Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
File: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft (raw, json)
Hash identifier: sH9Vmvw9bJKnFwgOHftI/35qkjNnFjkGltZs1lS+Liw=
Subject key identifier: 3B:9A:6A:76:DB:64:9D:2B:1F:28:4D:9D:46:93:31:77:45:C5:4D:25
Authority key identifier: F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
Certificate issuer: /CN=f0a95b78b0576501278efd7e020269ba1f06d386
Certificate serial: 0198D65F05D9CD678968E044BC939A543F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
Manifest number: 0C20
Signing time: Sat 23 Aug 2025 10:00:08 +0000
Manifest this update: Sat 23 Aug 2025 10:00:08 +0000
Manifest next update: Sun 24 Aug 2025 10:00:08 +0000
Files and hashes: 1: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl (hash: NaTpi5Y5EgLCRNWAN6e7Vwu8Vb9RUINtnHqlLHHn+nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:05:d9:cd:67:89:68:e0:44:bc:93:9a:54:3f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a95b78b0576501278efd7e020269ba1f06d386
Validity
Not Before: Aug 23 10:00:08 2025 GMT
Not After : Aug 24 10:00:08 2025 GMT
Subject: CN=3b9a6a76db649d2b1f284d9d4693317745c54d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c9:81:50:50:e5:c1:36:d3:e7:74:d3:e7:86:
e8:74:28:4d:0c:f7:e8:83:0b:8a:b3:5f:c4:89:91:
37:39:6a:85:b3:ec:96:2e:e2:2a:4c:6d:05:02:39:
1f:24:5d:04:21:0b:af:50:99:81:65:a2:dc:a5:e2:
9d:c2:16:ab:c8:2a:4a:23:fb:88:db:3c:5e:7c:40:
e2:ab:ce:6b:65:d4:9d:29:1c:c2:c9:06:72:25:91:
14:7f:10:d1:04:61:58:42:32:aa:29:dc:b4:a2:20:
81:bb:ab:ca:74:b0:7a:32:50:24:d0:79:b3:ad:48:
1d:a1:72:dc:9e:18:24:51:92:69:08:66:36:08:68:
65:38:6d:73:ef:14:53:d7:c4:59:f0:82:cd:02:d9:
6b:f4:d8:b0:b6:e6:88:6b:90:60:e0:3b:ad:01:b8:
22:4f:3a:e8:98:38:ce:da:84:d4:bf:62:5a:2d:d8:
f3:54:92:65:06:06:63:48:c9:84:c0:88:8d:f2:67:
64:e9:48:c8:6f:b0:73:5c:6a:d9:31:06:dc:e1:6f:
52:7d:cd:a1:c4:67:31:eb:b6:ae:3a:c4:99:72:40:
b3:fc:87:45:77:63:9f:0a:97:52:e0:a3:e8:fd:ad:
f2:3e:7d:c3:6d:d2:11:11:3f:b6:33:c5:95:bd:17:
5b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9A:6A:76:DB:64:9D:2B:1F:28:4D:9D:46:93:31:77:45:C5:4D:25
X509v3 Authority Key Identifier:
keyid:F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:36:b3:64:15:19:ef:86:96:5b:c8:86:cc:b2:5d:aa:7a:89:
a3:53:7a:c4:96:5f:15:cb:53:9d:e0:8f:63:72:1d:f4:05:b2:
17:e9:5d:5a:ed:7b:60:38:55:a3:35:ea:4c:49:52:27:6b:8a:
97:5a:71:08:59:ce:c3:91:78:50:f0:44:b6:42:37:53:24:1d:
63:81:35:72:d0:67:00:b8:e4:34:20:84:4a:10:0e:8a:a3:b0:
78:91:e2:be:87:6c:5d:81:d6:0f:33:7d:84:6f:98:b8:88:62:
76:ac:fd:ff:68:0c:f3:5d:b9:37:c3:28:dd:a5:e4:f7:02:57:
93:59:24:0a:5f:72:31:f1:18:d3:5e:fc:91:b4:43:69:67:d5:
f9:e7:0a:04:f9:c5:a7:f1:88:88:ae:2b:97:a1:fd:eb:4e:14:
00:3e:02:6f:c2:39:a8:f5:2e:43:1c:c1:9e:31:10:d2:2b:b1:
b7:95:92:6a:ab:b5:91:97:ef:47:85:b0:fa:03:b9:e4:6b:16:
f7:da:99:32:92:e8:79:19:ac:0f:e9:55:aa:6e:a9:35:d6:75:
bd:1f:69:bc:22:bc:8b:c3:93:dc:b9:63:16:12:00:f7:37:87:
c9:70:ed:c8:9f:aa:e6:26:67:4f:0f:70:94:96:51:eb:5a:bb:
8a:43:99:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:25:31 2025 by rpki-client