Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
File: j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft (raw, json)
Hash identifier: MX1hirgZ7Y94QxKADdIic25hUW+48kSNKlbyw6fj4uE=
Subject key identifier: F5:63:47:21:26:D3:70:6C:B7:99:B4:97:56:C8:37:B5:64:68:F9:40
Authority key identifier: 8F:C0:D6:40:75:28:53:86:42:FB:0D:3D:43:46:61:5F:EA:71:DC:2E
Certificate issuer: /CN=8fc0d6407528538642fb0d3d4346615fea71dc2e
Certificate serial: 019923A0E58F7F051074D509F2B54B133C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
Manifest number: 0C9F
Signing time: Sun 07 Sep 2025 10:02:50 +0000
Manifest this update: Sun 07 Sep 2025 10:02:50 +0000
Manifest next update: Mon 08 Sep 2025 10:02:50 +0000
Files and hashes: 1: j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl (hash: S39JzCrr0D31vGdlxGy64Z1cjebVWFZMaiT3mfEm8aA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:e5:8f:7f:05:10:74:d5:09:f2:b5:4b:13:3c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc0d6407528538642fb0d3d4346615fea71dc2e
Validity
Not Before: Sep 7 10:02:50 2025 GMT
Not After : Sep 8 10:02:50 2025 GMT
Subject: CN=f563472126d3706cb799b49756c837b56468f940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:7e:e7:01:d0:b2:27:96:b2:d4:d8:3f:9e:
b6:c2:72:e8:f8:d5:1e:02:21:4e:ed:78:2e:e2:43:
79:68:98:be:7c:70:a2:f4:09:ba:10:d0:cf:ef:61:
6f:15:b8:e7:a3:4a:8d:77:a0:ce:28:28:cb:d8:7e:
42:1e:f0:23:ab:43:6a:ae:15:47:78:18:b1:56:07:
b8:25:f3:dc:13:71:f7:8f:cc:c5:40:b0:0e:13:ae:
a9:ee:3f:95:16:72:a3:17:2b:bb:9a:e8:3f:b3:ac:
59:29:27:b0:ad:4c:8b:80:3f:3b:e0:1a:5d:8a:3c:
fa:bf:7e:b7:29:84:ca:c4:c3:4b:e4:82:a4:19:2d:
6a:37:0c:38:b0:1c:f9:ca:74:dc:07:6d:49:63:da:
c4:5c:84:50:d9:be:8c:c6:7a:12:0c:fd:38:11:3f:
65:1c:f1:a6:86:e9:11:fb:09:41:25:eb:9e:a9:32:
79:1c:3a:6b:e3:20:65:b7:cb:04:27:28:5e:6b:63:
cf:85:52:54:a5:1b:37:d2:dd:5e:36:06:17:49:8b:
56:6e:c2:95:59:9f:68:55:a8:e3:09:12:9e:1f:78:
d1:3b:d5:6c:05:10:62:b4:a7:f7:a2:c4:3e:82:ff:
00:6e:09:e0:66:c4:3c:51:f3:00:4d:a7:4e:ef:44:
6d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:63:47:21:26:D3:70:6C:B7:99:B4:97:56:C8:37:B5:64:68:F9:40
X509v3 Authority Key Identifier:
keyid:8F:C0:D6:40:75:28:53:86:42:FB:0D:3D:43:46:61:5F:EA:71:DC:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:65:71:99:c5:a9:5d:8f:41:b5:78:c6:e6:d3:35:d9:d6:40:
b1:24:76:ed:f1:93:a7:71:21:8b:c7:24:f1:3d:67:50:4a:bf:
84:23:0b:07:9f:6c:d2:7e:46:58:0b:f5:ff:74:fa:57:10:a8:
04:b9:d9:91:ba:4a:16:5f:e9:09:44:c2:31:33:f6:86:fa:91:
b3:96:d6:38:3a:91:b1:70:ad:c6:0f:f8:c5:63:94:95:4c:1d:
96:98:1d:dc:5d:4f:5b:c9:a0:57:df:be:60:65:6a:de:c9:2c:
66:a9:bd:4d:f5:45:9e:7d:8d:a6:00:cc:d3:87:0b:23:02:e2:
53:28:c5:a8:d4:55:2a:d2:39:01:2b:ca:28:42:e1:9d:10:4f:
70:cc:67:0a:70:db:31:7a:66:d3:56:a1:ac:09:d0:ae:bb:20:
4c:48:d2:54:56:dd:9a:f7:b5:34:4b:f7:55:3e:58:fc:82:dd:
93:ea:bd:62:13:b6:9f:d5:b0:2e:a7:22:b1:25:e1:3a:53:94:
15:4d:31:11:d2:c4:33:15:d1:1e:7e:d1:6b:ed:c7:81:24:d0:
30:38:20:ad:8b:e3:90:0d:a5:b9:28:33:f8:53:44:76:8a:d2:
19:b4:c8:30:d8:88:4f:34:8a:c0:cf:b7:97:fa:a4:89:05:87:
4c:00:7b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:54 2025 by rpki-client