Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
File: 0l8s0anw2kNfLjs-5w5k_a9LYSE.mft (raw, json)
Hash identifier: JO4fW7/mZgAzhUakfDGPsHKj6H4yZsUa7NGQ1Edz99U=
Subject key identifier: 8E:8E:34:7A:C0:D4:E4:51:21:CF:F7:03:24:0C:50:7C:94:04:97:78
Authority key identifier: D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
Certificate issuer: /CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Certificate serial: 019961D9A687F003BD14522B86B77E5C1536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
Manifest number: 1694
Signing time: Fri 19 Sep 2025 12:01:17 +0000
Manifest this update: Fri 19 Sep 2025 12:01:17 +0000
Manifest next update: Sat 20 Sep 2025 12:01:17 +0000
Files and hashes: 1: 0l8s0anw2kNfLjs-5w5k_a9LYSE.crl (hash: B5v7SUO6LaITYVIajF2c0nuti1dEzqT47yEJYqkBqZY=)
2: PUu9JBqT0q_kMegzLpokDy8FZpg.roa (hash: GZSimUwCl58YJS+NoDvHAGPvWk0bb2fLNY1EJxjHl3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:d9:a6:87:f0:03:bd:14:52:2b:86:b7:7e:5c:15:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Validity
Not Before: Sep 19 12:01:17 2025 GMT
Not After : Sep 20 12:01:17 2025 GMT
Subject: CN=8e8e347ac0d4e45121cff703240c507c94049778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:e8:ed:0a:96:33:d4:9f:a5:69:f0:f8:20:
32:1d:4f:95:2d:c9:72:9e:96:80:59:e5:8c:cf:ad:
80:4a:a5:a2:6e:15:b2:fb:54:36:30:c9:53:d9:bf:
f0:63:11:fb:e1:e0:98:69:a7:26:09:8d:15:8d:19:
21:fe:7a:fa:bd:a9:c7:77:8c:4a:f7:ad:b3:ca:13:
ac:55:c6:f1:13:11:31:20:88:44:02:89:f1:9c:46:
12:5e:2a:d9:dc:92:78:47:35:1d:47:97:37:60:a7:
fd:d9:68:f4:6e:18:b4:64:8a:cc:23:c9:87:0e:67:
10:75:f1:e7:eb:50:d1:a0:d9:59:bd:33:b4:c6:3c:
30:79:ac:07:2f:7e:04:5d:52:35:b0:35:c3:7a:75:
e8:37:7e:e4:ba:fe:46:ec:21:6f:42:97:f9:24:7c:
fc:7f:bd:6a:ef:fe:22:ea:e4:7e:0e:7f:3e:4b:0b:
2f:0f:18:86:c6:9c:aa:01:4d:d0:69:96:97:e7:cd:
39:32:ce:df:2d:ef:10:56:60:ae:75:a7:33:95:26:
ef:de:f2:77:a9:08:c2:32:8d:ac:e0:c4:31:ad:24:
78:a4:7e:63:9b:b8:31:7c:8c:21:95:b5:3e:8c:55:
2e:1a:b7:bd:04:b9:b9:d4:9a:7e:ca:fa:bc:ef:3a:
c6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8E:34:7A:C0:D4:E4:51:21:CF:F7:03:24:0C:50:7C:94:04:97:78
X509v3 Authority Key Identifier:
keyid:D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:dd:53:dd:7d:8d:01:b9:f6:1a:5f:d8:96:14:87:8d:d0:92:
c5:7f:ca:93:43:0f:74:43:dd:8f:0d:bc:27:74:48:5d:e4:d5:
ec:8d:88:8a:3a:12:58:5f:ea:1f:51:19:c1:dc:0e:31:82:7f:
3b:74:c7:7d:fc:22:20:10:34:a0:5a:8d:98:35:b6:f8:32:63:
d3:cd:3f:d1:ee:db:d4:77:28:51:ca:73:7f:b8:37:97:74:0f:
af:d7:cc:64:64:40:92:5f:31:fb:88:40:01:69:fb:f8:5c:ba:
7b:dc:ac:9f:ef:ab:8e:65:4d:2e:0d:10:2e:b5:50:ff:c3:ce:
c7:ac:ee:67:a8:b6:62:b1:76:01:52:2b:92:e4:f2:db:9e:b6:
d4:41:f5:f8:e4:1c:64:6f:a5:36:04:b7:6a:14:a1:66:7d:0f:
8d:58:c0:5f:c5:08:d3:b9:17:6f:a3:49:04:08:ad:59:0d:0c:
28:03:cd:0d:70:4a:d0:0d:53:08:28:8f:5e:bc:91:59:3c:13:
e2:f3:f6:8b:d4:81:7e:4e:c5:fb:f6:f7:e8:5f:b5:47:e9:20:
cb:f2:92:51:15:f0:42:d6:7e:aa:d4:76:d9:4a:8d:a7:77:1d:
e4:91:f1:58:43:1b:37:14:53:fb:03:9d:7e:be:17:89:7a:e7:
61:b2:a3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:51:37 2025 by rpki-client