Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
File: 8BGVyAze5CsGiNuOk6aLRZuFjm4.mft (raw, json)
Hash identifier: sOAwB6I6tuj5KgzyfDRbtoSe4d5vEF4CWLMTfe+sZLs=
Subject key identifier: 3A:18:95:AD:30:54:3C:61:90:43:4A:4E:BE:4D:81:08:C7:A6:80:7D
Authority key identifier: F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E
Certificate issuer: /CN=f01195c80cdee42b0688db8e93a68b459b858e6e
Certificate serial: 019931917EC752B3AD316450CED52D3E332C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
Manifest number: 0460
Signing time: Wed 10 Sep 2025 03:00:42 +0000
Manifest this update: Wed 10 Sep 2025 03:00:42 +0000
Manifest next update: Thu 11 Sep 2025 03:00:42 +0000
Files and hashes: 1: 8BGVyAze5CsGiNuOk6aLRZuFjm4.crl (hash: bL9AjyjwA/BPnQOBsaFkZ0pOiXyn5iohfCZ37o4S+6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:7e:c7:52:b3:ad:31:64:50:ce:d5:2d:3e:33:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01195c80cdee42b0688db8e93a68b459b858e6e
Validity
Not Before: Sep 10 03:00:42 2025 GMT
Not After : Sep 11 03:00:42 2025 GMT
Subject: CN=3a1895ad30543c6190434a4ebe4d8108c7a6807d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:e4:8f:4f:96:d1:4c:bd:cd:78:a5:35:f8:
18:87:8f:7b:9c:70:35:9c:cc:9d:65:18:b1:38:3f:
65:49:af:3c:b2:43:4a:31:97:65:1e:fd:0f:c5:43:
33:40:b6:9b:00:cd:32:66:41:84:09:50:5b:06:44:
6a:f5:3d:7d:50:f1:63:4b:c3:01:eb:e2:28:a3:da:
9a:f5:82:d4:9e:af:ea:62:ef:01:1d:65:b4:53:e4:
02:66:06:60:28:21:e2:38:5b:39:78:0d:c9:a4:15:
a4:5b:4a:6c:8d:5f:c7:37:e3:be:26:0e:fc:c3:d3:
4e:96:b5:54:fa:a7:71:76:ba:ad:dc:38:54:d5:a8:
41:dd:6b:dd:d8:9f:51:07:9d:e2:83:ea:78:9d:9a:
7c:c0:14:39:2c:99:f8:69:60:c7:c5:4a:c8:09:e7:
b7:f1:d9:c3:9b:00:10:60:08:3f:f8:67:31:b2:c8:
53:eb:c8:e8:a8:ee:d1:72:cd:55:a8:da:22:3b:fc:
2e:df:97:6f:15:7b:d9:01:ad:ee:a0:cf:67:fc:02:
71:9b:0c:9f:06:e3:81:98:30:9b:eb:4b:31:cc:85:
a3:5e:74:ff:0e:0a:9c:83:f2:92:09:61:b7:1a:dd:
7d:4f:c8:73:4d:ce:38:f4:96:2d:dd:c8:c0:d3:63:
4b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:18:95:AD:30:54:3C:61:90:43:4A:4E:BE:4D:81:08:C7:A6:80:7D
X509v3 Authority Key Identifier:
keyid:F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1b:56:46:3f:8d:6f:3b:56:53:0c:10:f0:23:d4:fd:f5:78:
81:9a:63:48:b1:37:a0:fe:02:2b:e2:10:86:86:1c:47:65:2f:
da:a1:7b:4a:dc:8c:f1:42:15:5d:ea:32:3a:a2:79:15:ca:42:
2c:1d:f8:4f:1b:4f:eb:b5:a7:a0:73:1b:dc:d2:0f:48:8d:b7:
0b:ea:15:76:50:7c:4a:c0:06:d8:c4:bc:b7:ce:83:92:f3:90:
32:a7:69:8f:e1:79:a3:8f:8b:57:51:af:bf:dd:ba:3b:39:c7:
fb:a7:67:9d:50:9e:2e:12:42:11:13:fb:4a:6b:c7:4b:89:a3:
d3:09:5f:55:fa:03:f0:ef:a9:92:41:83:07:f1:61:a1:d7:ac:
43:26:c6:91:b6:8c:0e:f2:a3:bc:5a:e1:0b:ff:7a:0e:3f:0a:
78:49:de:c6:50:25:af:b3:92:42:f2:1b:8f:80:93:13:5a:8c:
cf:39:4b:94:bf:39:6c:83:42:e4:70:0f:5c:7f:ae:48:61:b9:
a7:0f:13:19:9c:7e:75:92:ea:de:cc:63:0e:65:07:e2:49:e9:
12:78:95:6b:52:7b:5d:cd:b7:01:56:3c:ae:41:87:fd:63:6b:
a7:b5:aa:51:c7:47:5c:c5:9c:d5:68:8d:24:c0:7f:f1:43:af:
51:c8:c4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:23:10 2025 by rpki-client