Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
File: mx8SO1ukvBt3k7np-htD2sSaZgo.mft (raw, json)
Hash identifier: CY8/4ut+1mzUMtxzxlAIEmoHdmne3wZzY86MInl9Kg4=
Subject key identifier: EC:B6:35:AF:DD:49:D5:D8:AA:71:49:7B:AE:BF:7F:7B:5E:73:8D:D0
Authority key identifier: 9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
Certificate issuer: /CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Certificate serial: 019A706DFD9C7BA09E7ADA3A4A63B5D01D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
Manifest number: 1048
Signing time: Tue 11 Nov 2025 01:00:47 +0000
Manifest this update: Tue 11 Nov 2025 01:00:47 +0000
Manifest next update: Wed 12 Nov 2025 01:00:47 +0000
Files and hashes: 1: mx8SO1ukvBt3k7np-htD2sSaZgo.crl (hash: DoFHBbVcFl0IFUY0kU5aPh6lVvNfEBe2n2UDYUXO9fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:fd:9c:7b:a0:9e:7a:da:3a:4a:63:b5:d0:1d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Validity
Not Before: Nov 11 01:00:47 2025 GMT
Not After : Nov 12 01:00:47 2025 GMT
Subject: CN=ecb635afdd49d5d8aa71497baebf7f7b5e738dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e6:62:3a:21:17:d0:81:0c:bd:32:cb:88:10:
10:57:e5:54:d3:9f:e3:89:51:70:52:ab:43:0d:d9:
53:e0:40:32:7b:a1:3f:47:eb:12:c9:84:ef:0f:d2:
f8:bd:61:f6:20:3e:9d:56:04:8e:d4:00:09:d9:77:
7d:2a:89:26:32:ee:9c:5e:83:25:64:10:fa:96:f9:
8e:0f:98:cd:85:3f:bb:55:eb:a9:7f:0b:d7:4c:30:
24:36:ff:b9:c0:cf:1e:8a:44:93:e8:7d:85:72:a7:
ee:06:6e:8f:75:10:38:5f:a6:3d:b2:29:75:df:50:
e3:d0:31:cc:ca:19:5b:95:0d:43:cb:ea:94:73:d2:
6a:c4:fe:d5:33:46:6d:29:77:5d:69:c7:7c:95:ee:
e0:99:8a:89:48:d5:a4:e8:74:c5:69:a1:5c:c9:fb:
c8:fc:b7:ee:37:19:bd:c1:17:37:71:28:9a:20:93:
de:3c:b8:2d:23:ac:26:5b:79:b7:04:43:30:01:63:
0d:ce:d5:3c:ed:d5:e7:57:43:f5:ea:73:6f:34:7c:
c5:b0:86:09:d7:26:86:36:50:30:8a:5a:b5:dc:8d:
9a:8e:ad:6e:91:3b:d9:51:1a:60:75:05:da:ae:c7:
fa:23:71:15:6f:f9:e7:b2:5a:8a:68:b5:d2:84:38:
6d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B6:35:AF:DD:49:D5:D8:AA:71:49:7B:AE:BF:7F:7B:5E:73:8D:D0
X509v3 Authority Key Identifier:
keyid:9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9b:f2:cd:d7:3f:c3:d6:38:fe:a3:9b:45:a3:f7:62:8c:bd:
a0:7f:2a:12:3f:bb:da:b2:32:0b:5d:f4:54:3c:aa:3f:a2:6c:
5e:2b:91:c8:89:06:49:f7:c5:aa:52:08:16:55:e2:83:67:c9:
03:4d:3c:ff:80:9e:1d:9e:ea:c4:30:46:0d:a8:50:81:eb:b5:
0f:cc:11:8a:b7:40:89:e9:c3:3a:04:7b:a5:58:63:2e:a0:30:
06:c6:98:af:5a:27:69:6f:79:2f:7d:fd:06:ad:ca:3d:9e:de:
04:e2:7b:8e:89:ab:cd:0f:e9:cd:3e:59:f1:dd:2d:70:32:c3:
5c:89:35:b4:49:db:b0:32:f9:cf:02:21:3a:a3:32:32:b9:c3:
40:49:20:19:81:de:a5:ff:93:eb:51:75:7a:fa:84:cf:07:22:
b8:95:fc:ea:12:a8:c1:47:dc:78:76:27:d7:d2:c9:c1:29:2d:
77:96:ad:ee:14:48:09:c8:45:1a:29:a1:9f:ca:1c:36:d0:02:
f3:87:5f:86:7e:65:3b:30:a0:b0:fc:e7:95:23:0c:8e:84:3d:
48:28:71:cb:23:b4:9d:89:ab:81:c4:bc:5b:f6:4f:3c:21:41:
02:ac:52:c7:d6:72:bf:60:d0:7c:26:b6:53:da:44:93:f9:f2:
7f:19:18:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:45 2025 by rpki-client