Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
File: Z8i133U8dJrleBD52T87pRrgXVw.mft (raw, json)
Hash identifier: J5j3DnSZSqenZAvCh87RNJXZ7gF8mTIo5GkYXnluOE4=
Subject key identifier: 8D:4F:D5:0F:2D:BD:FC:B5:8C:8E:26:86:0D:60:B4:D3:73:60:BF:D3
Authority key identifier: 67:C8:B5:DF:75:3C:74:9A:E5:78:10:F9:D9:3F:3B:A5:1A:E0:5D:5C
Certificate issuer: /CN=67c8b5df753c749ae57810f9d93f3ba51ae05d5c
Certificate serial: 019892CA0BA736977385281B5C7F1415E12B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
Manifest number: 0F23
Signing time: Sun 10 Aug 2025 07:02:51 +0000
Manifest this update: Sun 10 Aug 2025 07:02:51 +0000
Manifest next update: Mon 11 Aug 2025 07:02:51 +0000
Files and hashes: 1: Z8i133U8dJrleBD52T87pRrgXVw.crl (hash: 2/q9uHIBF0tLWvba70ozzqtrhm2ggQKQvgy80m2pGX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ca:0b:a7:36:97:73:85:28:1b:5c:7f:14:15:e1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c8b5df753c749ae57810f9d93f3ba51ae05d5c
Validity
Not Before: Aug 10 07:02:51 2025 GMT
Not After : Aug 11 07:02:51 2025 GMT
Subject: CN=8d4fd50f2dbdfcb58c8e26860d60b4d37360bfd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6b:71:b8:a4:f5:f8:51:83:54:d7:1d:79:72:
4d:c6:8b:26:45:49:e8:2f:0f:77:56:c6:8f:2a:e5:
78:db:a2:d3:71:7b:44:03:5e:58:e8:b2:12:46:5e:
1c:f4:69:2b:6d:95:f7:69:87:e2:f2:07:27:e8:09:
1d:96:91:c2:04:0a:e0:33:b8:e8:82:c8:41:e8:a8:
8e:87:0f:bd:46:97:50:00:24:a4:d1:26:d5:b9:91:
ae:f3:0b:7e:2d:c3:e0:47:eb:56:c9:bc:80:34:13:
ed:30:7a:d6:b9:29:1b:cc:88:bd:02:ce:c5:72:f5:
f5:d9:f5:cc:59:6c:e2:0d:63:74:4e:7f:67:37:e9:
58:20:db:f3:75:89:b0:5a:bf:f6:78:3b:b1:a2:33:
71:4b:74:28:ff:90:29:21:42:28:58:6b:55:62:fb:
bf:32:6f:ea:db:cd:e2:13:0c:94:f0:55:e9:1c:59:
1b:44:6e:f8:19:0b:2b:57:8b:cf:df:3f:1b:dd:d8:
f3:70:df:a4:a9:56:b4:92:3e:cf:09:8f:dc:f0:94:
1c:85:ce:6f:23:c8:05:16:83:91:d0:93:6c:24:0f:
5e:17:83:94:55:2e:7f:d4:b5:47:86:2b:d3:bf:93:
fc:83:60:d1:3e:cd:40:a7:fb:14:07:ae:ec:15:45:
9a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4F:D5:0F:2D:BD:FC:B5:8C:8E:26:86:0D:60:B4:D3:73:60:BF:D3
X509v3 Authority Key Identifier:
keyid:67:C8:B5:DF:75:3C:74:9A:E5:78:10:F9:D9:3F:3B:A5:1A:E0:5D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:52:31:fa:a7:74:62:31:db:bb:51:8d:7a:0a:6d:3f:8e:49:
d9:f0:b8:8b:23:21:2c:3d:cc:18:32:25:0f:77:62:17:9f:1e:
1a:37:ca:a6:df:81:58:c2:f4:25:0f:f7:16:99:f1:bc:42:41:
62:e8:ab:0c:08:6b:fa:42:2c:e0:5c:84:cb:84:d9:1c:f3:cd:
52:f9:59:fe:59:19:92:28:85:32:a0:9f:e0:53:b8:75:e1:1a:
7c:04:49:bc:4b:51:c6:d2:71:ed:97:5a:a9:22:6c:a3:47:50:
c3:20:f2:8b:dd:0a:28:48:50:da:ef:73:33:32:02:05:c6:39:
d6:6e:fd:86:80:85:76:d7:a4:06:78:7f:74:d6:1c:63:9b:90:
35:7c:9d:1f:22:c1:00:43:2a:cb:83:58:29:a0:9e:89:06:70:
df:96:5b:d6:b8:a9:89:f4:13:4b:c8:81:8c:85:82:47:69:89:
4c:e3:be:c8:dc:88:cb:cc:aa:09:81:be:23:ab:84:5e:99:21:
4a:b4:16:ea:7d:28:b5:8e:8f:44:35:c2:93:63:4c:8a:23:27:
7b:6d:bf:ec:4d:5d:3a:47:ca:9a:a6:5d:cf:63:1e:74:8b:65:
41:9b:1f:3e:a6:32:61:39:74:b3:8f:be:f4:69:b4:f7:ee:36:
ba:f3:c4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:37 2025 by rpki-client