Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
File: mx8SO1ukvBt3k7np-htD2sSaZgo.mft (raw, json)
Hash identifier: aiAF3Xmb357s/kMkDiG1EqYnCervoAzaNf753fjELCY=
Subject key identifier: C1:81:44:19:BC:7D:FF:A8:4B:16:69:D1:6C:CB:4C:58:85:F6:CF:2C
Authority key identifier: 9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
Certificate issuer: /CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Certificate serial: 01992255C580B131E35BE0386CA18BFF8B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
Manifest number: 0F9B
Signing time: Sun 07 Sep 2025 04:01:10 +0000
Manifest this update: Sun 07 Sep 2025 04:01:10 +0000
Manifest next update: Mon 08 Sep 2025 04:01:10 +0000
Files and hashes: 1: mx8SO1ukvBt3k7np-htD2sSaZgo.crl (hash: HHRbrlwJMVPuNoqXCujKB8KNTSQAAtdMuk6BULVT7H4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:c5:80:b1:31:e3:5b:e0:38:6c:a1:8b:ff:8b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Validity
Not Before: Sep 7 04:01:10 2025 GMT
Not After : Sep 8 04:01:10 2025 GMT
Subject: CN=c1814419bc7dffa84b1669d16ccb4c5885f6cf2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:48:e2:be:e1:92:48:e8:57:bf:bd:9f:bd:
67:20:33:18:b1:a6:9e:11:2b:4d:36:ad:d2:4b:67:
ec:05:2f:b8:2e:3a:f4:cc:b3:ef:c6:4e:0f:12:a0:
58:24:34:77:2d:d0:06:30:67:b4:a6:ca:7f:0f:37:
a1:b5:75:5b:3f:d5:3e:56:00:1d:1f:a6:68:46:73:
09:1e:f9:7b:49:c2:0c:f0:4a:91:64:ad:b5:ac:e4:
5c:26:be:ff:a2:e4:e8:bf:43:46:a3:aa:5b:6a:73:
19:bb:96:ab:f9:08:c2:9b:3f:0e:c1:6f:f1:3c:ad:
19:c2:09:f2:4e:be:4e:ef:ed:1c:66:21:5a:93:9d:
12:ae:4b:87:c2:3d:33:2b:85:37:33:89:0d:46:95:
83:38:d3:23:80:bd:f9:65:96:70:8d:ee:1d:21:9f:
21:ce:ff:27:59:e4:92:61:20:90:58:d3:e2:3e:62:
4d:c6:0c:46:8e:04:cf:54:17:11:18:87:8f:a0:40:
95:93:5d:d1:30:69:2b:95:a0:b7:a9:bb:af:a3:4d:
91:02:2a:65:78:6e:3d:00:65:ea:0e:ba:60:4c:34:
76:ef:3b:00:d1:b8:cb:a5:58:ee:ef:fa:3e:01:ed:
c4:51:b3:df:b3:ec:8b:04:53:83:18:27:41:47:58:
2b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:81:44:19:BC:7D:FF:A8:4B:16:69:D1:6C:CB:4C:58:85:F6:CF:2C
X509v3 Authority Key Identifier:
keyid:9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a4:7c:1e:3e:f3:2c:d8:76:67:99:b4:d2:5a:4b:7e:30:b9:
1c:ad:2a:15:59:f1:09:41:d2:2c:80:9b:ec:64:71:c6:16:77:
a2:d3:82:d2:4e:a3:31:be:11:b9:0d:5b:10:a7:93:cf:fe:fd:
17:98:0d:3f:b5:b4:98:75:2c:dc:ab:eb:e7:8d:f0:01:20:6a:
68:9b:56:5f:61:ec:8e:78:7d:36:9f:66:0c:71:6f:cf:59:d9:
5e:c9:46:9f:8f:36:ce:86:ca:5a:1b:53:ed:05:d1:a1:10:81:
24:fb:ab:65:8b:8d:ba:27:14:a5:df:3c:d8:4c:cf:0b:aa:10:
85:f5:c6:4d:9c:36:7a:47:61:20:96:85:7e:7e:94:e9:db:b4:
ff:ea:d1:72:0a:c7:1b:f6:d7:10:c4:2a:a7:d7:a7:5c:f5:6b:
40:d6:09:85:72:36:ae:f9:29:98:2a:3a:cf:15:82:1a:04:ba:
14:bc:68:58:24:16:9c:f1:00:a4:64:08:1a:ed:14:cb:fb:99:
be:4a:1c:8c:eb:a8:2c:ff:60:98:61:4a:da:be:06:81:ea:c2:
4c:bf:95:c0:b9:33:37:01:54:14:9f:e9:13:24:ef:6e:f7:11:
52:f8:f2:40:9f:f4:f9:0a:39:ae:76:71:8c:18:0e:5f:1d:d7:
ed:2c:7e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:10 2025 by rpki-client