Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.mft
File: 8MFXiVlhvE-EwCh7KZu-H4ql9ho.mft (raw, json)
Hash identifier: dVkn1M8qlVYbGpOlxeWcaVFN8tSAtdLoacUUf4DOyJk=
Subject key identifier: D7:BA:B4:8E:88:9C:B9:27:08:5C:CE:73:6C:DC:4D:E3:A3:14:DB:FD
Authority key identifier: F0:C1:57:89:59:61:BC:4F:84:C0:28:7B:29:9B:BE:1F:8A:A5:F6:1A
Certificate issuer: /CN=f0c157895961bc4f84c0287b299bbe1f8aa5f61a
Certificate serial: 0198D47263072EB249D72EE09D36751F1610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MFXiVlhvE-EwCh7KZu-H4ql9ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.mft
Manifest number: 074F
Signing time: Sat 23 Aug 2025 01:02:02 +0000
Manifest this update: Sat 23 Aug 2025 01:02:02 +0000
Manifest next update: Sun 24 Aug 2025 01:02:02 +0000
Files and hashes: 1: 8MFXiVlhvE-EwCh7KZu-H4ql9ho.crl (hash: ca8txqvNcMrGf4mowGcaDVbON1CZQ/obQ8SxidacBsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MFXiVlhvE-EwCh7KZu-H4ql9ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:63:07:2e:b2:49:d7:2e:e0:9d:36:75:1f:16:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c157895961bc4f84c0287b299bbe1f8aa5f61a
Validity
Not Before: Aug 23 01:02:02 2025 GMT
Not After : Aug 24 01:02:02 2025 GMT
Subject: CN=d7bab48e889cb927085cce736cdc4de3a314dbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7a:fe:33:6f:ec:10:f5:d0:6b:f4:f8:60:e5:
53:47:86:e0:24:60:d8:06:f5:95:25:b1:87:57:5c:
2c:9d:51:28:15:48:4f:2f:5f:0b:84:1a:f0:e5:d4:
07:f0:52:29:93:ef:96:4a:3e:55:21:11:91:55:eb:
7b:c2:5c:2e:f4:73:7f:65:b4:88:b8:75:39:8e:69:
ed:b7:fc:2f:8e:89:20:a7:6d:0d:18:26:50:91:a4:
64:93:6a:98:89:65:f9:1b:00:65:84:16:48:ae:dd:
fc:76:23:09:f8:2e:c6:6c:1d:51:b0:b2:83:34:39:
7f:b1:09:c9:4b:c4:a5:5d:b5:20:c1:fc:65:4c:97:
0d:f3:a0:df:01:21:f3:cc:5e:86:b1:54:75:1f:1e:
a4:49:86:df:9e:ce:c1:70:77:b2:09:fd:e9:bf:c6:
a0:74:67:eb:59:98:ec:73:d9:93:3f:f6:55:dc:8d:
85:78:a6:6a:3d:ab:8a:ad:b9:77:fd:76:f1:6e:0a:
04:c6:3c:b3:22:f3:53:2d:6e:e7:98:4c:aa:37:65:
51:3e:ab:9f:69:d9:bc:ad:15:03:57:4d:33:15:ad:
42:28:6f:69:06:f1:2d:b0:93:d6:f2:06:cd:0d:86:
f5:09:72:3c:67:cb:e8:52:ad:29:89:c7:61:3f:1a:
49:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BA:B4:8E:88:9C:B9:27:08:5C:CE:73:6C:DC:4D:E3:A3:14:DB:FD
X509v3 Authority Key Identifier:
keyid:F0:C1:57:89:59:61:BC:4F:84:C0:28:7B:29:9B:BE:1F:8A:A5:F6:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MFXiVlhvE-EwCh7KZu-H4ql9ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08ec9d-81c2-4026-8153-d3a69c220a3b/1/8MFXiVlhvE-EwCh7KZu-H4ql9ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:03:7a:67:65:ae:67:01:dc:3d:0b:c1:d0:ce:20:ef:7b:1b:
5f:dd:71:b8:ba:c6:b7:c5:a9:af:b3:c1:c4:bd:f6:0d:e5:7b:
72:fd:2f:13:9f:b1:72:04:2c:c9:c7:19:24:17:1e:27:80:b1:
f6:22:9d:52:4b:f3:b8:f5:30:24:cc:7a:a0:b0:b1:03:eb:43:
19:7f:43:92:88:39:f7:eb:7e:9a:e4:13:b2:46:de:df:a0:70:
97:b9:8e:0a:99:c8:9d:90:cf:15:72:ce:26:54:9d:76:06:4b:
77:5d:a3:06:45:74:38:2a:43:1c:f7:37:71:0e:5b:29:e2:6b:
20:03:9a:db:7a:92:0a:c9:57:99:52:d9:de:65:24:91:4c:df:
3a:03:99:a9:12:38:70:81:d3:6a:2a:6d:5b:94:0d:9d:30:75:
c0:7d:96:4d:15:0f:35:60:d6:7c:3e:bc:fa:e9:c2:a0:f2:c4:
74:52:eb:1e:83:3b:f7:7e:60:b8:f7:33:29:e4:04:11:a7:e7:
21:43:17:83:5e:2e:4f:3e:e6:d9:aa:97:71:f1:49:9a:d0:cb:
6e:93:48:55:7f:4b:6d:5d:f8:68:ab:a1:b4:87:66:5c:52:f9:
46:d4:c7:8f:46:b0:30:f4:ea:00:58:67:2b:d0:8f:50:6d:13:
a6:d3:f0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:51 2025 by rpki-client