Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
File: 8D9771R9ACUziqa2rueqHb4Urio.mft (raw, json)
Hash identifier: zP2BoXXRsnjA+TfYkaQ0rruyD7TB3j5eqLBA/I/FSqs=
Subject key identifier: D9:D4:91:1E:A9:0F:4E:04:0F:26:2C:A0:11:0D:4B:F7:22:5E:2F:7E
Authority key identifier: F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A
Certificate issuer: /CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
Certificate serial: 0198D65F1CFC60314C48E7F201B80087DE17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:00:14 +0000
Manifest this update: Sat 23 Aug 2025 10:00:14 +0000
Manifest next update: Sun 24 Aug 2025 10:00:14 +0000
Files and hashes: 1: 8D9771R9ACUziqa2rueqHb4Urio.crl (hash: 8xoOC0siWFUB2U0MsCtkX5DfnDbcyxxchEt5V+Vs3vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:1c:fc:60:31:4c:48:e7:f2:01:b8:00:87:de:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
Validity
Not Before: Aug 23 10:00:14 2025 GMT
Not After : Aug 24 10:00:14 2025 GMT
Subject: CN=d9d4911ea90f4e040f262ca0110d4bf7225e2f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b8:40:0c:a5:41:14:d2:40:11:98:3c:9d:1b:
08:68:08:c8:82:77:3e:21:11:77:4c:76:8d:bc:60:
93:8c:d5:fd:26:f9:22:6a:a4:8b:de:d7:58:22:f3:
06:e4:dc:0d:2a:ce:cb:fc:7d:8b:7f:85:b6:93:11:
28:bb:d9:bb:b5:50:f6:c5:8f:f7:6d:b9:e5:60:67:
bb:7b:03:8e:bf:df:d0:01:1c:35:e9:b8:cd:80:90:
d2:24:a9:55:dc:d2:96:48:2d:a6:30:00:d5:e1:10:
87:09:24:75:4f:a0:80:1a:f0:07:1d:b5:00:66:ae:
85:ae:d4:33:2b:b7:45:e2:88:75:22:75:a2:99:0e:
2f:ea:85:ea:fb:d0:03:f3:e7:ed:7f:7f:80:4d:81:
2e:ad:f6:bb:5c:5b:24:7c:ee:76:da:df:b5:59:a1:
86:ef:5e:42:c7:bf:28:80:1a:78:d4:c0:3b:c6:96:
d8:ce:5e:e4:7e:f8:da:cf:e7:70:50:36:ed:3c:7f:
6b:52:9f:dc:eb:97:4f:58:90:48:0d:26:6c:1b:ed:
e8:39:24:73:ca:14:29:a2:4a:e8:db:44:40:7f:c1:
20:5e:e8:4a:22:9f:34:c1:b0:03:93:f6:64:1f:15:
2e:7f:b3:7f:52:60:0b:8c:75:73:f4:5a:f6:10:b1:
34:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D4:91:1E:A9:0F:4E:04:0F:26:2C:A0:11:0D:4B:F7:22:5E:2F:7E
X509v3 Authority Key Identifier:
keyid:F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:92:86:6c:3e:d5:7b:80:72:a3:c7:dd:9d:c8:98:76:fc:e2:
ac:65:3b:f5:d4:73:90:53:44:a9:47:72:e8:96:7d:71:2f:f4:
ab:aa:f9:9c:ce:7c:ff:f3:6f:eb:14:55:40:60:8c:8f:ef:a4:
cf:d8:1b:17:56:e2:0b:e8:d9:af:c1:11:1d:53:53:3e:27:f1:
2e:51:cb:74:e4:35:bf:da:7b:0c:43:14:d0:ac:68:fd:de:0e:
fd:d1:a2:97:4e:2c:75:a5:a5:6f:65:18:e5:bc:63:29:82:6d:
c7:a2:61:0e:c8:b3:f5:a1:5c:83:ef:a5:c7:1a:f6:f9:9d:ab:
c0:eb:15:7e:bc:4e:9d:10:74:12:02:e7:fb:99:b3:ba:e3:58:
ab:5e:2c:1d:ba:2f:16:72:3c:0a:1c:4e:e3:ac:24:b2:ce:86:
b3:db:5a:7c:4e:6a:9e:d5:cd:df:d4:e2:14:db:ae:0b:87:de:
1a:b7:d6:de:12:b7:a8:ac:7d:ab:b5:99:0e:6f:14:c5:be:e0:
40:b7:db:2a:16:1d:43:2a:43:f9:13:18:f0:99:b7:00:6a:9a:
15:e4:74:63:94:e9:ea:45:7f:33:77:b6:f0:b1:65:70:d4:86:
e6:2c:72:29:c6:fc:89:6d:f2:fc:5b:20:4a:b5:4b:cd:fd:40:
bf:67:ae:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:41:04 2025 by rpki-client