Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
File: 8PsSySmy8FuZ1Jf68VUdvF2AflE.mft (raw, json)
Hash identifier: POCv/cxxwuSR7MT0kkEKXJLyXQp0IxzLG9+5d/5FG0Y=
Subject key identifier: B8:0D:DA:67:21:C1:12:AC:55:44:65:BE:B9:53:C8:23:E1:B8:EB:1D
Authority key identifier: F0:FB:12:C9:29:B2:F0:5B:99:D4:97:FA:F1:55:1D:BC:5D:80:7E:51
Certificate issuer: /CN=f0fb12c929b2f05b99d497faf1551dbc5d807e51
Certificate serial: 0199FBEBA0546E29D75E562FCC1EAB046C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
Manifest number: 0C76
Signing time: Sun 19 Oct 2025 10:02:27 +0000
Manifest this update: Sun 19 Oct 2025 10:02:27 +0000
Manifest next update: Mon 20 Oct 2025 10:02:27 +0000
Files and hashes: 1: 8PsSySmy8FuZ1Jf68VUdvF2AflE.crl (hash: BqRzz5dkVGq81tc2bLP1WcuPxUb4ITVa55nbbc/mph8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a0:54:6e:29:d7:5e:56:2f:cc:1e:ab:04:6c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fb12c929b2f05b99d497faf1551dbc5d807e51
Validity
Not Before: Oct 19 10:02:27 2025 GMT
Not After : Oct 20 10:02:27 2025 GMT
Subject: CN=b80dda6721c112ac554465beb953c823e1b8eb1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:ec:68:9c:cc:51:63:12:5c:85:0e:72:b3:
71:60:26:7b:c6:2e:79:b0:a3:c7:9b:ab:a9:de:83:
43:52:b2:65:b1:1d:ec:9a:c9:ab:27:ee:51:b0:65:
0b:f4:2a:ea:9c:b4:5c:b1:e1:de:af:1a:3b:09:80:
9f:97:0e:4e:bc:d6:86:5b:a7:90:1a:6e:96:1e:c4:
4d:85:f1:e5:21:2f:a5:f4:57:ee:0c:0f:7d:80:76:
82:77:73:39:08:9f:d6:15:c7:7a:7d:5e:7e:ce:60:
64:e1:43:14:bd:b2:d5:31:df:91:05:e6:5a:4a:5a:
c2:3b:fe:1b:02:94:77:89:57:10:c3:78:40:53:7f:
bd:ab:80:92:3f:f3:16:3b:9b:22:88:16:c3:3e:6d:
52:4c:fd:6d:c2:a8:aa:c8:03:6e:a5:a8:61:3c:5b:
12:b2:e9:46:1b:20:b0:9d:0e:d8:b2:4e:9e:8a:84:
28:ac:51:b8:01:d7:7a:e7:0e:6b:e6:f4:3c:cd:28:
d3:0c:4a:65:85:9d:7b:c9:8b:08:22:a9:62:fc:f1:
2a:0c:ef:14:8b:9b:b9:c3:0c:7d:2f:0d:93:e8:d4:
96:56:fe:dd:bd:78:55:a1:9a:b6:c2:73:88:35:c1:
78:a2:7d:10:df:95:85:f3:cd:02:d3:80:cc:a7:96:
d9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0D:DA:67:21:C1:12:AC:55:44:65:BE:B9:53:C8:23:E1:B8:EB:1D
X509v3 Authority Key Identifier:
keyid:F0:FB:12:C9:29:B2:F0:5B:99:D4:97:FA:F1:55:1D:BC:5D:80:7E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d8:c0:7e:4b:ab:8d:db:63:b2:35:74:74:c9:b6:be:03:5e:
13:a8:09:3d:43:73:94:9d:02:ee:5a:5f:cf:25:16:60:b8:18:
ee:df:75:b0:f0:cd:34:6c:a3:0c:be:e9:83:77:5d:02:74:76:
3a:99:ac:ce:9a:93:32:23:06:66:17:a5:88:50:74:00:dd:57:
d5:3a:4f:39:12:72:ab:b5:30:70:c1:81:50:53:c6:18:c2:cb:
02:2e:d8:c0:07:cb:45:fc:18:b2:16:65:ea:53:39:1c:87:f4:
95:55:28:10:cc:7b:5d:57:a6:1f:bf:fd:09:7d:f9:b8:e2:99:
1b:bb:bc:ad:f2:ba:58:ce:f0:05:52:1f:47:0e:0a:4c:a1:90:
23:74:e6:ad:15:eb:f7:21:c0:40:16:59:d8:0e:5d:af:d5:f0:
1e:9a:fc:ae:0f:8a:65:a0:d8:63:0c:cd:cd:14:a9:bc:1f:0f:
f5:4f:19:5a:08:ce:36:ea:f2:72:1f:2d:94:a9:13:19:17:f7:
f0:66:4f:2f:e8:29:f1:3c:f2:74:d6:e5:4d:22:8a:03:b5:e8:
3d:5f:17:94:b1:f0:1f:04:36:09:2d:a4:4b:20:19:2a:b7:56:
25:54:e2:35:3e:97:d1:96:07:9c:fd:0e:2e:b0:ff:2b:3a:70:
d7:2c:53:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:13 2025 by rpki-client