Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json)
Hash identifier: 4Ac4tgr9GSH10B1sDhUjobNozKzDHY+uMxA4i5jsBq8=
Subject key identifier: EB:3B:F3:CD:B9:C3:3E:67:81:2B:AB:9C:91:EF:37:33:07:F6:91:E5
Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Certificate issuer: /CN=f1a0c67ff859f555af8921938887c6085269a402
Certificate serial: 0199FDD9E1D2A01511B3D04941D79A13CB2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
Manifest number: 141D
Signing time: Sun 19 Oct 2025 19:02:18 +0000
Manifest this update: Sun 19 Oct 2025 19:02:18 +0000
Manifest next update: Mon 20 Oct 2025 19:02:18 +0000
Files and hashes: 1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: xvNRBebiZlPWB9RjUcrCX1VukYOA3vYFqaJDSIKYHq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:e1:d2:a0:15:11:b3:d0:49:41:d7:9a:13:cb:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402
Validity
Not Before: Oct 19 19:02:18 2025 GMT
Not After : Oct 20 19:02:18 2025 GMT
Subject: CN=eb3bf3cdb9c33e67812bab9c91ef373307f691e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:39:9c:33:37:91:ee:2f:b5:6b:be:e0:7d:
a2:8c:6d:5f:0e:83:3a:e6:b2:28:9b:6c:b9:b1:35:
2f:d4:0f:35:8d:2a:45:86:08:5a:f4:97:c2:49:41:
73:51:ba:19:81:44:3f:ff:44:42:2f:60:a4:07:e6:
dd:36:5b:a1:43:bb:a8:bc:d9:bf:c3:3e:2e:5a:6f:
ba:7f:5a:6b:35:c9:ec:a0:91:21:fa:a6:12:07:96:
40:08:3f:e6:eb:60:7f:57:9b:ec:a7:27:5d:15:9a:
0f:b6:ee:64:7b:1f:1d:46:a0:47:53:c9:3c:ec:74:
bc:f1:3c:62:5a:50:22:58:8f:15:9a:f8:41:b8:b1:
36:2a:f0:c7:c1:51:55:a0:7d:06:29:e5:85:6b:42:
db:f7:8e:54:7d:dd:8d:9e:a1:db:e7:43:4d:86:f2:
a7:74:8e:69:b7:9c:be:61:32:ed:45:3f:2f:43:32:
64:2b:f1:a8:1c:04:05:c8:0d:7b:c8:dc:60:c7:49:
93:86:2a:0d:eb:fb:c9:62:4e:55:6c:c2:1b:ee:01:
99:15:5e:c6:49:f4:a2:b6:a7:c5:eb:0e:7d:4c:84:
59:7a:15:07:60:7c:b2:25:23:36:2a:2b:c0:23:62:
07:8c:b5:ce:21:f6:39:c6:34:97:a4:4c:80:bf:8e:
07:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3B:F3:CD:B9:C3:3E:67:81:2B:AB:9C:91:EF:37:33:07:F6:91:E5
X509v3 Authority Key Identifier:
keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5b:c5:61:99:1f:0e:43:07:17:5e:b4:28:09:16:63:6d:93:
8d:3b:a9:e8:f3:6a:e3:60:e6:6a:2b:60:1a:0a:8a:a2:4c:c9:
8d:bf:87:cf:ee:cb:bf:04:c3:6c:29:f3:7c:0e:28:20:a9:4b:
7c:ee:69:41:44:d8:03:cc:a7:77:18:06:f6:7f:69:a2:b8:58:
84:0e:9b:c2:ab:64:6c:2b:f3:bf:20:39:55:6d:f6:8a:00:14:
93:e0:32:27:94:31:50:24:0c:70:d6:33:99:bf:08:e8:0b:e0:
09:5a:b2:32:01:27:94:8b:ed:5f:5e:d6:b4:98:d4:2c:76:56:
8f:51:03:73:50:2c:f2:43:9c:21:e0:00:e5:ca:c7:41:59:29:
cd:d9:c0:54:d4:e7:38:48:2b:67:e1:2f:cf:b6:eb:85:d0:77:
ee:91:9d:a3:79:b9:0a:24:77:13:dc:ef:89:90:37:c5:ce:bb:
41:bc:2b:e9:58:8d:87:39:ca:f9:c6:1b:ba:04:cd:17:0e:4d:
f9:4a:dd:f6:09:a1:6c:af:6e:b3:93:4f:8c:42:f2:1d:8f:b8:
48:fd:3b:cc:ed:4b:2e:0e:c0:ab:50:67:05:c1:30:be:cf:8a:
3c:bb:b8:11:fa:91:34:3c:c9:02:c0:77:6b:8b:4a:19:46:20:
b6:c1:78:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:03 2025 by rpki-client