c:09:09:7d:1f:94:70:
45:fb:84:d9:dd:9f:c9:f7:63:bb:35:bf:87:ff:bb:69:70:c8:
4e:40:ff:77:21:b7:86:e3:2e:c2:ce:22:52:11:90:7c:b1:f5:
d7:eb:31:1a:22:85:57:a9:fb:ed:e0:51:aa:64:bd:c1:bd:1d:
82:9f:00:4c:2c:7f:f0:08:c6:24:18:09:02:91:37:95:d6:53:
e5:c3:f9:de:8d:55:4e:28:5b:bf:cb:61:72:69:13:4e:7e:8c:
0e:0c:c2:07:90:a8:8c:77:86:ad:56:84:0c:af:24:05:7f:42:
ff:83:bf:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:23:38 2025 by rpki-client