Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
File: 8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft (raw, json)
Hash identifier: 1UQRXq9aawVCnwMgSsH530AIx4GHCoGYXn48mZg0r6M=
Subject key identifier: 13:7B:52:EC:70:3B:B7:24:08:98:26:25:7D:91:BF:F9:6C:E0:5D:46
Authority key identifier: F3:EF:52:ED:81:6C:F4:BF:7D:02:9F:FB:0A:BC:10:1A:FD:2C:64:B5
Certificate issuer: /CN=f3ef52ed816cf4bf7d029ffb0abc101afd2c64b5
Certificate serial: 019A01B5F23D7CE848CCE0A65E1423EA7763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
Manifest number: 01CB
Signing time: Mon 20 Oct 2025 13:01:32 +0000
Manifest this update: Mon 20 Oct 2025 13:01:32 +0000
Manifest next update: Tue 21 Oct 2025 13:01:32 +0000
Files and hashes: 1: 8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl (hash: ViG/Dm9cdk21l85GuRXHiMwPD5UB00408/PGnGAElo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:f2:3d:7c:e8:48:cc:e0:a6:5e:14:23:ea:77:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ef52ed816cf4bf7d029ffb0abc101afd2c64b5
Validity
Not Before: Oct 20 13:01:32 2025 GMT
Not After : Oct 21 13:01:32 2025 GMT
Subject: CN=137b52ec703bb724089826257d91bff96ce05d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:76:96:cc:5c:48:01:63:6c:89:ed:1f:e0:38:
de:18:10:21:d1:6a:bf:65:0c:e4:a7:2c:19:63:ef:
d7:44:cd:dc:28:9b:a6:3f:a5:83:a1:d8:75:8e:9e:
39:5f:87:89:bb:ec:0a:10:fa:6e:12:cc:75:b2:20:
17:92:05:e2:45:ca:89:9d:6c:b2:a4:5b:67:02:68:
63:bc:19:19:dc:f3:42:b6:b5:81:cb:c9:ce:13:48:
5a:75:8e:8b:15:ad:be:dd:b9:9f:fd:55:61:a2:17:
8c:df:6c:fb:fa:51:28:dc:be:2b:ed:d6:27:c9:3e:
b6:aa:04:96:26:16:8a:79:ad:45:ba:69:1d:1e:48:
1d:85:91:23:a5:9b:9b:5c:d6:82:e6:e6:5b:4c:0b:
37:b4:87:49:9f:62:88:a2:0e:48:f2:a5:8b:7c:a8:
2b:fa:f5:36:c8:c7:f0:2f:3f:01:c7:d1:5d:f0:6a:
9e:05:eb:1a:7d:e3:f8:97:10:ee:89:1a:2c:be:fb:
90:a4:64:c0:cd:b4:6f:9e:f5:be:85:c9:53:fd:0d:
23:8b:57:9b:37:46:f1:bd:27:0e:bd:09:0f:9d:b6:
4b:c4:8e:be:72:9d:fd:bc:43:f8:1e:4c:de:c2:89:
98:e3:35:52:48:dc:ae:8f:ea:28:fc:4d:cc:e9:04:
a9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7B:52:EC:70:3B:B7:24:08:98:26:25:7D:91:BF:F9:6C:E0:5D:46
X509v3 Authority Key Identifier:
keyid:F3:EF:52:ED:81:6C:F4:BF:7D:02:9F:FB:0A:BC:10:1A:FD:2C:64:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:99:21:23:8d:f5:85:48:34:8c:de:78:cf:5d:f8:8d:c0:1c:
db:88:35:c7:39:1f:7a:07:db:8a:c6:93:11:cf:3f:83:3a:fd:
a5:05:88:1e:ea:e8:61:ed:6b:a4:a0:42:bb:a7:a2:c3:c2:e2:
4a:d3:97:55:dd:2c:05:e1:d2:23:67:0c:1b:de:b5:2d:db:fb:
a5:79:69:82:f8:0a:36:ad:03:db:6b:10:ed:22:99:5b:2a:a1:
0b:a1:4e:4b:25:27:80:49:eb:69:6f:be:72:3f:cc:97:a1:0b:
73:43:0a:c5:8f:4b:56:7f:45:b0:d8:b6:89:96:8a:13:04:5a:
d5:a6:a6:35:a3:81:73:ba:ab:eb:c8:47:b2:c3:05:f2:5e:73:
28:39:f3:d3:62:ca:b8:ce:d5:b7:e3:9e:eb:6f:a6:3c:7c:40:
51:e0:c0:b6:69:60:4e:69:bd:36:e4:19:57:d4:44:92:f2:f1:
22:71:64:8f:22:a5:ce:bf:94:11:2c:04:cb:dc:97:b1:63:b1:
86:4b:d3:b0:9d:a1:f8:c6:2c:d9:54:f4:e4:d8:23:fd:5a:7d:
a3:5d:13:3f:85:71:14:d1:d4:64:2d:ad:d3:77:e3:0e:cc:e4:
57:aa:5d:4d:94:b6:ff:bf:a0:26:26:73:af:d7:8b:d7:68:0f:
f5:34:10:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:51:43 2025 by rpki-client