Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
File: 8EoYcV28tIU2j6_pm4riyfBK92M.mft (raw, json)
Hash identifier: FKVI81HDwV/IoJKTajxHZhXAJpapHCf13eiJyfq1c4Y=
Subject key identifier: 37:0F:2C:EE:9E:D0:8E:2E:E0:2D:CE:66:C0:B9:94:F7:73:65:DC:7D
Authority key identifier: F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63
Certificate issuer: /CN=f04a18715dbcb485368fafe99b8ae2c9f04af763
Certificate serial: 019921B11A72ADE73ADEFDFFE40AF9946867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
Manifest number: 0DD1
Signing time: Sun 07 Sep 2025 01:01:18 +0000
Manifest this update: Sun 07 Sep 2025 01:01:18 +0000
Manifest next update: Mon 08 Sep 2025 01:01:18 +0000
Files and hashes: 1: 8EoYcV28tIU2j6_pm4riyfBK92M.crl (hash: LAt23FzK46xSAjM7+426ulEaVzKxlrsytbByqZIxfsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:1a:72:ad:e7:3a:de:fd:ff:e4:0a:f9:94:68:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a18715dbcb485368fafe99b8ae2c9f04af763
Validity
Not Before: Sep 7 01:01:18 2025 GMT
Not After : Sep 8 01:01:18 2025 GMT
Subject: CN=370f2cee9ed08e2ee02dce66c0b994f77365dc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:31:47:2d:52:ed:52:8a:f1:22:e4:a5:99:
a8:ba:3a:ab:e4:dd:ab:35:e1:cf:65:05:6a:3b:c1:
37:ed:20:5b:98:a0:65:bf:ae:4c:86:21:8f:74:d6:
c0:99:c0:5b:72:fb:4e:30:5d:24:8f:9d:88:e2:36:
6e:e0:e9:11:6c:db:1d:41:bf:7e:c4:73:4d:01:5c:
51:70:4e:a0:33:e8:15:e7:be:dc:f7:1c:20:4a:10:
67:5a:6a:7b:eb:56:8b:88:4d:72:16:c2:b1:9c:8d:
d2:08:a2:28:9f:d4:6b:3a:98:1c:28:c6:35:12:bf:
de:f3:59:33:0a:c2:25:56:bc:71:aa:ce:ec:8b:ff:
3f:37:7a:50:27:b8:cc:cd:a4:74:bf:6c:48:8b:15:
0a:da:d5:53:26:39:01:00:27:52:2a:f4:2f:47:61:
f4:d0:d7:a4:94:f5:eb:ad:4c:75:e4:95:b9:3b:19:
12:dd:a8:58:78:d4:0f:55:7d:6b:e2:1a:ce:72:75:
0c:f3:e8:46:d2:c5:0b:41:44:53:65:a4:c9:41:60:
d9:0b:e7:23:94:62:eb:76:b0:34:e3:2a:77:1b:ac:
ad:d2:78:66:01:bd:56:12:03:a3:0f:8d:4b:6f:c1:
fb:d8:05:b5:aa:64:9a:82:f9:bb:0c:c8:1b:2d:37:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0F:2C:EE:9E:D0:8E:2E:E0:2D:CE:66:C0:B9:94:F7:73:65:DC:7D
X509v3 Authority Key Identifier:
keyid:F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:41:69:7a:31:52:01:61:f7:82:48:1b:b9:91:f2:34:9e:b2:
75:69:20:dc:03:a9:3e:ae:dc:7d:09:f3:35:77:64:6b:69:7b:
6e:e6:f5:68:6b:e5:4e:d1:b1:1b:4d:45:01:dd:2c:56:df:10:
b2:8f:49:c8:18:20:df:6d:7e:a4:de:fe:c6:ea:fe:a6:e8:07:
a0:9f:05:8a:4a:0c:a8:36:fc:fe:35:ee:ba:98:a7:bd:82:e5:
dc:aa:74:46:74:c5:e4:ef:a7:50:42:f7:fa:48:8c:0a:1f:20:
82:0c:13:9c:91:38:cb:b1:5a:06:19:50:16:c8:31:91:10:91:
b8:8d:f9:82:84:29:9d:09:87:a3:32:c4:8c:20:d9:dd:4f:99:
08:66:7f:e3:f2:3b:11:35:65:9e:6e:62:ad:05:5a:f6:04:8e:
a2:e4:0e:3f:2b:58:ac:d3:94:16:c4:5b:0a:b9:b6:31:93:40:
0a:8b:7e:bd:7a:d7:5c:bc:4f:70:e7:98:ce:45:39:68:28:3c:
25:3d:c2:07:50:2b:cc:69:03:36:e5:91:bf:43:b0:1b:75:f8:
ce:ef:a1:f7:ea:2f:d2:d2:7d:82:08:f1:3c:58:0f:68:25:92:
51:0b:7f:b0:d6:58:e0:bf:24:f5:a5:ab:cc:7b:78:a1:d2:c8:
78:27:34:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:21 2025 by rpki-client