Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
File: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft (raw, json)
Hash identifier: yBivCgHDe7rLdgtf94qENN71IMZnf2DEQQ/vOOsnBv4=
Subject key identifier: EF:A3:FF:AC:29:F0:65:14:3A:18:82:E4:E3:3F:A7:93:E2:6C:EB:EA
Authority key identifier: 8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
Certificate issuer: /CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Certificate serial: 43B947F702B54C10D1C520F741F3402962327BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
Manifest number: BA
Signing time: Sun 10 Aug 2025 14:29:22 +0000
Manifest this update: Sun 10 Aug 2025 14:24:22 +0000
Manifest next update: Mon 11 Aug 2025 15:10:22 +0000
Files and hashes: 1: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl (hash: eAVPbuf1W3gln7vrG8YWDCyytCowh4pYeRC0vbuP2ns=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 15:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:b9:47:f7:02:b5:4c:10:d1:c5:20:f7:41:f3:40:29:62:32:7b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Validity
Not Before: Aug 10 14:24:22 2025 GMT
Not After : Aug 11 15:10:22 2025 GMT
Subject: CN=EFA3FFAC29F065143A1882E4E33FA793E26CEBEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7c:69:c8:ba:a3:89:31:8c:b1:30:16:8e:2d:
fe:22:3d:46:99:a9:09:be:a6:e7:7c:ee:58:27:1d:
71:7e:41:14:19:89:1a:c7:20:94:a0:15:1c:a8:b9:
81:8b:85:58:46:3c:7b:1b:3d:38:b5:61:c9:9d:c5:
33:9e:d1:00:92:d1:1c:58:50:e4:28:88:03:59:e6:
29:22:f9:70:77:ea:a9:94:ea:f4:e8:59:f1:1d:f7:
b0:c9:c0:be:e9:24:b6:65:d6:a0:cb:e5:d3:6f:32:
d9:a8:68:95:95:79:a3:6b:57:de:67:bd:28:5c:d6:
e7:7f:be:b7:f4:2f:25:c3:2e:f2:cf:37:18:1f:89:
23:9a:33:d5:2b:b4:38:e6:37:fa:63:58:7d:c0:c7:
5b:c3:ed:fc:14:5b:22:b6:76:74:98:51:5e:fd:19:
62:6e:ae:73:31:ad:52:38:20:a7:df:a2:21:34:33:
94:f5:6d:59:00:f7:8e:41:d9:74:0c:41:35:23:88:
2e:3f:3b:2a:23:4f:59:f8:c8:6c:b0:5f:57:cd:74:
36:08:78:29:07:40:2b:3d:e7:b8:d2:36:62:cf:12:
d0:a0:66:5e:f5:4a:98:6f:13:47:3a:05:68:a8:ff:
c1:c3:ea:11:21:8b:a6:78:20:01:fc:cd:34:32:58:
db:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A3:FF:AC:29:F0:65:14:3A:18:82:E4:E3:3F:A7:93:E2:6C:EB:EA
X509v3 Authority Key Identifier:
keyid:8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2e:de:68:81:9a:c6:c8:c7:c7:9c:03:de:d6:38:6c:4a:97:
f5:a9:c5:e1:09:bf:79:1e:cd:94:18:b1:d0:a2:84:69:87:02:
71:7f:cc:d2:43:f8:66:6a:77:53:c6:46:bf:21:b8:9f:8d:cd:
82:95:4a:30:28:f2:6a:de:8d:8e:0a:eb:33:1e:83:b5:c5:3e:
26:a4:ac:58:af:69:d8:a1:9c:6f:19:9a:08:c2:08:9c:9c:e7:
90:46:79:68:d9:2c:f6:93:90:71:f8:20:7e:2f:38:29:a2:9d:
67:6b:93:83:41:53:cf:d6:5c:b2:5e:7a:34:4d:bf:dd:01:39:
10:12:b4:15:61:a5:67:08:24:73:a7:4a:9d:26:6a:b1:85:f9:
41:6c:43:8b:75:05:4c:b9:32:e5:62:04:f5:c6:48:b3:56:91:
ae:ca:d8:15:c8:48:8b:a9:0c:a6:1b:f2:b0:63:7c:56:a8:0b:
6c:fe:9b:a4:d8:d6:d6:40:c4:2a:a0:56:f2:43:67:b5:63:85:
97:07:3d:10:32:33:5f:a0:cc:8c:86:ac:89:7b:7c:7c:4e:40:
85:59:1b:94:20:d8:2e:a6:6c:39:fc:09:68:1a:be:d1:8c:dd:
a8:3c:1c:d5:4d:78:79:74:cf:07:72:e1:9b:01:c6:d6:56:3d:
4d:36:f9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:06:44 2025 by rpki-client