Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
File: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft (raw, json)
Hash identifier: QuApFry3wd+Nabk5FmAWuS3XgZDt+v1FBD7fB8i5++o=
Subject key identifier: 2B:FA:1C:22:EA:6F:1C:B4:BE:5C:4A:74:46:B6:9F:3F:F7:07:E0:4C
Authority key identifier: F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
Certificate issuer: /CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
Certificate serial: 019916F681BCD388603FBED5AF017BABC478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
Manifest number: 0D4B
Signing time: Thu 04 Sep 2025 23:01:17 +0000
Manifest this update: Thu 04 Sep 2025 23:01:17 +0000
Manifest next update: Fri 05 Sep 2025 23:01:17 +0000
Files and hashes: 1: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl (hash: Wy5KyvNFAvQcAHeG0g+xKSiEbkyuc6MlQVXk9oVY/M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f6:81:bc:d3:88:60:3f:be:d5:af:01:7b:ab:c4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
Validity
Not Before: Sep 4 23:01:17 2025 GMT
Not After : Sep 5 23:01:17 2025 GMT
Subject: CN=2bfa1c22ea6f1cb4be5c4a7446b69f3ff707e04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:ef:54:5c:74:63:9e:57:69:c8:2f:84:7a:
24:cb:14:40:ca:45:7c:79:31:26:b4:14:46:1c:d1:
54:59:45:a5:e0:42:66:10:37:00:c2:f6:56:f7:12:
74:ec:70:b1:65:c1:45:2b:f6:8e:88:58:e8:ef:51:
fe:03:ec:75:df:cb:f6:0a:92:f9:96:e8:82:59:40:
ff:26:e6:21:d9:94:42:51:72:cf:f6:26:a3:ca:9f:
cf:84:1a:08:a9:70:c6:34:a1:bb:b7:fc:92:57:34:
b3:c3:8a:8e:af:01:5a:a0:30:c2:8c:3a:9d:fe:db:
e8:47:1c:9f:54:cd:9a:f8:d1:be:f5:79:01:42:4f:
87:11:f5:af:5b:ab:41:f3:7f:67:86:04:17:85:a4:
95:73:1e:9c:8c:6f:55:fb:0d:56:9d:23:06:c5:6e:
52:40:5c:1a:9b:e6:34:ba:12:52:13:1d:43:be:c3:
61:0f:3f:4d:f8:73:57:81:fb:c4:11:fe:85:ad:eb:
03:cb:51:25:89:88:ab:c6:a0:97:cb:e2:cc:c0:30:
36:a9:31:03:bd:ab:b7:3f:fb:9b:31:f4:8a:fc:3d:
3d:07:b7:a2:2a:e3:56:7f:de:f5:79:3b:33:bf:e7:
0a:eb:e7:8c:24:ca:40:4e:20:20:c4:ef:f3:f9:4f:
6c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FA:1C:22:EA:6F:1C:B4:BE:5C:4A:74:46:B6:9F:3F:F7:07:E0:4C
X509v3 Authority Key Identifier:
keyid:F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:09:bf:91:0d:c2:b1:3d:34:42:9f:46:a8:17:86:e8:e4:69:
a0:17:fd:b8:3c:d0:e0:6d:b4:e3:97:d3:44:be:b3:ba:68:00:
6f:03:0b:c6:f0:8d:a4:44:f9:32:0a:ad:56:2f:60:83:59:6a:
8e:5e:b0:b7:fb:c5:d8:e9:5f:b3:35:30:29:21:ae:45:f4:5b:
24:83:79:2a:e0:59:18:b1:86:2c:02:8b:50:e4:69:d6:5d:67:
b6:8a:81:7c:dd:e9:c5:41:b6:a2:d0:a9:d5:e6:fe:33:b7:fb:
b9:12:d8:4a:9d:32:15:ea:33:4f:0d:c4:a3:56:62:61:81:24:
d0:58:fc:64:3b:5b:21:a0:bd:1e:a1:2d:d6:e1:b5:9b:a9:2b:
f6:ff:4b:38:fe:e1:af:fe:02:98:55:bf:db:4f:8b:2c:59:12:
fa:1c:16:ec:fc:10:d4:13:61:ed:ee:6e:2a:2e:58:f9:b5:7b:
d8:e9:57:01:d2:23:59:45:77:8f:ed:03:fc:52:87:dc:09:6f:
19:b1:47:a9:39:b0:74:0b:80:f1:ab:44:b1:a5:09:ec:4a:c5:
a9:79:01:60:c3:72:d8:27:36:d8:1f:2e:0d:ff:4e:4c:8b:dd:
2e:ab:1e:78:80:c1:d4:02:d6:61:b3:f5:58:13:33:ce:4c:ab:
e2:69:76:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:21:36 2025 by rpki-client