Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
File: 8cgdjkJn0tRetlJQoqSCULX7Uls.mft (raw, json)
Hash identifier: 39l/oDvvq7wo2TE2zU7joO/L2OBAKLJ6dTup3hI/kb8=
Subject key identifier: 46:BE:47:22:0F:3E:63:BF:BD:7A:2B:65:82:E4:2F:B8:D1:18:09:54
Authority key identifier: F1:C8:1D:8E:42:67:D2:D4:5E:B6:52:50:A2:A4:82:50:B5:FB:52:5B
Certificate issuer: /CN=f1c81d8e4267d2d45eb65250a2a48250b5fb525b
Certificate serial: 019921B1928590E2E24C7B5B2B6F0B99230D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cgdjkJn0tRetlJQoqSCULX7Uls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
Manifest number: 0A95
Signing time: Sun 07 Sep 2025 01:01:49 +0000
Manifest this update: Sun 07 Sep 2025 01:01:49 +0000
Manifest next update: Mon 08 Sep 2025 01:01:49 +0000
Files and hashes: 1: 8cgdjkJn0tRetlJQoqSCULX7Uls.crl (hash: kka/fTWtYP3NlCCOtkWcs1jzFUC7Fb6FoxwL4UCOP9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cgdjkJn0tRetlJQoqSCULX7Uls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:92:85:90:e2:e2:4c:7b:5b:2b:6f:0b:99:23:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c81d8e4267d2d45eb65250a2a48250b5fb525b
Validity
Not Before: Sep 7 01:01:49 2025 GMT
Not After : Sep 8 01:01:49 2025 GMT
Subject: CN=46be47220f3e63bfbd7a2b6582e42fb8d1180954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:95:f4:e7:a7:cc:b4:a1:71:6d:db:e6:4f:
ff:d2:65:09:ec:8f:0e:62:12:4e:f8:b6:68:98:cf:
86:fa:ea:83:d8:e3:c2:6f:8a:51:f5:83:79:6c:15:
8f:fe:22:ea:7e:a3:73:a7:06:7e:e0:1b:c6:9d:9c:
62:73:5d:f3:ad:67:af:c1:77:1b:6d:6b:04:57:1b:
1b:32:6a:d8:0c:92:70:1b:9c:bd:52:bc:a4:94:a2:
9f:32:ef:4f:d6:77:5e:7d:e9:85:ff:91:8b:9d:ef:
1c:a1:21:2a:7c:67:8d:9b:cc:a7:4c:6e:8b:9d:9d:
0d:58:14:49:61:28:06:ad:a4:10:50:ae:47:b7:4a:
f4:fe:5f:cb:c3:f9:d4:fc:c6:33:ce:f6:e1:4b:9b:
ff:4d:c9:8f:05:f1:34:35:97:07:60:b0:df:40:c6:
ba:af:3d:29:61:ae:ff:f7:d0:a0:8c:bf:84:f3:39:
b6:5c:9d:e6:aa:1d:25:89:1a:57:49:bc:c2:21:d8:
9c:0c:fb:82:d0:6f:be:2f:07:41:65:4d:c1:5c:0b:
fa:d0:3a:43:e8:54:75:7b:0a:24:07:74:6d:ef:83:
68:05:9a:0c:2f:fd:32:8f:fb:cf:63:56:a2:49:2f:
50:04:0b:08:33:50:d3:76:7a:80:73:d7:1f:5e:a2:
77:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BE:47:22:0F:3E:63:BF:BD:7A:2B:65:82:E4:2F:B8:D1:18:09:54
X509v3 Authority Key Identifier:
keyid:F1:C8:1D:8E:42:67:D2:D4:5E:B6:52:50:A2:A4:82:50:B5:FB:52:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cgdjkJn0tRetlJQoqSCULX7Uls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:1a:c2:aa:2f:b8:59:b7:f3:50:2c:e1:d4:69:79:ed:43:29:
c9:67:ac:97:a7:af:0f:24:7e:72:dd:35:5e:7b:b5:42:74:78:
21:81:38:51:88:e6:74:c8:8a:b8:6a:fc:f7:22:fa:ab:b6:b3:
84:d6:95:7b:67:05:16:f9:46:86:0f:01:c1:39:1b:51:a6:ba:
f9:c4:f3:55:8b:9b:9c:8d:82:1a:93:78:17:6a:fd:c3:8e:8d:
0f:54:5b:56:92:58:62:51:91:04:18:3b:80:92:87:60:96:38:
de:45:5f:bb:df:0d:7d:0b:2c:6e:16:37:6f:dd:14:f8:cd:58:
84:51:7e:70:d2:2a:39:30:00:4e:a7:ed:27:64:87:b8:c2:c0:
8d:d1:f3:2f:42:fd:d0:67:af:e5:4c:17:04:1e:e7:a0:a5:6f:
c9:26:79:b9:70:8a:51:bc:05:c6:60:35:60:4d:1a:60:e0:cd:
27:55:62:92:4e:e4:b9:a0:b8:81:9a:c7:83:08:3b:51:68:7e:
d5:1f:80:cb:1c:32:2a:73:ab:8d:a6:f7:71:f5:e5:90:16:31:
01:fc:fc:f8:2a:6c:05:f3:03:7c:76:13:e3:5e:57:f5:b1:01:
14:a4:c7:83:6d:da:75:6b:58:e3:6e:a0:4a:cc:0b:96:1c:7a:
cc:44:40:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:46 2025 by rpki-client