Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
File: 0KFr9-DjuTMLVEg-GfYTsCtie-8.mft (raw, json)
Hash identifier: UFtMepZ/90W4RcpkpwaHFNewVknAuHUjppRRUlhukVc=
Subject key identifier: 23:4E:10:F5:C1:7F:DE:6F:84:86:0A:1B:91:BC:EB:AE:07:6F:9C:AE
Authority key identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
Certificate issuer: /CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Certificate serial: 0199221EFB6259B139AA5477D30C9F3E49C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
Manifest number: 10AC
Signing time: Sun 07 Sep 2025 03:01:19 +0000
Manifest this update: Sun 07 Sep 2025 03:01:19 +0000
Manifest next update: Mon 08 Sep 2025 03:01:19 +0000
Files and hashes: 1: 0KFr9-DjuTMLVEg-GfYTsCtie-8.crl (hash: d+9sM+PCpvynMrUME+ibDNUPyCxjD1qJswj/mMSqa0E=)
2: s0kyiXR6V1bkt2ciUZ2EpXqYq0U.roa (hash: BMvoEX7a6X6vFfIWsQqEPuUPXNmqfef7qS8aBYQEmho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:fb:62:59:b1:39:aa:54:77:d3:0c:9f:3e:49:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Validity
Not Before: Sep 7 03:01:19 2025 GMT
Not After : Sep 8 03:01:19 2025 GMT
Subject: CN=234e10f5c17fde6f84860a1b91bcebae076f9cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:27:9a:27:f8:d6:63:77:2e:e2:a7:79:80:37:
65:7a:c5:c5:35:e1:3a:9d:ea:de:6e:9c:63:91:cc:
85:ab:81:92:34:2b:21:ab:10:cd:4e:e1:35:5d:57:
b3:5b:df:f5:f7:78:d4:0b:af:f0:97:7d:b2:e4:af:
7c:8b:ad:d3:e2:ba:38:ee:f4:08:fd:10:ce:2f:48:
c6:f6:3d:c0:49:ca:93:a6:c3:19:c2:4b:03:af:cd:
41:ed:65:9b:32:03:d3:c9:48:80:3c:94:ec:dc:8f:
8b:7f:34:fa:5a:bf:4a:43:e9:8f:8b:e3:cf:4c:c2:
d7:0a:3c:5b:84:47:47:23:42:39:37:07:f5:c3:4e:
ce:1c:0c:ff:03:92:fb:5e:16:cf:64:de:d5:20:25:
28:d5:9d:45:7d:fc:69:19:1a:8f:83:50:83:f1:cb:
4e:89:15:da:8a:df:37:32:40:f1:3c:62:4e:89:52:
70:51:c6:fc:24:98:09:b7:80:7a:f2:ea:03:eb:b8:
81:66:dc:fb:42:26:5c:e9:b6:1c:8c:bb:6e:75:88:
30:28:93:65:d0:74:47:91:22:c7:cf:31:1f:1f:ca:
a6:df:0a:40:f3:74:aa:7c:3c:fa:bc:9d:7f:98:df:
e8:17:89:18:a6:e2:d0:f1:73:a4:13:28:c3:7c:96:
2c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4E:10:F5:C1:7F:DE:6F:84:86:0A:1B:91:BC:EB:AE:07:6F:9C:AE
X509v3 Authority Key Identifier:
keyid:D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f2:fe:0f:36:7d:85:1c:1b:3d:2f:ec:94:83:d1:de:7e:ff:
e0:5b:64:f8:4b:20:2c:e7:da:6b:7d:fd:b0:df:1a:c9:a2:fa:
6b:d6:43:ac:d9:5a:0f:cf:c1:26:3f:35:5a:94:fd:be:bf:4d:
f4:13:9b:72:26:04:bf:8c:b5:d8:c6:9f:44:73:a7:06:d5:27:
47:5e:a4:a7:dd:17:c6:a5:7d:2e:b8:18:bc:01:04:5e:1f:87:
28:fd:64:81:25:c2:69:4e:f9:75:5c:4d:af:78:b3:18:da:74:
d5:31:f9:d3:e7:6e:9d:d3:bc:a7:f3:28:43:4f:6d:6c:2d:93:
9e:c6:39:d8:17:33:c4:e2:67:9b:28:a3:a2:dc:b5:ef:4b:93:
59:c3:70:d9:2d:80:91:01:b0:8f:8c:98:20:b9:78:c4:e5:e0:
4b:0e:93:65:66:91:81:e8:ca:3f:b8:93:13:9b:8a:5e:bb:0a:
9c:9b:6a:5f:16:c7:4e:cc:dc:da:c4:70:e9:e7:61:ee:3d:ca:
b1:1c:2f:6e:52:fc:91:88:f9:32:8a:03:c6:51:49:c8:86:f2:
b5:37:71:f9:2f:70:d0:f9:cd:9a:b6:a0:fd:00:d7:05:36:f8:
e1:4e:8f:d1:46:9e:c1:1d:a6:7d:82:fb:54:96:da:da:1c:6c:
32:45:c2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:31 2025 by rpki-client