Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
File: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft (raw, json)
Hash identifier: PQRYguWzfVSeVm6RPXZOYBgbwbpMqgKGp59dV5WzI+Q=
Subject key identifier: D3:AE:35:23:2D:4D:2F:50:0E:1C:D6:CA:B2:C9:86:4A:A5:A0:AD:64
Authority key identifier: F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
Certificate issuer: /CN=f0a95b78b0576501278efd7e020269ba1f06d386
Certificate serial: 019A01B65C7A5EFC780BCFD32B2FB06D1096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
Manifest number: 0CBB
Signing time: Mon 20 Oct 2025 13:01:59 +0000
Manifest this update: Mon 20 Oct 2025 13:01:59 +0000
Manifest next update: Tue 21 Oct 2025 13:01:59 +0000
Files and hashes: 1: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl (hash: 5nyyVolq7qJuaUy13GsbcsEDHAYdo4JCAQ3scRgfMB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:5c:7a:5e:fc:78:0b:cf:d3:2b:2f:b0:6d:10:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a95b78b0576501278efd7e020269ba1f06d386
Validity
Not Before: Oct 20 13:01:59 2025 GMT
Not After : Oct 21 13:01:59 2025 GMT
Subject: CN=d3ae35232d4d2f500e1cd6cab2c9864aa5a0ad64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1b:7a:46:73:46:30:83:72:17:9f:84:14:65:
33:ca:04:3c:f0:76:31:00:d3:dd:8a:dd:e9:56:fe:
73:f3:64:52:fc:2d:29:25:bb:4b:f0:80:97:d5:af:
b3:5d:ca:bd:1a:53:6a:a8:d1:7b:13:73:10:e2:c3:
6f:f1:68:de:bd:21:67:6b:07:8a:ea:6e:61:92:d7:
c5:4c:fa:ae:27:7a:58:ca:e7:eb:92:0e:79:ea:b7:
07:0d:24:20:77:f1:89:e5:d8:13:49:f0:d9:f5:3c:
7a:6a:ff:6f:bd:7d:e1:22:a2:b7:39:19:4a:9b:72:
15:19:b0:5d:2b:1c:b0:9b:20:02:0c:c7:34:b7:70:
98:95:69:08:6f:66:39:37:1c:73:a3:8b:09:b5:f2:
91:20:97:70:63:11:49:b2:d3:23:6b:6b:e8:a3:24:
f0:f7:f3:a8:c0:0f:87:2a:cb:04:ff:19:61:91:ad:
e3:0a:c4:c1:99:01:bb:80:33:44:73:cf:73:15:f1:
97:4d:ab:89:ca:8b:d1:5d:4f:9b:ac:82:a8:b2:48:
e9:51:0f:db:94:1c:e9:8d:8e:68:18:1a:1b:2a:0f:
4b:4c:68:98:f1:11:e2:c4:96:00:ef:55:5a:7c:09:
83:d6:75:98:b0:0a:87:d6:32:3e:55:e9:6e:67:13:
0e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AE:35:23:2D:4D:2F:50:0E:1C:D6:CA:B2:C9:86:4A:A5:A0:AD:64
X509v3 Authority Key Identifier:
keyid:F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4d:e3:5b:3f:e6:f5:5b:1b:b5:9e:53:31:3d:de:98:a2:5b:
38:e7:12:ba:9d:da:41:8f:21:cb:89:d4:72:0c:f1:5f:3c:e1:
e4:ef:9a:a1:ed:b7:1d:5e:ca:22:f8:2f:65:c6:d7:56:0f:28:
2d:b5:9b:a2:90:24:4c:b3:d0:b2:93:6c:17:dc:be:7b:f0:fd:
7d:9d:fd:99:1c:56:c2:1e:78:b7:7a:22:f5:ab:4e:4c:7b:cb:
b3:ec:70:b3:5d:9f:10:7e:6e:ea:99:8a:e9:39:bc:7b:b7:20:
71:7c:a1:64:9b:b1:2e:62:91:ae:14:2b:17:bf:da:c8:eb:ac:
66:8a:84:82:15:e8:fc:ae:74:a2:50:d1:b3:40:88:9c:81:bf:
b8:9d:3e:2a:ab:89:96:93:9e:ba:58:1e:e5:6c:89:7f:4b:b0:
81:85:f8:44:7c:aa:13:11:c5:9f:27:32:a8:b3:5d:2f:28:84:
97:99:25:93:21:31:97:fb:d4:e9:f0:dd:9e:30:cf:df:03:a6:
a3:92:49:57:eb:3f:0e:b6:72:0b:12:70:55:ea:4f:4a:d1:de:
36:ad:c4:76:ff:51:38:48:c3:03:2b:ac:29:92:5f:93:eb:ac:
37:fd:7b:4c:de:53:c7:1d:1d:63:70:72:5b:c2:bc:1a:7c:a7:
a8:51:31:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:53:25 2025 by rpki-client