Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
File: 8D9771R9ACUziqa2rueqHb4Urio.mft (raw, json)
Hash identifier: oQ/g7hxVsP8Xp8gjzyOkw4hTgFOS6bP75AospLMlqE4=
Subject key identifier: 74:01:AC:CF:E8:5E:4C:79:D8:20:B4:63:C1:AB:42:44:2F:22:10:59
Authority key identifier: F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A
Certificate issuer: /CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
Certificate serial: 0199239EC2D0FFA09C16D4D5CE115C0127DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 10:00:31 +0000
Manifest this update: Sun 07 Sep 2025 10:00:31 +0000
Manifest next update: Mon 08 Sep 2025 10:00:31 +0000
Files and hashes: 1: 8D9771R9ACUziqa2rueqHb4Urio.crl (hash: /KYO+M5LMWqd9kYY4JGlCdKLXFxrG7s2I5RcDIPOp6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:c2:d0:ff:a0:9c:16:d4:d5:ce:11:5c:01:27:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
Validity
Not Before: Sep 7 10:00:31 2025 GMT
Not After : Sep 8 10:00:31 2025 GMT
Subject: CN=7401accfe85e4c79d820b463c1ab42442f221059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:81:fe:17:6f:6a:54:0b:0a:5f:ab:a7:0a:
09:78:1f:16:3c:68:6c:33:5e:ca:ff:26:ce:d9:eb:
8a:25:d7:56:33:80:e3:da:ad:39:8c:d9:40:35:a2:
65:d9:3f:e9:e8:62:26:63:44:c4:2a:5d:66:07:51:
86:31:a7:19:a4:25:ac:a5:29:ac:60:32:fe:9b:6a:
11:78:c8:d0:cd:dc:5b:69:8b:a3:eb:da:06:fe:c8:
fd:9e:8e:11:55:24:b6:2b:cf:a9:c3:4d:cf:29:ed:
61:5e:e0:81:51:68:18:e9:42:78:52:d4:eb:6b:ad:
a3:4a:0d:8b:97:06:98:49:7e:6f:7c:4f:d7:ed:4a:
5a:02:ef:30:d3:d0:e4:82:f9:22:92:7c:21:bb:d3:
bb:eb:ee:60:41:a1:ce:6c:eb:aa:63:65:11:c3:dd:
3c:20:4e:16:00:f0:e5:f3:3f:5e:d4:a7:85:a4:77:
a3:22:7f:be:40:6b:c3:9c:8d:19:52:4d:0f:85:f0:
f7:69:7b:47:26:6e:ea:19:6b:67:1e:17:1a:e6:63:
93:d6:7d:70:05:36:50:85:94:85:8a:48:bb:9e:1c:
eb:73:af:aa:5e:d2:dd:37:9b:59:f2:09:b7:cf:77:
76:c7:29:e2:f9:8e:6e:64:a4:fa:bd:0e:2a:46:74:
99:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:01:AC:CF:E8:5E:4C:79:D8:20:B4:63:C1:AB:42:44:2F:22:10:59
X509v3 Authority Key Identifier:
keyid:F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:dc:96:1b:f4:fc:55:74:4d:4e:f9:05:68:23:f6:99:7e:b2:
df:70:d1:6c:b9:e2:dc:9e:46:cd:6c:e3:a5:25:b6:08:b8:dc:
80:cc:01:be:54:03:66:90:8e:62:51:06:c8:52:e8:31:04:ec:
37:57:51:22:3c:2d:f9:f3:27:68:44:18:fd:64:e4:09:24:3c:
39:32:d9:f7:70:53:02:1f:61:4f:cb:c9:63:b6:7d:4e:69:d7:
13:ed:2c:f0:72:dd:3a:98:27:96:f4:6e:c1:1c:b0:1a:a4:ab:
01:fa:c5:f3:c9:d8:08:87:68:e6:b7:2c:18:cd:65:e5:b4:26:
34:db:14:12:b7:86:88:dc:b4:ff:e7:fa:b3:95:75:3b:ae:d7:
c1:ef:90:42:5e:3c:b9:53:1a:0b:95:dc:db:1c:69:c0:2a:0c:
34:c8:ae:2a:83:c6:6d:c0:7b:af:99:14:95:8f:be:c1:3d:44:
ed:11:b1:26:36:21:b1:79:e6:d5:b7:8b:c0:a2:5c:7f:92:78:
6b:3d:93:13:4d:83:bc:5d:07:dc:c0:b4:55:ee:16:5f:97:e6:
ae:1e:36:1f:f3:54:20:58:8d:09:62:47:2f:b5:29:d1:44:22:
f4:bf:2c:69:5a:d6:d7:d1:7d:b3:da:a6:84:0d:c5:aa:64:de:
f3:e0:c8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:30 2025 by rpki-client