
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
File: RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft (raw, json)
Hash identifier: aI0D1WpLl87DPkVxb62A9XQz2qXB0jfy+JD0JmMM2+g=
Subject key identifier: 3D:28:54:C8:20:5F:A3:7C:C6:EB:C5:E2:EE:49:74:1D:8C:E1:05:DE
Authority key identifier: 46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29
Certificate issuer: /CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29
Certificate serial: 019923A0950FF58517A7296349C56898DBBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
Manifest number: 08D4
Signing time: Sun 07 Sep 2025 10:02:30 +0000
Manifest this update: Sun 07 Sep 2025 10:02:30 +0000
Manifest next update: Mon 08 Sep 2025 10:02:30 +0000
Files and hashes: 1: RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl (hash: Vw4ckPc2hUTjy1NtCgB7/SlqNeuPvgwuE6H+xd6zPHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:95:0f:f5:85:17:a7:29:63:49:c5:68:98:db:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29
Validity
Not Before: Sep 7 10:02:30 2025 GMT
Not After : Sep 8 10:02:30 2025 GMT
Subject: CN=3d2854c8205fa37cc6ebc5e2ee49741d8ce105de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:78:49:e0:85:07:cb:a7:72:fd:85:3d:de:
a6:e7:cd:8a:9b:cd:ef:0a:a7:c6:25:1c:7d:40:83:
c8:87:ce:3b:ff:17:7a:f4:90:ee:b6:9d:2c:a6:cf:
c1:73:b1:72:ba:a1:f6:84:c2:6a:db:53:ae:43:fd:
bd:78:e5:78:d8:59:33:0a:1c:38:d8:30:97:3e:56:
0d:e2:1f:8c:f5:39:88:c0:a8:01:0f:4f:7f:1f:52:
61:12:1a:6d:82:36:f2:9d:68:d1:29:b9:79:51:79:
53:23:6f:b9:be:e6:eb:1a:04:9d:4b:27:52:93:45:
de:5a:30:38:76:90:aa:08:67:93:27:32:00:70:d1:
47:01:32:f0:cb:35:af:5d:17:5c:e5:f1:80:4e:13:
08:0b:d5:6c:27:81:b6:d8:54:15:cd:4f:9e:74:af:
a6:f8:b6:d9:66:60:14:fd:0b:29:5e:a6:20:8c:07:
01:8f:8b:52:8d:9d:fb:bd:01:30:e3:87:bf:ba:cb:
f0:14:9d:eb:64:e4:58:92:21:81:f6:ce:40:cc:59:
55:14:d7:43:fd:7e:d5:b4:e8:e1:3a:56:37:1d:a6:
ca:99:0a:40:ac:8f:68:4e:9c:9b:7f:3c:bd:ab:88:
f8:29:2d:69:59:34:a5:54:30:bf:54:12:70:3f:17:
1a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:28:54:C8:20:5F:A3:7C:C6:EB:C5:E2:EE:49:74:1D:8C:E1:05:DE
X509v3 Authority Key Identifier:
keyid:46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:fe:77:80:b6:30:42:4d:1a:47:b7:9b:88:47:e8:bd:3e:38:
6a:b6:35:15:ff:cc:e2:ca:8e:22:54:b7:87:85:2e:b6:33:2a:
c8:15:db:f9:d1:d6:96:13:20:40:3e:2f:38:70:23:ec:48:87:
f4:27:42:0c:b8:0b:5a:f1:f7:1a:1e:20:22:94:07:34:fb:82:
be:03:fd:9f:63:57:a7:be:06:6a:4a:08:f6:db:21:25:df:7e:
49:b2:ee:06:b1:62:10:ce:be:53:f4:f5:3e:66:7a:17:dc:70:
37:4e:a1:bf:b7:de:e4:0a:dc:4c:11:c1:55:e5:66:4f:01:a2:
f2:0d:48:f8:bc:d1:f5:e0:b4:c1:4d:07:d2:15:f5:89:31:f9:
51:cb:31:64:4e:5a:9f:c2:7b:7f:9a:e3:ba:bd:2d:84:bc:55:
28:35:4b:92:ed:8e:09:be:fe:e1:27:52:95:9c:db:a2:a0:38:
96:16:10:36:32:37:30:ef:49:02:17:8b:d9:54:41:03:7a:ec:
3b:50:51:a0:6d:7d:b9:c3:3b:88:05:b4:b2:02:de:d7:c5:a8:
65:dd:22:8f:ce:3d:93:43:9b:b5:f9:15:dd:d9:2c:25:11:f4:
de:2b:c1:b9:75:de:05:60:7b:41:ff:d7:b7:2b:dd:32:f0:da:
dc:ba:bd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:36:20 2025 by rpki-client