Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
File: 8SEJSHr0AKY-PLARo9VJ51H9LBg.mft (raw, json)
Hash identifier: vq2bOThScWHGas4O+s7n1d81AkFyLoSdkAx+Yw2CubE=
Subject key identifier: BF:B8:8D:4B:3C:5B:4A:4D:CE:CA:9D:A6:38:D4:6B:C0:5B:2F:3C:6F
Authority key identifier: F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
Certificate issuer: /CN=f12109487af400a63e3cb011a3d549e751fd2c18
Certificate serial: 01992255EBADAB52CDBD610F787B32932C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
Manifest number: 0D53
Signing time: Sun 07 Sep 2025 04:01:19 +0000
Manifest this update: Sun 07 Sep 2025 04:01:19 +0000
Manifest next update: Mon 08 Sep 2025 04:01:19 +0000
Files and hashes: 1: 8SEJSHr0AKY-PLARo9VJ51H9LBg.crl (hash: 0P5uhTkfb/cAAYgOTE2l+BZ39qBZlNrmyggpOCdKM+Y=)
2: r15VgfDzfklLUPcVx6y07YzgPWU.roa (hash: px8SZ3fdpiQxLHW7vHT/LHov8V1krmhAYBpslqeJkek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:eb:ad:ab:52:cd:bd:61:0f:78:7b:32:93:2c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12109487af400a63e3cb011a3d549e751fd2c18
Validity
Not Before: Sep 7 04:01:19 2025 GMT
Not After : Sep 8 04:01:19 2025 GMT
Subject: CN=bfb88d4b3c5b4a4dceca9da638d46bc05b2f3c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d6:92:75:07:88:8f:11:38:9c:64:c7:0b:95:
b1:64:46:57:7d:ee:76:75:8f:2e:86:ef:de:e6:df:
ff:c0:f5:98:1a:05:0a:75:00:56:bb:cc:bd:38:c6:
dc:77:93:2b:50:ae:6c:a5:20:f4:f4:cc:63:28:76:
d6:ce:b5:d1:8d:01:f4:dd:d4:23:48:19:f5:31:b9:
7e:54:4b:9f:a8:27:c4:8d:8e:94:b0:ce:b3:8b:92:
da:9e:11:21:90:09:0f:b6:2f:16:ef:69:8e:00:28:
6a:6b:21:29:79:d2:49:da:16:c0:e7:66:ee:d2:38:
e1:8a:bc:27:ac:1c:33:6a:b6:03:ab:c3:c3:6f:65:
06:59:61:a8:42:6e:c8:24:6d:2b:bd:0b:36:7a:1b:
46:9d:f3:cd:1c:5e:b7:8a:ea:43:13:f7:0b:fb:16:
cd:3b:d7:f5:a1:f1:cb:7c:5b:c8:e4:d8:03:33:8e:
b0:6e:38:6d:79:b6:9c:7b:3b:27:16:ef:e0:36:98:
2c:dc:76:3d:35:16:02:6c:42:55:0f:25:0c:4b:dc:
a3:93:52:4e:d6:40:c7:32:24:5d:c7:04:ee:a3:d4:
1f:e8:66:03:48:7f:50:37:fe:ec:56:b7:2d:dc:90:
46:90:3d:88:9f:7f:d7:bc:88:19:c5:35:02:df:55:
c3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B8:8D:4B:3C:5B:4A:4D:CE:CA:9D:A6:38:D4:6B:C0:5B:2F:3C:6F
X509v3 Authority Key Identifier:
keyid:F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d6:10:1c:29:2c:9f:6d:3e:17:35:85:dd:21:3f:9b:38:0f:
eb:b1:85:ed:d2:a5:90:f2:f3:7a:f5:ce:d2:40:84:ef:d3:16:
6e:c5:06:81:9b:05:71:dc:b4:e6:f4:63:ae:c3:1c:91:7f:ca:
bc:dc:dd:62:6d:5b:6b:6a:c2:22:64:d3:3f:65:39:1b:77:77:
ab:d5:1d:9a:e9:71:c3:da:0c:fb:03:76:51:74:11:80:5b:d1:
0e:c5:fb:2a:1b:48:77:0a:4d:a3:6d:8c:3b:76:ca:5d:a6:13:
55:77:8b:cb:b9:c6:23:5f:98:2a:f0:03:03:76:7b:8c:be:e6:
73:5b:54:80:8a:ef:3d:72:14:2c:38:48:55:c2:05:5d:5d:23:
eb:5b:19:79:0e:f3:ce:7c:85:11:23:40:27:73:36:6f:c9:c7:
94:6a:e3:9a:48:46:2c:12:c7:bd:05:92:ec:04:da:35:ae:e0:
67:f5:81:bb:c4:3d:6a:9d:03:29:95:66:a6:9e:2f:58:aa:d0:
f4:06:97:3a:5a:f0:8e:6a:fc:34:98:93:d0:bf:ed:aa:fa:bc:
58:6b:3a:c8:e6:91:27:52:e4:f1:7d:85:02:64:59:99:b5:97:
33:68:aa:f9:50:58:c1:31:52:a4:42:43:9c:39:36:d4:00:30:
54:bf:36:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:28 2025 by rpki-client