Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
File: 8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft (raw, json)
Hash identifier: u3YGi5REcz1zVQKjSGE2h1x+SpnO0RqF3gcvZ/XMVuQ=
Subject key identifier: 0C:10:6C:23:2C:BB:ED:C0:A7:60:E6:0B:42:67:6A:1F:3F:53:65:A6
Authority key identifier: F0:37:74:A2:76:21:4B:86:E0:A5:B4:FA:77:21:BD:B0:E3:22:E0:80
Certificate issuer: /CN=f03774a276214b86e0a5b4fa7721bdb0e322e080
Certificate serial: 019916881302339FC188F7897DAF5DCF2095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
Manifest number: 0B4B
Signing time: Thu 04 Sep 2025 21:00:40 +0000
Manifest this update: Thu 04 Sep 2025 21:00:40 +0000
Manifest next update: Fri 05 Sep 2025 21:00:40 +0000
Files and hashes: 1: 8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl (hash: kuEGkQR5jYhuGkk/HJJNIHP/C1s6dN9h3yLbd/N4cfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:13:02:33:9f:c1:88:f7:89:7d:af:5d:cf:20:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03774a276214b86e0a5b4fa7721bdb0e322e080
Validity
Not Before: Sep 4 21:00:40 2025 GMT
Not After : Sep 5 21:00:40 2025 GMT
Subject: CN=0c106c232cbbedc0a760e60b42676a1f3f5365a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:78:de:df:ce:56:a0:b7:21:53:e9:e2:be:03:
14:3c:da:b1:14:09:39:cc:30:6d:11:f7:f8:f0:cb:
c3:f9:f0:76:24:ac:7c:a3:da:6c:46:25:a9:3f:72:
85:bf:c1:d4:49:10:6e:8d:06:1b:f4:6c:63:3c:51:
0f:11:79:e7:c9:78:87:3d:c0:23:0d:8b:42:88:d1:
77:34:bb:f7:27:79:ad:70:ed:8a:9b:71:15:d2:2d:
18:92:70:54:8d:01:4e:8e:83:80:9b:d7:6a:8a:fe:
c5:13:05:31:64:19:10:3f:13:65:e8:c3:46:95:da:
68:ad:1e:1b:5c:77:68:6b:68:e3:1c:44:8f:fd:3c:
03:f6:45:b6:2a:99:a3:33:93:8d:f7:02:fc:22:11:
b5:5d:25:1c:92:09:4b:de:ea:9f:29:46:32:38:7a:
02:3c:99:a0:fd:64:39:40:f2:25:5f:47:15:f7:8b:
dd:4d:38:c3:bb:8e:1a:bc:6c:d9:eb:2a:fd:de:fa:
e1:76:68:51:6b:9c:fb:b7:3e:f0:89:0d:14:30:20:
6a:8d:3a:88:6b:7d:11:93:af:d3:64:b1:24:ff:e9:
19:e4:32:de:69:db:4c:85:ea:e3:9a:1b:db:e3:61:
17:71:4c:0d:7e:4e:9c:71:e4:c5:e5:7c:7d:04:47:
f7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:10:6C:23:2C:BB:ED:C0:A7:60:E6:0B:42:67:6A:1F:3F:53:65:A6
X509v3 Authority Key Identifier:
keyid:F0:37:74:A2:76:21:4B:86:E0:A5:B4:FA:77:21:BD:B0:E3:22:E0:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Dd0onYhS4bgpbT6dyG9sOMi4IA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1ed883-376a-45f9-8884-b8162260124f/1/8Dd0onYhS4bgpbT6dyG9sOMi4IA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e8:bd:04:6a:83:1d:20:92:0f:35:7b:8a:3d:c3:47:f2:9e:
af:d9:99:73:84:00:37:1c:7d:7b:de:48:81:fc:53:fc:51:f7:
34:24:7f:a5:61:29:ca:6f:da:93:a6:5a:e4:40:04:83:98:67:
91:5a:96:bc:ec:1f:48:36:3f:2d:aa:77:41:cf:9e:f2:6b:3c:
44:db:2a:83:26:16:75:0d:8c:e4:a3:41:d0:9a:c0:47:e4:df:
52:ab:ec:2e:46:96:a0:1c:80:52:7e:0c:d2:07:a2:24:a5:be:
60:a6:c5:0c:55:e3:c6:16:2d:f4:07:1d:fd:32:10:fd:10:e2:
12:a6:c2:86:f8:93:4d:87:6b:59:3f:9e:8c:8f:d3:2a:4a:00:
4e:39:96:f0:1a:a2:67:7d:3e:5d:4b:28:38:e8:f9:9f:65:cc:
59:c6:19:bf:ba:54:71:e7:a8:58:57:d8:ec:40:e6:cc:9f:bb:
e8:03:af:df:c3:b3:53:fc:1f:8f:19:f4:86:a5:94:2d:4c:da:
d7:08:f4:9e:05:06:70:3b:5e:75:e9:06:a2:ee:38:f8:fd:b4:
b2:77:a4:da:81:7a:24:c9:11:78:f6:ed:7f:24:a6:da:77:38:
73:ae:83:a4:0e:72:28:ab:e3:0c:47:36:ba:71:16:09:fa:5f:
30:d6:cc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:46 2025 by rpki-client