Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json)
Hash identifier: A2QxAqmUTNCF1M6mumEX+q2y+8hIxlQz1M+FLj6qjEI=
Subject key identifier: A9:8C:9F:06:A4:A9:F2:68:D8:F3:A9:26:5E:CF:20:D4:66:34:4B:30
Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Certificate issuer: /CN=f1a0c67ff859f555af8921938887c6085269a402
Certificate serial: 0198D472A181C92CEC86519B2E0285F1B1D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
Manifest number: 1383
Signing time: Sat 23 Aug 2025 01:02:18 +0000
Manifest this update: Sat 23 Aug 2025 01:02:18 +0000
Manifest next update: Sun 24 Aug 2025 01:02:18 +0000
Files and hashes: 1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: x2x+UPbYkPJFJ6V+z+kuLTObBbty4MG29IM1GGoU6Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:a1:81:c9:2c:ec:86:51:9b:2e:02:85:f1:b1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402
Validity
Not Before: Aug 23 01:02:18 2025 GMT
Not After : Aug 24 01:02:18 2025 GMT
Subject: CN=a98c9f06a4a9f268d8f3a9265ecf20d466344b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:07:72:a3:6e:38:0d:bc:e0:43:e4:c1:b9:f3:
d1:2e:fe:b8:3d:a9:8b:bf:df:c7:5f:42:75:0d:eb:
09:2a:13:19:65:e8:1c:1c:8d:91:1e:cf:d8:94:10:
ae:b5:e7:da:f7:38:07:4c:24:41:88:36:d4:95:b5:
6e:3a:a4:49:d8:21:21:2b:69:78:c2:2c:77:90:5d:
8f:cc:a2:ad:33:fa:e9:d5:e0:13:46:b4:f9:6b:09:
b5:87:57:b4:9c:ba:57:d8:b9:29:23:6b:73:69:72:
d2:f5:14:5f:06:d8:4d:a4:29:e2:df:4b:86:bd:6d:
6f:70:14:49:b9:37:9a:92:b4:2e:fa:81:a7:08:49:
c8:9b:75:98:eb:7d:57:3d:46:1e:06:8e:1e:ea:88:
3e:75:2a:7a:7a:da:70:75:f8:14:24:7c:b9:ca:52:
59:75:e2:9d:59:0c:11:7b:16:9e:46:47:5b:c9:7d:
c3:64:71:ed:a7:0b:fc:9c:26:8b:c3:ac:4a:c6:10:
5d:1a:ec:40:90:f7:ce:13:ef:73:72:34:1a:50:f5:
a9:d0:fb:f8:4f:03:72:a3:c5:a8:5c:1a:d2:ad:bc:
5e:aa:68:a7:5c:25:40:ba:aa:d0:20:8f:4f:d2:86:
fc:63:0d:fa:a7:57:52:d2:f6:3c:e2:21:01:e1:fe:
5e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8C:9F:06:A4:A9:F2:68:D8:F3:A9:26:5E:CF:20:D4:66:34:4B:30
X509v3 Authority Key Identifier:
keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4c:65:11:4d:e7:c4:29:fe:3e:cf:bf:e5:16:a8:6b:13:3b:
63:a4:d9:38:24:f6:e3:b5:52:fc:af:8d:97:1a:67:cc:fb:46:
4a:6e:23:53:c3:80:e1:9a:5f:9f:b3:f7:42:5d:3d:5c:eb:20:
a8:5e:c1:da:6a:02:1a:2e:a9:1f:39:5d:24:71:15:b8:d9:37:
7e:40:68:eb:c7:a6:33:ee:54:3b:c2:83:b9:df:36:8c:de:25:
11:b5:33:f9:ba:29:11:41:40:a6:62:08:0d:f3:aa:3b:71:6e:
76:d5:c4:3b:c5:7e:65:26:15:c9:aa:53:f8:3f:d7:35:7b:39:
85:cf:dc:42:96:54:df:5d:50:cf:da:7c:36:1b:4f:2c:61:f4:
0f:8f:01:4d:86:8d:ee:22:c1:00:58:44:b0:67:d8:45:f9:86:
03:da:8f:43:f0:02:9c:a3:46:8f:40:7f:f0:b8:fb:dd:1d:31:
1e:64:59:32:74:e5:05:9d:cb:a8:61:09:62:d2:cf:e7:15:fc:
e4:c5:50:ec:a2:46:2e:cb:3f:1b:03:0e:3a:b0:4d:9b:e9:b4:
ae:ba:3f:ce:69:8d:03:30:f0:ab:b6:f4:36:d8:4d:28:e5:ef:
c9:76:12:b9:3a:fa:75:b0:a3:c8:f1:2a:01:db:4e:a0:8a:ab:
94:d6:71:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:07 2025 by rpki-client