Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft
File: bSsrfHiimiI-pZxnydqj3H7bHnQ.mft (raw, json)
Hash identifier: wSmNFc102Jq0Wgt+Y3r7VICU2mpgOUSCYr8OIJ25+Ow=
Subject key identifier: 8E:88:BF:1C:66:4E:6B:9A:C3:C9:54:5E:85:36:18:E5:47:11:21:B9
Authority key identifier: 6D:2B:2B:7C:78:A2:9A:22:3E:A5:9C:67:C9:DA:A3:DC:7E:DB:1E:74
Certificate issuer: /CN=6d2b2b7c78a29a223ea59c67c9daa3dc7edb1e74
Certificate serial: 01992255138B1972BC0C26731E20F4267F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSsrfHiimiI-pZxnydqj3H7bHnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft
Manifest number: 023B
Signing time: Sun 07 Sep 2025 04:00:24 +0000
Manifest this update: Sun 07 Sep 2025 04:00:24 +0000
Manifest next update: Mon 08 Sep 2025 04:00:24 +0000
Files and hashes: 1: bSsrfHiimiI-pZxnydqj3H7bHnQ.crl (hash: P0OXiwnvSmRFt6zafb/kusHeUm5mbLW107YTZWUpX/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSsrfHiimiI-pZxnydqj3H7bHnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:13:8b:19:72:bc:0c:26:73:1e:20:f4:26:7f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2b2b7c78a29a223ea59c67c9daa3dc7edb1e74
Validity
Not Before: Sep 7 04:00:24 2025 GMT
Not After : Sep 8 04:00:24 2025 GMT
Subject: CN=8e88bf1c664e6b9ac3c9545e853618e5471121b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:48:e3:0a:eb:58:07:33:5c:d0:b8:0a:73:
a2:dc:dc:be:5d:95:71:a5:6d:79:55:9e:53:8c:fc:
0a:66:43:ef:a9:b1:29:b3:16:03:a2:ff:55:b2:a2:
c8:25:c6:86:70:9f:ac:cb:69:1d:b8:1f:ef:36:a4:
4b:41:27:bf:99:73:a6:0e:ef:94:85:aa:2f:22:6c:
6e:64:a7:23:ff:26:af:04:29:9a:24:98:66:24:df:
b5:15:9f:d9:65:95:62:3a:cc:9d:b3:db:52:07:0c:
85:24:ff:13:29:31:14:ad:e0:ee:6b:0f:a8:12:6c:
64:2c:0f:ed:ce:36:31:ab:9c:01:8c:55:ec:60:0e:
de:1c:bc:fc:0d:ee:1c:63:33:3c:90:d9:a2:b8:53:
8f:4a:4d:49:95:b5:fc:eb:ba:b5:f5:13:ec:62:43:
28:83:44:63:1f:06:8e:9f:f7:9b:be:f0:c4:8d:50:
bc:7f:bc:88:0a:c0:c6:21:95:f6:33:12:1c:6c:34:
37:89:7b:ff:5e:cc:23:77:7f:63:b4:7e:48:fc:54:
61:c1:7b:9c:99:10:b4:43:bc:61:8d:3d:07:9e:b7:
3d:b8:4c:25:bb:37:e3:7d:08:f3:3d:fc:90:5a:a7:
88:52:e2:0d:df:35:51:16:c7:d5:f0:77:9a:be:82:
9e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:88:BF:1C:66:4E:6B:9A:C3:C9:54:5E:85:36:18:E5:47:11:21:B9
X509v3 Authority Key Identifier:
keyid:6D:2B:2B:7C:78:A2:9A:22:3E:A5:9C:67:C9:DA:A3:DC:7E:DB:1E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSsrfHiimiI-pZxnydqj3H7bHnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1c:5d:d6:29:3c:a4:54:26:fc:3c:b4:29:f9:41:d2:28:6d:
ab:b6:05:60:08:39:cf:18:4a:27:fb:3d:78:e7:c4:e4:cc:7f:
0d:70:b4:f7:8d:a7:56:1c:bd:2a:42:26:9e:6f:12:33:37:08:
62:37:96:43:1e:00:9b:57:f1:ca:2b:b9:10:b7:dd:5e:10:36:
f9:37:c2:32:37:b5:07:fa:d8:48:ae:ce:24:3a:0a:1b:f3:37:
67:0e:2e:3a:1f:cf:f6:a0:4f:5e:d1:32:1c:11:99:30:1a:96:
a6:a4:05:8f:de:0c:0f:19:bc:0b:86:db:f7:0d:f4:bc:e9:eb:
f8:11:13:6f:60:dd:c7:98:67:4d:e3:d8:75:68:c2:2d:3a:46:
eb:ba:4c:77:ba:7c:44:b8:47:3f:6f:20:ed:39:99:b5:82:8a:
46:13:73:95:fe:3c:d6:41:cc:b1:1d:5d:41:bf:42:b2:7a:15:
21:ba:c1:cd:9d:d0:da:c6:a5:3e:1e:97:49:38:13:e6:48:27:
67:c4:bf:e9:a4:c4:0f:a9:c4:b0:d6:8e:55:a3:a0:68:08:11:
45:4f:f8:e8:42:da:3a:2e:32:42:dc:6f:35:16:f8:9f:15:bb:
f8:85:33:c3:a4:e7:34:fd:1d:62:b5:27:b8:d3:75:e2:86:4e:
8b:a8:f4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:29 2025 by rpki-client