Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json)
Hash identifier: lXr28I+dBD1jfRjRu7fc2YScmrqdd2KONVsq4WrgN0s=
Subject key identifier: E1:88:81:6D:08:8A:46:90:84:4E:4C:F2:C2:75:8C:00:0B:40:C0:02
Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Certificate issuer: /CN=f1a0c67ff859f555af8921938887c6085269a402
Certificate serial: 019923A0B183A467F07A712578516010EF4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
Manifest number: 13AC
Signing time: Sun 07 Sep 2025 10:02:37 +0000
Manifest this update: Sun 07 Sep 2025 10:02:37 +0000
Manifest next update: Mon 08 Sep 2025 10:02:37 +0000
Files and hashes: 1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: lxteEtOWu3iYf+Z8g+rW1bm0i0dsJvdYmJ+9VuOhghg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:b1:83:a4:67:f0:7a:71:25:78:51:60:10:ef:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402
Validity
Not Before: Sep 7 10:02:37 2025 GMT
Not After : Sep 8 10:02:37 2025 GMT
Subject: CN=e188816d088a4690844e4cf2c2758c000b40c002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:26:40:e1:bd:cf:c9:16:0c:73:9b:77:03:ef:
05:c1:60:e9:9f:86:ca:40:5d:ac:ba:67:7e:68:3d:
97:95:7d:0d:cc:80:d0:35:93:1d:0f:04:a9:8a:73:
0b:a3:b3:e9:7b:69:08:1a:9d:cb:d7:1b:dc:be:b7:
11:d9:9c:bf:5a:ce:71:fc:80:72:63:2e:51:4b:3b:
f1:14:c1:40:0d:51:1a:21:f8:1c:13:ef:65:c4:80:
eb:2d:80:f0:aa:66:e6:4c:fd:3f:73:d5:99:49:fc:
dc:65:a7:4e:07:cf:d9:62:8b:b0:5a:cb:67:d9:16:
6f:77:e6:97:00:f3:dd:22:a9:a3:8e:d7:b9:21:0c:
08:19:99:a8:bb:a7:b1:63:87:1e:8b:86:ee:d0:8a:
db:17:ae:44:82:a3:f2:82:f0:a9:67:6a:e0:24:25:
90:7f:8d:89:21:31:28:43:a8:e5:a9:08:ed:59:cc:
4d:eb:65:3d:72:5e:a6:e9:67:9a:66:7c:ba:2f:a6:
32:12:db:9d:7a:09:e2:04:a2:b4:5e:03:d3:71:be:
b8:35:b4:1a:0d:67:c7:65:56:a5:7a:52:ea:58:84:
6e:c6:bb:6e:be:68:f3:09:d3:90:59:4a:69:82:20:
d4:38:b8:b1:f4:55:c4:51:e7:3f:9c:98:70:07:99:
2b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:88:81:6D:08:8A:46:90:84:4E:4C:F2:C2:75:8C:00:0B:40:C0:02
X509v3 Authority Key Identifier:
keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:19:46:87:72:b7:68:14:88:63:34:c5:77:3f:d2:bf:d9:d3:
d1:8d:74:9a:49:0b:a6:fd:99:0d:d1:94:1e:12:81:30:01:52:
c3:c2:80:e0:4e:4b:6f:5c:c6:4b:df:f0:3e:03:11:d9:7a:72:
1b:b3:53:48:2e:d2:9e:2d:ad:bb:7d:78:25:35:25:2f:cd:a9:
1f:04:3d:80:46:3f:db:b8:ea:28:06:38:21:ee:88:76:3e:7a:
0b:eb:7c:2f:dc:7a:95:85:49:24:31:35:d4:ab:7b:2e:22:0b:
e2:95:62:5b:a8:da:47:7d:c0:0c:39:00:b2:5d:56:5c:b9:76:
43:bd:78:3d:43:ae:89:5f:27:31:37:d7:fd:4e:d6:36:6e:ef:
d2:7e:4f:03:7d:86:c3:6c:21:07:60:46:8b:8f:b9:6f:37:01:
35:a9:da:b5:ef:d5:3b:b7:92:e8:80:7a:33:e5:53:57:63:cc:
77:48:da:1c:82:60:4a:27:fb:53:9d:2a:d0:62:5e:15:2e:e3:
91:74:de:45:fe:7a:bc:57:14:c3:37:a4:ee:61:42:22:c2:8f:
d2:f1:81:71:07:e0:18:c9:7a:a7:38:c9:1d:58:83:6e:10:89:
50:6e:ae:0a:45:b5:51:bb:ce:cf:6c:a0:5c:69:c5:a7:9c:06:
83:c7:12:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:55 2025 by rpki-client