Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
File: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft (raw, json)
Hash identifier: ggadylz8n7wwE/7QPJzNFOpByp6WoZU1Miydu5To/uI=
Subject key identifier: A9:DA:B1:0A:B3:8B:73:B0:D6:C8:C1:49:55:4F:33:B2:84:CB:CA:37
Authority key identifier: D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
Certificate issuer: /CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Certificate serial: 0199239EC52D609D8AD214E0E66928ECD235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
Manifest number: 132D
Signing time: Sun 07 Sep 2025 10:00:31 +0000
Manifest this update: Sun 07 Sep 2025 10:00:31 +0000
Manifest next update: Mon 08 Sep 2025 10:00:31 +0000
Files and hashes: 1: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl (hash: kRkUDKTUpPdDq3mmeMjNlEumeKS7U+1mgOGauHX6VjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:c5:2d:60:9d:8a:d2:14:e0:e6:69:28:ec:d2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Validity
Not Before: Sep 7 10:00:31 2025 GMT
Not After : Sep 8 10:00:31 2025 GMT
Subject: CN=a9dab10ab38b73b0d6c8c149554f33b284cbca37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:5e:89:c0:09:6d:2e:d2:d3:27:0e:a5:30:
3a:ff:85:ff:f0:a9:05:29:62:16:d3:1f:5c:de:74:
1d:8b:6b:58:5a:8f:a1:10:dc:fc:36:e7:11:23:0e:
0a:56:0b:7f:4c:e8:ca:29:f4:f5:b2:0e:0a:5e:1f:
ad:e0:e9:58:3c:85:0f:7b:29:9b:29:23:e2:03:63:
a2:68:48:c7:d1:16:41:47:da:6e:a9:9d:41:11:6b:
ec:68:95:9f:9e:30:24:88:de:2c:90:19:ff:31:09:
0f:21:aa:fa:86:14:db:e5:44:e8:9e:cb:12:a3:32:
00:2f:30:4f:ec:34:d8:fd:35:a8:4f:3e:f1:62:7c:
5f:10:9c:93:44:69:58:ed:7b:2b:9e:ab:d1:4e:56:
ab:7d:82:10:73:a8:91:9c:6c:22:1f:cb:ce:05:4f:
2f:ac:83:5f:f1:24:0d:cf:32:1f:c5:73:14:5a:e6:
aa:60:d4:1d:4b:7d:41:34:fa:2b:ec:08:aa:68:a2:
a0:89:8a:cf:72:d1:b4:93:c8:9a:e2:a2:47:8f:bf:
b0:54:24:29:20:ee:a9:91:44:72:75:29:39:99:99:
00:bb:fd:a5:3d:be:cf:93:4c:69:18:db:b8:a5:78:
2b:de:6b:b2:28:70:f3:cb:4c:da:a9:97:cc:39:50:
c1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DA:B1:0A:B3:8B:73:B0:D6:C8:C1:49:55:4F:33:B2:84:CB:CA:37
X509v3 Authority Key Identifier:
keyid:D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:32:f6:97:f0:17:d6:f4:b6:1b:c8:bf:c6:01:e0:ac:b4:2f:
4e:ce:37:c9:60:5e:db:c3:e1:11:51:17:e7:cd:77:f0:83:9f:
db:b7:e7:1a:bf:cd:a8:13:e3:36:a9:82:fc:96:b6:e5:97:57:
a6:28:7a:3d:0a:3f:c0:25:7c:31:a3:c2:d9:e1:d5:4b:07:b0:
3b:45:22:d0:20:6b:8e:b5:79:67:3f:d7:67:82:55:a4:5c:9b:
aa:1a:7a:57:7b:11:f6:1f:50:8e:87:13:5e:ad:2e:17:08:28:
23:7e:5c:a9:53:ab:76:90:b1:09:1b:da:ff:0b:23:64:6a:39:
77:d5:4f:ed:5b:1f:59:af:c1:a5:77:c5:43:29:3c:8a:be:e6:
c4:e6:f2:10:55:48:48:4c:8c:5e:9d:70:45:f9:90:9d:7c:16:
52:08:8e:bf:a4:ed:b8:25:4f:44:9d:1e:3e:8e:b9:50:16:21:
0c:ab:e2:ae:bb:8f:cf:32:54:92:5e:5b:cd:34:38:fc:0d:9f:
10:a8:3a:3c:da:06:bf:47:b5:60:2a:32:0b:d7:1e:3b:fc:2d:
04:ac:26:13:21:6a:c2:05:e0:19:56:17:8f:5d:1e:05:ff:e5:
b6:45:2e:55:9b:13:d3:2f:0a:54:a7:74:8c:00:d3:56:f9:fc:
ba:a6:b8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:42 2025 by rpki-client