Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
File: 8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft (raw, json)
Hash identifier: V42Cch/a283+MEdgFYuUSd0VYU2NzbH3fSxsCuE9EGM=
Subject key identifier: 7F:A2:D3:A0:E1:4E:E8:9B:F0:A5:F2:D1:AF:F5:87:6E:8A:AF:D5:31
Authority key identifier: F3:EF:52:ED:81:6C:F4:BF:7D:02:9F:FB:0A:BC:10:1A:FD:2C:64:B5
Certificate issuer: /CN=f3ef52ed816cf4bf7d029ffb0abc101afd2c64b5
Certificate serial: 0199239EDB092F276B612772538B1D1814F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
Manifest number: 0158
Signing time: Sun 07 Sep 2025 10:00:37 +0000
Manifest this update: Sun 07 Sep 2025 10:00:37 +0000
Manifest next update: Mon 08 Sep 2025 10:00:37 +0000
Files and hashes: 1: 8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl (hash: CI7WELu8OlValqLfmEfYFSg59SFT2vJFPO2RqN/Vysw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:db:09:2f:27:6b:61:27:72:53:8b:1d:18:14:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ef52ed816cf4bf7d029ffb0abc101afd2c64b5
Validity
Not Before: Sep 7 10:00:37 2025 GMT
Not After : Sep 8 10:00:37 2025 GMT
Subject: CN=7fa2d3a0e14ee89bf0a5f2d1aff5876e8aafd531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3c:01:20:48:38:11:55:9d:c8:39:33:5d:ca:
1f:69:f2:08:ea:cd:86:da:ac:e9:d9:7e:91:ed:8a:
d5:03:ca:27:fd:4a:5e:93:b9:a6:58:a9:1f:e9:07:
22:42:6f:c5:cb:34:fe:f7:20:ac:17:75:3e:5f:16:
ae:1b:09:37:14:b5:65:a6:42:c5:1b:ed:1f:27:76:
03:fb:87:7b:49:09:02:95:fb:b9:e4:3f:d2:74:02:
6b:31:ef:27:a1:be:cd:4f:c2:40:78:c1:b6:da:1c:
91:24:e2:43:22:47:fb:e8:12:c3:dd:c9:25:7c:c3:
57:3c:56:c8:ab:58:30:75:e5:ae:d2:b0:29:95:ef:
a5:03:f5:e6:56:1e:69:95:07:97:29:1e:5b:3d:73:
ee:b9:29:37:57:81:19:73:a7:27:66:5f:9c:1f:02:
b1:93:cf:ad:97:65:ff:af:f0:f0:09:2e:9e:92:2e:
4c:44:f9:f0:42:c8:d0:f0:28:18:3b:ed:13:09:18:
9c:d0:63:58:6b:45:4b:57:84:b0:12:56:45:d9:5d:
78:2e:72:93:d3:55:67:60:5c:64:dd:d9:3c:ad:77:
63:19:79:ce:3f:f7:93:b9:b8:7c:2c:4f:6f:f0:59:
85:2f:c2:f0:a5:80:e0:ad:f4:5f:a7:37:d4:ee:6b:
96:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A2:D3:A0:E1:4E:E8:9B:F0:A5:F2:D1:AF:F5:87:6E:8A:AF:D5:31
X509v3 Authority Key Identifier:
keyid:F3:EF:52:ED:81:6C:F4:BF:7D:02:9F:FB:0A:BC:10:1A:FD:2C:64:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:47:37:a4:cf:fa:59:43:94:d8:bf:25:97:47:a0:5b:3f:72:
f1:bb:4c:e6:52:b9:73:5d:67:4f:b9:fc:5c:22:5b:24:c6:9b:
8d:79:20:f7:b3:ea:a2:25:fa:0d:b0:c8:bb:5f:b0:5d:93:cd:
f6:db:1b:78:b8:5c:54:f9:9f:a2:af:9b:12:bc:d1:05:78:d9:
50:3a:ef:d9:f9:5f:64:29:53:30:6b:30:1a:66:0b:df:12:f9:
3c:a4:8d:29:2b:7c:35:15:9d:a2:f9:d3:ea:a6:3b:80:62:71:
70:a0:ea:42:73:e9:4b:4a:a2:0a:b0:de:49:b5:cd:29:f0:0d:
1c:36:fd:7d:31:cf:ef:aa:40:b2:98:85:f5:40:50:c1:e3:4b:
eb:d4:d7:be:32:e0:3a:4e:44:90:93:23:0f:73:73:53:0f:1c:
b1:54:b2:f8:8e:7c:79:21:8d:97:1f:97:ce:2f:ac:29:7d:5c:
52:6b:55:91:fb:ba:fd:88:43:28:50:6f:a7:33:9a:cb:2c:7d:
52:9f:35:8d:24:14:b9:09:6d:77:8a:03:e3:4a:d3:d9:8d:00:
29:ac:f0:ea:00:f1:cb:1d:59:26:e5:40:86:fd:dd:ad:a6:11:
65:8e:b3:1c:62:d6:58:0a:0d:fb:51:8a:95:12:9d:4f:a5:27:
b7:b9:ef:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:08:21 2025 by rpki-client