
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
File: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft (raw, json)
Hash identifier: UezH/JCIcQb1168fc25VX8IgfwT7uzj8X1vUKY9lpY4=
Subject key identifier: 2C:DB:27:2F:90:B4:4F:58:99:88:E5:62:CD:26:5D:56:BB:BF:87:B7
Authority key identifier: D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
Certificate issuer: /CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Certificate serial: 0199FBEBC65BEAEA03EF7C035F3E2AF6741F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
Manifest number: 139D
Signing time: Sun 19 Oct 2025 10:02:36 +0000
Manifest this update: Sun 19 Oct 2025 10:02:36 +0000
Manifest next update: Mon 20 Oct 2025 10:02:36 +0000
Files and hashes: 1: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl (hash: +/IdP+iFZWTR1zO/2hhP1jUohWARBtGRb86VH4cMRjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c6:5b:ea:ea:03:ef:7c:03:5f:3e:2a:f6:74:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Validity
Not Before: Oct 19 10:02:36 2025 GMT
Not After : Oct 20 10:02:36 2025 GMT
Subject: CN=2cdb272f90b44f589988e562cd265d56bbbf87b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0d:e9:25:43:7c:72:22:8d:91:86:f4:5b:89:
eb:e7:e0:6b:b8:a6:fb:ca:c4:65:68:37:91:77:a1:
97:3b:cf:03:da:7f:4b:40:f1:1e:22:79:d6:6e:f8:
ab:b1:74:cd:11:fb:bc:03:f1:7b:b8:eb:88:6c:da:
cd:ce:fd:be:17:31:bf:26:3d:fa:9a:1a:36:e2:c5:
12:4f:4a:b8:49:8f:e5:8d:52:f9:c3:c8:ea:4f:0c:
56:aa:63:f0:f9:9a:c1:50:81:1f:62:32:ed:dd:53:
d6:84:e7:95:84:f7:2b:20:dd:c4:35:83:07:82:c8:
dd:d9:3a:86:b7:21:82:b7:1a:a9:87:16:d9:ae:02:
67:8c:4f:72:3f:38:06:6d:dc:da:45:00:2e:e4:c3:
8a:15:2e:2e:d5:07:16:af:d5:9e:97:a7:cd:12:11:
a5:63:6b:69:3d:90:3f:43:e8:a6:a2:6c:10:17:67:
ae:c9:b6:e9:c7:18:1b:98:f1:c7:00:de:ce:57:d3:
e2:05:0c:ca:f6:ef:6c:f6:e7:b6:6b:90:c3:d8:7d:
be:c9:f1:71:7a:5d:dc:2b:a1:61:15:74:eb:9a:a5:
31:cb:5a:61:f7:5e:9f:4d:61:ab:ca:ac:60:9f:eb:
57:45:e3:a9:e7:12:d3:fc:ad:ef:6f:31:1b:fb:fe:
6b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DB:27:2F:90:B4:4F:58:99:88:E5:62:CD:26:5D:56:BB:BF:87:B7
X509v3 Authority Key Identifier:
keyid:D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b4:16:20:90:03:a2:35:d5:a2:eb:b7:14:e0:01:6a:4e:8d:
d0:37:ff:22:d3:e9:5e:0e:e1:35:9c:12:ac:00:9f:10:8d:d7:
79:eb:58:17:45:d7:6f:cd:d5:42:0d:9b:8b:ff:d5:89:cc:c3:
33:ca:5a:37:e0:3b:d5:ff:8e:78:be:92:dd:c0:68:a5:db:a8:
c5:c0:85:ae:44:3b:68:d5:4c:60:06:d6:41:d2:dc:1d:46:6d:
39:c4:cc:9d:46:9f:35:57:bd:ee:4c:c7:43:95:8f:34:c8:49:
f4:64:10:b1:63:c8:76:a1:93:60:d3:de:fc:24:94:cb:8b:3b:
88:5a:06:f4:f9:ef:f4:f3:09:8d:eb:7b:21:78:19:a1:df:cc:
79:3f:32:8d:2c:2c:90:40:bc:e7:02:f6:86:2a:59:d3:1c:30:
b4:ca:7a:c3:f3:3f:e6:fa:29:07:61:46:90:c4:a0:36:06:a4:
ca:0d:b4:23:38:c3:c1:3e:9c:3c:dc:a9:f6:df:48:8c:03:f5:
be:0b:cb:68:b5:15:6c:8b:7a:22:7a:25:b8:a5:b9:6c:d0:39:
4c:38:f4:f8:ab:f8:97:08:c9:a0:43:81:48:42:a2:63:f8:5e:
7b:70:80:53:d0:d6:1e:fb:89:02:8f:f3:3b:69:e9:7f:ef:a3:
d2:b1:72:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:00 2025 by rpki-client