Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
File: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft (raw, json)
Hash identifier: DcF+i8Bh+DqelQYzy3KpjOaDdapVBSh+9WR4V4O+7vA=
Subject key identifier: 9F:97:2C:19:0C:62:D7:98:5E:F3:07:79:54:DD:A9:9A:E7:A1:A5:59
Authority key identifier: F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
Certificate issuer: /CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
Certificate serial: 0198D54E4FA27AA4AFC380FA180EE90F9B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
Manifest number: 0D29
Signing time: Sat 23 Aug 2025 05:02:15 +0000
Manifest this update: Sat 23 Aug 2025 05:02:15 +0000
Manifest next update: Sun 24 Aug 2025 05:02:15 +0000
Files and hashes: 1: 8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl (hash: kcgdruBj0RoJ6Tsg44pmidj2Fn1LX+lF0QVr3EKqkg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:4f:a2:7a:a4:af:c3:80:fa:18:0e:e9:0f:9b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1e6f15ef752649f3b1187de683fe83b1ce69f03
Validity
Not Before: Aug 23 05:02:15 2025 GMT
Not After : Aug 24 05:02:15 2025 GMT
Subject: CN=9f972c190c62d7985ef3077954dda99ae7a1a559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:2d:46:a7:3d:da:fc:ea:23:8b:84:d9:15:
9b:be:10:f4:d0:64:e4:74:d0:5a:e8:e5:e4:a6:46:
5f:f6:e5:d1:2f:a3:fb:58:a6:5e:02:4f:b4:7d:c4:
8b:fc:ef:87:d0:36:a1:e8:8b:e6:59:fb:77:19:0a:
d4:ff:25:72:3e:d3:b9:24:fd:e1:d2:b3:ab:c5:f5:
e9:d6:d7:0e:d4:1a:6c:07:7e:ff:46:2f:c8:38:84:
05:77:f0:be:6a:99:2e:5a:eb:f3:83:be:09:de:12:
c5:9f:6e:d3:6a:c6:89:0b:3a:57:f0:50:aa:4b:fe:
27:92:47:19:5f:44:52:14:2d:04:9c:bd:b5:7f:69:
b1:ba:01:d0:20:e3:b9:23:da:de:9a:ed:11:78:bd:
22:36:73:62:c1:02:09:19:cf:b1:24:ff:5f:e5:c3:
26:97:ee:7c:a0:bf:9d:47:59:fe:f0:4d:aa:89:bc:
1f:ef:05:c5:14:df:ba:81:f2:6b:17:b5:75:99:9c:
47:7c:45:c1:eb:68:df:83:c1:b3:27:61:d3:6c:05:
64:21:9b:40:2e:07:5c:1b:a8:07:f5:83:21:69:7c:
88:88:6c:90:99:ef:fd:57:0f:01:e6:73:c8:ce:f4:
20:97:09:0c:60:e2:f1:b2:1f:d8:b9:05:a6:da:3f:
0c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:97:2C:19:0C:62:D7:98:5E:F3:07:79:54:DD:A9:9A:E7:A1:A5:59
X509v3 Authority Key Identifier:
keyid:F1:E6:F1:5E:F7:52:64:9F:3B:11:87:DE:68:3F:E8:3B:1C:E6:9F:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ebxXvdSZJ87EYfeaD_oOxzmnwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/04a42a-d454-4a6e-bcbd-77e6d363b192/1/8ebxXvdSZJ87EYfeaD_oOxzmnwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ff:40:3a:7e:64:a2:1f:3a:24:a5:76:86:5c:d1:a6:62:c0:
8a:7d:f1:54:eb:1c:b6:03:79:a2:c0:eb:45:25:92:25:cf:1c:
6d:3a:53:e8:fd:a2:b3:ab:16:f5:41:04:c1:a3:6b:70:30:1f:
66:da:11:63:92:3e:ac:a2:c1:1c:63:0a:9c:63:53:fe:0c:35:
c4:15:7c:76:52:59:b0:d0:df:43:ba:3e:d5:79:76:ac:5c:a2:
79:a6:06:7b:11:1c:70:1a:f8:59:8a:4c:91:ca:78:57:0a:7a:
99:92:f0:39:c9:d7:46:ba:af:ca:7d:92:ea:f6:7b:cd:c5:ea:
a2:9e:55:c2:dc:f7:fa:a3:ba:71:90:37:a9:40:12:dd:df:8d:
4d:be:60:a9:03:6c:b9:fb:55:fe:22:12:bd:80:47:99:64:d0:
2a:03:dd:5a:b3:e0:d6:c2:08:64:ca:83:f9:9d:0a:f4:fc:2c:
57:15:87:3a:fc:82:4a:36:9f:27:74:b7:bd:37:2e:6c:5b:c5:
df:cb:21:a9:8c:96:aa:ce:89:27:4d:85:d8:fd:47:96:04:99:
00:3d:f7:7d:13:d2:03:e7:d7:83:02:60:ad:eb:94:ec:4e:ac:
40:de:0a:be:36:a0:cd:52:ac:4a:b0:78:12:ce:65:d6:ec:47:
9e:eb:a2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:25 2025 by rpki-client