Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
File: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json)
Hash identifier: VnZ7YaRFmePRsV3+MmFTeARsOkjLEA+99piCzSC8QH4=
Subject key identifier: E7:A9:00:99:30:3F:FA:FC:76:43:0B:EB:4F:49:51:68:62:17:CB:F2
Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
Certificate issuer: /CN=f2a8516704f57492835b94d007027328c22fa40e
Certificate serial: 019922FA808CA94CC21B761301EED970A279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
Manifest number: 10F3
Signing time: Sun 07 Sep 2025 07:01:06 +0000
Manifest this update: Sun 07 Sep 2025 07:01:06 +0000
Manifest next update: Mon 08 Sep 2025 07:01:06 +0000
Files and hashes: 1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: L4r0gFwkUi5/47qcm/NzatTBAnPV6C6hiCkKUsUr3bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:80:8c:a9:4c:c2:1b:76:13:01:ee:d9:70:a2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e
Validity
Not Before: Sep 7 07:01:06 2025 GMT
Not After : Sep 8 07:01:06 2025 GMT
Subject: CN=e7a90099303ffafc76430beb4f4951686217cbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a5:b6:9a:ad:b3:4d:e4:fa:94:13:00:e7:53:
4d:72:a9:7e:ff:4b:5a:b2:7a:f7:ad:1a:4a:e1:52:
e8:6e:ba:b8:e7:58:27:05:ea:0d:0f:7b:cd:cb:35:
77:89:2b:b3:0d:ba:b6:6b:9e:85:86:2b:2d:c7:42:
49:75:be:90:14:29:4f:2f:2b:db:70:ae:af:82:d6:
3b:37:b6:7f:90:b7:9a:4a:a9:10:0c:cb:0e:0f:e8:
91:4f:43:00:22:e3:8c:d4:ec:c1:33:9b:52:67:26:
17:a6:98:b2:da:2f:60:b8:6b:e9:72:19:e7:27:1b:
5a:e7:ab:bd:e5:e0:ba:51:c6:00:50:e0:bc:66:95:
cf:d8:8f:c2:d1:b2:7b:60:e5:f1:5f:2f:b5:3c:9b:
7e:e9:73:36:b0:5d:7e:2a:3c:8f:78:7e:cb:c1:69:
aa:41:70:b1:a4:14:a3:13:57:20:4a:48:c6:2b:92:
e3:ab:10:8f:c1:15:cd:78:ee:41:16:1e:c6:6d:92:
0e:8b:f0:16:df:65:ab:9e:9b:be:7c:4d:05:e2:3d:
d1:02:b8:a1:b4:ef:75:67:49:68:d7:b8:49:c8:91:
e4:6c:3b:4d:1f:c1:c7:08:2f:56:43:ad:63:58:df:
5e:4d:0a:8e:54:59:c8:86:4a:ac:c4:2e:1c:f2:df:
e5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A9:00:99:30:3F:FA:FC:76:43:0B:EB:4F:49:51:68:62:17:CB:F2
X509v3 Authority Key Identifier:
keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:62:2b:b8:fb:e2:76:7b:9d:61:8f:5f:f2:37:c5:aa:fd:1a:
12:fd:e1:8b:86:78:c9:89:0b:4f:91:f8:9d:b6:e4:4e:9d:45:
9e:7c:4a:30:81:47:3e:75:e8:11:55:98:0d:79:a7:6e:51:d9:
ac:f9:ec:cc:63:38:ea:86:bd:10:2f:17:e5:ae:2c:f6:80:a0:
97:72:81:46:84:6a:53:c1:eb:b4:39:32:13:c3:19:17:c6:d4:
4d:c7:af:3c:32:2e:3f:ec:d6:a4:91:3e:a9:41:85:a9:ed:0e:
28:90:d6:cd:ad:63:d4:4d:d5:25:a0:08:f7:4d:f2:52:27:09:
47:48:5f:e8:22:eb:a6:48:d0:c8:0c:a8:87:2d:1a:a3:11:2f:
57:e7:63:bf:27:ec:2c:67:53:86:52:66:38:33:9a:5b:f2:10:
bf:8c:22:5b:72:27:db:ab:21:06:fb:97:61:48:1e:68:47:ca:
52:9f:c9:d7:9b:d5:ce:9c:43:63:04:e0:ba:1d:66:bf:65:b7:
27:1f:3f:ab:86:bf:2d:0f:bd:01:d8:e9:f1:f8:a9:b8:da:eb:
e3:4f:22:ff:c5:ca:06:b6:6e:54:fd:c1:d3:1b:69:f8:c2:92:
c5:2b:28:70:2e:40:ca:67:19:2c:53:2e:e1:dc:15:29:41:8d:
99:83:f3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:26 2025 by rpki-client