
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
File: 8PsSySmy8FuZ1Jf68VUdvF2AflE.mft (raw, json)
Hash identifier: QtbsLn8puLtqSWmXLLBk2d7Y3Z+AFFc385KNkoOA98M=
Subject key identifier: 0C:AB:9E:61:F4:0E:CC:72:3F:52:97:F2:64:CA:67:E7:E9:9F:B2:5E
Authority key identifier: F0:FB:12:C9:29:B2:F0:5B:99:D4:97:FA:F1:55:1D:BC:5D:80:7E:51
Certificate issuer: /CN=f0fb12c929b2f05b99d497faf1551dbc5d807e51
Certificate serial: 019873E2C5CD559C62393EF3290697AC4EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
Manifest number: 0BAB
Signing time: Mon 04 Aug 2025 07:01:38 +0000
Manifest this update: Mon 04 Aug 2025 07:01:38 +0000
Manifest next update: Tue 05 Aug 2025 07:01:38 +0000
Files and hashes: 1: 8PsSySmy8FuZ1Jf68VUdvF2AflE.crl (hash: ujhwzjb6vwJfWICzEHWhWeWlrxuMqaQY/H14Qwt4Mxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:c5:cd:55:9c:62:39:3e:f3:29:06:97:ac:4e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fb12c929b2f05b99d497faf1551dbc5d807e51
Validity
Not Before: Aug 4 07:01:38 2025 GMT
Not After : Aug 5 07:01:38 2025 GMT
Subject: CN=0cab9e61f40ecc723f5297f264ca67e7e99fb25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b9:dc:c9:34:80:60:06:fd:14:de:50:ea:9e:
ac:1a:15:14:ae:c1:06:00:e2:d4:7c:ce:98:ce:b5:
2c:5d:bb:06:40:86:dc:89:e5:fe:dd:8c:87:b4:11:
c0:12:dd:af:46:82:8b:f4:8b:13:85:43:ff:c4:51:
a4:42:f8:4d:1d:b2:02:05:9e:b7:96:75:38:06:9f:
cb:b4:8a:0e:35:45:62:54:7b:07:2a:44:4b:5b:95:
30:ff:6c:ba:e1:2b:44:d8:a7:6f:d8:5c:fe:f2:74:
17:9d:b8:51:72:e7:62:b6:0d:18:d1:36:ae:7c:84:
1b:c6:a3:c8:27:67:60:ff:c9:32:d1:a7:c5:af:bd:
26:3e:83:94:4b:74:76:a9:53:83:a0:81:bb:d3:19:
7a:c1:ad:55:b4:7f:1c:65:11:2f:46:ae:bf:9b:bc:
21:21:91:02:2b:59:d3:fb:1c:10:8e:d5:88:c0:28:
71:e2:b2:1d:61:62:e1:a3:c0:e7:72:27:7a:f3:50:
bf:a3:e9:e3:14:62:73:99:89:f6:73:5f:a1:18:51:
50:d9:70:31:01:18:7d:c0:52:18:01:49:e4:16:73:
18:a7:80:93:33:d9:bf:3b:6b:5f:51:6d:d4:6b:7c:
2d:ca:0f:33:de:ba:9d:1c:55:07:d8:b8:4c:f3:dc:
4a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AB:9E:61:F4:0E:CC:72:3F:52:97:F2:64:CA:67:E7:E9:9F:B2:5E
X509v3 Authority Key Identifier:
keyid:F0:FB:12:C9:29:B2:F0:5B:99:D4:97:FA:F1:55:1D:BC:5D:80:7E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:cf:86:a4:61:b5:6f:c1:da:1d:25:6d:dc:cf:56:ab:0b:fd:
6b:c6:73:b7:fe:3a:91:6e:d1:7c:9a:58:75:28:fd:48:f2:cc:
0c:53:f9:1b:19:f0:6d:2a:b1:3a:72:b6:4d:a7:f4:f9:a4:dd:
ef:d9:e6:f9:6d:db:e1:e3:86:30:72:44:dc:85:fa:3e:4c:32:
fb:f2:f7:4e:3e:14:26:f0:bf:6e:4b:7d:fc:1f:d0:68:cd:9a:
c5:8e:81:e9:43:b8:ba:6d:02:ba:d9:2b:e3:6b:36:24:72:df:
e8:ff:5a:cb:82:6d:cc:5a:1b:9c:b6:4c:43:92:a8:93:19:c8:
44:e8:92:5f:3b:06:db:2e:01:f2:e9:1f:f5:6c:37:24:f8:32:
3b:2e:ab:6b:7c:c9:73:9b:ec:fd:85:f9:52:db:34:64:9d:6e:
2d:66:1c:f2:fb:0d:0e:e1:5e:39:20:41:5c:6f:6b:c1:a7:9d:
1a:32:4f:2c:4e:21:21:17:46:7d:ff:f1:f1:85:54:05:6b:2a:
ad:f4:f3:51:b7:9b:0d:40:51:75:bb:94:a3:e6:75:e5:b1:1a:
a2:2d:19:5d:0a:32:0d:49:1e:8e:9d:44:ef:7e:de:d8:d6:15:
ae:46:55:83:71:bc:c9:31:ea:a8:85:9d:ce:10:0b:45:5f:48:
c9:c7:c4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:05 2025 by rpki-client