Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
File: mx8SO1ukvBt3k7np-htD2sSaZgo.mft (raw, json)
Hash identifier: +zoofYRppaEUulKLfb3bPXKzS5SR1jc5fH5RDLxbbCE=
Subject key identifier: 3B:A3:D4:14:D4:43:A7:CF:80:5D:FE:C8:C3:1E:7F:A3:83:B4:4B:CC
Authority key identifier: 9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
Certificate issuer: /CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Certificate serial: 0198D515702F3308B2E3A612BDAFF6E05E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
Manifest number: 0F73
Signing time: Sat 23 Aug 2025 04:00:08 +0000
Manifest this update: Sat 23 Aug 2025 04:00:08 +0000
Manifest next update: Sun 24 Aug 2025 04:00:08 +0000
Files and hashes: 1: mx8SO1ukvBt3k7np-htD2sSaZgo.crl (hash: 7Eye1irvTMlQttc29o7KRz0mq3MF5r7xOXIKnCOSCA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:70:2f:33:08:b2:e3:a6:12:bd:af:f6:e0:5e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Validity
Not Before: Aug 23 04:00:08 2025 GMT
Not After : Aug 24 04:00:08 2025 GMT
Subject: CN=3ba3d414d443a7cf805dfec8c31e7fa383b44bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:4e:dc:5f:6d:6c:d6:b8:0a:f5:07:90:f3:
ca:8d:f3:87:31:b3:55:83:8d:38:d7:b8:5b:99:64:
d9:cf:40:83:d8:85:6f:99:52:f8:2d:09:b2:70:fc:
0f:01:59:94:76:71:77:7c:96:99:e0:65:de:37:72:
bb:22:75:6c:d7:3b:20:d9:be:a7:bb:59:50:12:55:
df:23:a7:d0:f2:12:71:f5:6f:5f:f1:a9:7f:74:ee:
b5:0c:b3:ef:ac:1f:ba:6f:45:7c:4e:54:4d:8c:27:
03:3d:be:af:9f:57:c3:c6:48:25:6d:e9:a5:e2:91:
8f:0d:70:49:ac:af:b4:17:de:c4:1f:a1:6f:e8:d6:
22:04:6a:28:f6:8e:1e:b1:2a:a5:7c:98:20:fd:23:
cd:6d:7e:44:b3:e9:04:d7:a2:db:27:e1:4f:7f:95:
f1:01:36:e2:8b:97:ef:dd:34:57:a5:af:90:c7:0b:
05:ff:de:5d:8f:05:ea:c2:44:0f:76:4f:20:13:f7:
54:4d:19:36:81:d3:50:d5:5f:32:db:45:e1:fc:d8:
c6:9f:40:a8:2a:33:fd:d2:9b:3d:b9:e7:1b:61:d3:
2f:af:4e:e7:ef:0a:bb:8d:12:0e:db:6f:c6:dd:85:
1e:20:81:25:6c:d5:9d:19:62:b0:d2:0f:fc:de:0b:
da:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A3:D4:14:D4:43:A7:CF:80:5D:FE:C8:C3:1E:7F:A3:83:B4:4B:CC
X509v3 Authority Key Identifier:
keyid:9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5b:c9:d4:d9:65:26:27:a0:50:03:7a:63:2f:ac:05:36:b7:
2c:ae:13:16:94:f5:5b:a0:0a:1a:21:83:83:8b:a2:7f:4f:46:
dd:41:72:ee:4f:6d:dd:a4:79:ce:bb:86:4f:58:7d:73:d5:e3:
f6:dc:51:bd:31:29:d4:4c:69:25:9f:23:aa:70:49:67:9c:c8:
af:4e:49:35:c8:4e:c5:f3:85:7e:5a:bb:a0:88:be:e6:66:44:
b5:59:4c:10:5e:01:df:56:72:5a:04:c5:4d:f6:b8:1e:79:19:
82:8c:10:b9:34:1e:a2:89:ba:de:69:a1:b5:53:fc:06:1c:82:
04:1d:59:69:0e:b0:8b:96:11:2c:42:fd:03:7c:f1:c9:ae:41:
67:61:2d:54:31:15:c6:8d:3c:f0:af:02:78:9b:3f:83:00:d5:
e5:9e:d1:ec:e3:27:14:58:53:4b:11:d4:0c:f6:2b:a2:d7:e7:
d6:c0:59:1f:c7:de:16:97:66:ff:52:1a:e8:ba:8e:0a:3b:da:
21:be:60:5b:4e:09:af:c0:21:a9:c4:a1:a9:b7:2e:f5:31:48:
0e:74:7e:6a:d3:a9:1f:13:01:56:69:5b:88:79:fe:cd:91:d2:
2c:4c:4a:4f:87:8c:5f:81:a7:73:72:d9:64:84:05:63:5a:c5:
b7:9d:76:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:23 2025 by rpki-client