Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
File: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft (raw, json)
Hash identifier: ifULFGy7NgFB6hv7QYDmzBSp/HtyS+/imMNn+lrUEGw=
Subject key identifier: 64:7C:55:9D:0B:21:22:FF:67:9E:5F:B0:A8:A0:11:2A:63:80:FE:DF
Authority key identifier: D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
Certificate issuer: /CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Certificate serial: 0198D65F6CE3894E6AA7854CE2F28022A951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
Manifest number: 1305
Signing time: Sat 23 Aug 2025 10:00:34 +0000
Manifest this update: Sat 23 Aug 2025 10:00:34 +0000
Manifest next update: Sun 24 Aug 2025 10:00:34 +0000
Files and hashes: 1: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl (hash: Ujeo81KVPSVrKiFGYa9MtlHnd+WIStPh50gJesEuaD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:6c:e3:89:4e:6a:a7:85:4c:e2:f2:80:22:a9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Validity
Not Before: Aug 23 10:00:34 2025 GMT
Not After : Aug 24 10:00:34 2025 GMT
Subject: CN=647c559d0b2122ff679e5fb0a8a0112a6380fedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3e:4f:da:b0:3c:f8:41:5a:15:4a:db:d1:50:
46:5b:32:22:27:ec:fa:c9:9a:a9:0a:ba:dd:9a:f8:
c5:cb:55:98:bc:66:c8:0a:50:b4:c4:50:10:d0:de:
9a:2d:ac:d6:8a:32:fb:ca:ea:82:8a:af:8c:7b:e3:
b6:b1:ee:95:00:5e:e2:52:68:db:67:d3:de:65:2a:
3d:e9:d0:cf:5f:e9:91:96:57:55:99:43:20:82:99:
4f:42:c6:1a:1d:8f:f6:b7:09:5c:63:ff:0a:3f:80:
0f:6d:d5:bc:5a:ce:59:55:61:d5:34:b4:4a:61:88:
50:5b:bc:8c:e7:e6:52:cf:b6:0e:69:37:89:41:d9:
02:ef:55:01:28:5f:21:9f:4b:fe:b6:89:a5:5c:16:
97:a2:97:59:93:96:86:9c:ad:c9:a0:dd:9c:7b:55:
c8:1c:48:ba:ad:1e:f5:4d:51:f8:a9:18:a5:30:0b:
04:89:f3:9e:16:1f:0d:cc:66:b8:0b:f4:e6:77:36:
7b:8b:47:ea:20:c3:3e:53:34:3a:72:0e:eb:f5:72:
fd:46:9c:90:fa:94:f7:29:d3:6e:29:4c:6d:2c:26:
19:17:e1:f1:9f:ce:fb:bf:a6:cb:25:29:fb:30:67:
f0:4f:6c:49:32:4b:36:00:63:f2:26:35:d4:60:32:
71:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7C:55:9D:0B:21:22:FF:67:9E:5F:B0:A8:A0:11:2A:63:80:FE:DF
X509v3 Authority Key Identifier:
keyid:D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:8f:63:3d:1a:d0:68:38:08:13:f9:69:85:5f:1e:12:f6:e5:
c4:00:59:ec:bc:3c:f9:37:d0:30:4c:7b:f6:26:5c:b1:2f:63:
7d:7f:85:bd:ee:38:33:f5:6f:22:13:db:d4:ec:61:6c:a6:87:
9b:38:4a:09:be:c4:24:43:23:bd:6f:21:87:2f:ab:6a:c3:2c:
ec:db:ad:68:ff:45:8e:1b:69:7d:9a:63:17:80:3f:cb:7c:c2:
52:7c:d6:41:4d:6b:f6:fd:b7:0f:e0:66:28:88:a4:78:42:5c:
37:68:4a:c5:75:2c:eb:d2:77:5f:99:0d:7c:d7:ab:e2:71:13:
4e:75:a5:f9:77:95:28:8f:40:db:9c:de:86:99:19:0e:78:00:
69:8c:c4:c0:cc:54:ab:ed:0a:4f:46:21:9d:39:7c:64:65:88:
79:de:3c:20:23:7b:d1:c0:27:da:bd:cd:b8:7e:be:0f:28:e9:
e4:c7:aa:37:8a:68:84:90:28:91:b0:44:dd:6f:dd:f9:e6:5f:
93:ce:29:3a:94:6f:74:6b:8f:a6:f8:e0:3d:6a:a9:06:20:92:
e8:3c:00:d6:90:7b:08:26:71:d0:71:d9:be:91:89:67:c7:a8:
a9:11:d1:5b:c6:fd:87:c1:75:c8:b3:38:23:bf:46:13:38:8f:
65:52:66:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:23:14 2025 by rpki-client