Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
File: mx8SO1ukvBt3k7np-htD2sSaZgo.mft (raw, json)
Hash identifier: twVZB6r06bC4sqeGc76yUUAITg9MeGCri7ccevqLokw=
Subject key identifier: BE:76:62:38:3D:DB:D5:F7:B8:49:B8:EF:11:D8:BB:F8:97:5D:28:57
Authority key identifier: 9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
Certificate issuer: /CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Certificate serial: 0197B745A6B930183E7659C3C3DE8A1768C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
Manifest number: 0EDF
Signing time: Sat 28 Jun 2025 16:01:24 +0000
Manifest this update: Sat 28 Jun 2025 16:01:24 +0000
Manifest next update: Sun 29 Jun 2025 16:01:24 +0000
Files and hashes: 1: mx8SO1ukvBt3k7np-htD2sSaZgo.crl (hash: EHTDTB3RlXXmFm4qdaYF0WiZZVJvTUig1EcirNELQN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a6:b9:30:18:3e:76:59:c3:c3:de:8a:17:68:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Validity
Not Before: Jun 28 16:01:24 2025 GMT
Not After : Jun 29 16:01:24 2025 GMT
Subject: CN=be7662383ddbd5f7b849b8ef11d8bbf8975d2857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:04:13:52:84:ab:6b:68:6f:35:64:9f:da:bb:
bd:8e:65:df:c8:6f:9a:1e:58:d5:c3:8b:76:db:54:
8c:49:fd:18:06:6f:7e:91:a3:b7:f9:9a:1a:98:e7:
0b:60:43:16:e5:c6:85:21:91:11:fc:8c:de:81:5d:
62:ea:37:a2:d0:a8:fc:3a:14:76:b1:d3:b9:f6:ae:
36:74:6a:27:7d:67:f2:1e:66:37:70:f4:7a:a2:36:
97:77:88:5d:75:2f:ca:e2:72:f3:0c:17:40:07:b7:
45:e4:2d:5e:28:90:a6:f0:5e:17:a3:50:d4:7a:07:
13:fd:70:f4:d7:74:77:e4:5c:39:c3:d7:a1:5c:06:
34:1a:ca:1f:3d:2d:c2:41:ff:98:02:1f:88:c9:51:
96:de:e3:fa:d6:cb:78:bf:4a:78:b3:51:42:9d:ad:
3c:48:c4:cb:7a:5c:1d:42:5d:ad:24:01:10:9b:e3:
7d:18:6e:c7:f0:2c:4d:2f:c6:f8:ef:35:98:17:29:
d5:7b:3d:12:b1:fb:de:44:62:01:3f:5c:7b:98:3a:
49:d9:06:4d:a4:7e:3e:09:69:ce:3a:ce:d1:d8:ae:
f3:60:d4:c1:8c:a5:07:e7:50:fd:47:ee:86:19:b7:
1b:c8:5d:44:77:09:08:b0:9e:e7:f5:71:b0:a4:a4:
46:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:76:62:38:3D:DB:D5:F7:B8:49:B8:EF:11:D8:BB:F8:97:5D:28:57
X509v3 Authority Key Identifier:
keyid:9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:49:78:d2:71:3b:86:03:4c:fd:48:5a:09:d1:3c:96:b6:50:
4d:f6:bd:d7:81:37:9a:57:e4:f2:14:a1:7a:de:02:e8:79:72:
59:26:70:c6:15:ae:fb:2f:67:c5:07:dc:6b:cc:6e:f1:43:b9:
90:f3:49:ec:02:29:ee:cd:91:c3:b9:ca:f4:1f:cb:c2:9b:63:
7a:c5:00:d4:4e:c7:ec:95:e2:be:c6:51:54:3a:61:d9:92:7c:
5e:b4:05:83:8f:bf:53:bc:0a:a1:0e:cb:b7:1e:73:d1:34:32:
8b:b3:0f:24:57:a4:17:47:bf:c4:ab:94:b2:9f:4d:b8:e7:02:
c8:09:c6:bf:b6:11:f2:c5:3b:23:40:e8:79:70:17:a6:04:eb:
c8:18:d6:0e:ef:1e:93:ff:9e:4f:92:a9:a9:e0:4b:57:e6:c4:
70:a1:bd:83:71:32:b3:c3:6c:df:0f:75:af:44:f8:86:63:4a:
2b:1c:c8:80:aa:69:98:e7:d1:6d:55:e7:ba:fb:12:32:09:fc:
1d:cf:3b:4e:c6:47:ba:d5:c5:ae:8e:8b:a9:bc:7e:b1:c3:44:
8f:c8:56:69:0b:e4:41:9f:c3:12:f9:33:e6:af:de:0b:bf:ad:
bd:a7:5f:c0:dc:bb:24:ad:a1:2f:78:86:dc:c2:43:55:0e:9f:
b3:af:a0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:38 2025 by rpki-client