Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
File: 0KFr9-DjuTMLVEg-GfYTsCtie-8.mft (raw, json)
Hash identifier: +KcjEw3+sg5vmsg7Qc/Psm4Is0PBFJ0JntrVRpK1kRI=
Subject key identifier: AC:F5:0B:88:68:14:1B:DB:2B:8E:D0:DB:D0:C9:CF:B2:D4:33:27:60
Authority key identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
Certificate issuer: /CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Certificate serial: 0198D6CDB172C2A08EB543E5B50627957A07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
Manifest number: 1085
Signing time: Sat 23 Aug 2025 12:01:01 +0000
Manifest this update: Sat 23 Aug 2025 12:01:01 +0000
Manifest next update: Sun 24 Aug 2025 12:01:01 +0000
Files and hashes: 1: 0KFr9-DjuTMLVEg-GfYTsCtie-8.crl (hash: EIiBRJnC5fwoeS4g1YVp8XOex7acHlgn5YjTf8fX+qY=)
2: s0kyiXR6V1bkt2ciUZ2EpXqYq0U.roa (hash: BMvoEX7a6X6vFfIWsQqEPuUPXNmqfef7qS8aBYQEmho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:b1:72:c2:a0:8e:b5:43:e5:b5:06:27:95:7a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Validity
Not Before: Aug 23 12:01:01 2025 GMT
Not After : Aug 24 12:01:01 2025 GMT
Subject: CN=acf50b8868141bdb2b8ed0dbd0c9cfb2d4332760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e8:f0:d6:1f:bd:15:41:72:8c:96:11:e0:3e:
e9:80:b7:df:4a:23:3d:af:8c:c5:87:ee:42:c9:ec:
83:5b:e1:96:df:7c:6a:50:48:d3:1a:15:e5:fe:5d:
b9:66:22:7c:af:20:aa:90:01:ec:fa:07:b8:eb:0f:
9e:d4:31:f7:2d:85:86:79:04:e4:42:fd:a5:7e:dd:
6f:ae:9c:49:6a:04:63:93:e8:0d:45:91:66:6a:92:
03:1e:50:8b:2a:20:6f:ea:51:e2:fd:79:4d:12:79:
c9:85:d4:8b:e4:24:20:61:f1:f7:ef:cf:ad:a1:b5:
ba:d5:d0:96:f6:bd:d5:a0:59:4f:d8:7b:d4:1d:82:
80:1a:6a:79:60:96:5b:32:58:8f:44:b1:c8:07:c5:
c4:f9:c1:05:6b:80:5b:02:68:70:e9:f9:5e:93:11:
5b:19:88:0e:03:d2:57:a7:a2:cb:96:63:36:5d:fe:
68:5d:b1:d0:e5:c0:eb:38:c3:30:17:17:84:23:7d:
34:d4:a6:37:45:21:15:10:09:1c:6e:5c:4f:3e:17:
03:83:22:e1:5c:86:4d:f7:d5:31:f8:84:15:00:73:
f0:f7:8a:0f:8f:75:7b:1f:c8:c0:f0:45:95:77:7a:
d8:e9:d3:0b:68:2a:03:a0:41:df:d6:93:d7:1a:b6:
8b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F5:0B:88:68:14:1B:DB:2B:8E:D0:DB:D0:C9:CF:B2:D4:33:27:60
X509v3 Authority Key Identifier:
keyid:D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ba:de:6c:b8:e6:bb:90:6a:94:6c:ac:87:8f:c8:a8:89:15:
b1:9f:65:5b:5a:17:57:2e:30:b9:89:43:d2:3c:03:71:4e:ce:
c9:8d:9c:1c:1e:71:05:e1:a5:66:87:b2:60:63:51:9f:c0:10:
82:ef:23:1c:01:1f:94:07:17:f0:69:30:bd:54:e4:f8:f6:53:
c4:09:f5:90:f1:18:5a:08:6a:b6:bb:d2:8f:43:c2:5c:ac:43:
eb:7d:91:ec:26:99:82:c8:d3:bd:ce:04:89:98:e0:88:73:f6:
0b:e4:c0:0f:b5:12:0b:7b:07:79:3f:82:a5:d4:cf:8b:8f:67:
73:3f:a0:f6:7c:8a:5c:f3:33:eb:a8:be:ca:f8:6b:b9:1b:bf:
b2:47:40:5b:a1:25:0a:7b:1b:08:ef:8a:6c:20:c8:c1:26:2e:
b5:c3:4f:da:00:c3:42:53:83:24:47:1b:c2:52:41:e8:09:c1:
68:61:03:c0:62:8f:2e:38:c1:1c:e9:71:94:af:a3:5f:41:98:
39:82:a6:0f:20:b5:c5:e8:96:dd:62:c3:c3:bd:a0:96:0e:63:
d4:9b:a8:aa:0d:01:b6:d6:98:0f:09:ab:4a:73:62:68:49:a2:
53:e1:68:1a:20:b1:99:ce:21:b3:d6:f0:54:58:73:b7:41:19:
94:b5:e7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:18:32 2025 by rpki-client