
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
File: 8G37T34-N0VYDoyPxHAj_7H6kW0.mft (raw, json)
Hash identifier: x5GOZYHjhBLJiniA/Pp8dzBNu+G+6Z9hsbsDvgMDJd0=
Subject key identifier: EE:B8:73:43:9C:7F:71:41:36:4B:DF:0C:1E:F1:89:57:77:DB:66:1B
Authority key identifier: F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D
Certificate issuer: /CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d
Certificate serial: 01987D8AF63DD902FD74E0D9C2A0078A8021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
Manifest number: 0553
Signing time: Wed 06 Aug 2025 04:01:55 +0000
Manifest this update: Wed 06 Aug 2025 04:01:55 +0000
Manifest next update: Thu 07 Aug 2025 04:01:55 +0000
Files and hashes: 1: 8G37T34-N0VYDoyPxHAj_7H6kW0.crl (hash: kiD31nxZDImSCi1wzj2arG6aiofb0dtaajkJmBCRM8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:f6:3d:d9:02:fd:74:e0:d9:c2:a0:07:8a:80:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d
Validity
Not Before: Aug 6 04:01:55 2025 GMT
Not After : Aug 7 04:01:55 2025 GMT
Subject: CN=eeb873439c7f7141364bdf0c1ef1895777db661b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5e:d7:71:f3:47:72:2c:c4:27:67:f3:3d:1e:
1f:7a:ca:09:52:b2:38:d5:09:ef:7d:12:82:70:99:
e7:d8:dc:e3:ad:db:07:0b:b7:f5:e9:e7:52:e6:66:
fd:16:a9:74:ef:a9:ca:e5:06:ca:fe:7e:12:8a:ef:
88:92:22:70:d4:fe:7a:de:85:e5:20:ec:23:2b:ef:
32:0c:18:0a:c1:19:1b:3b:df:85:54:48:33:95:51:
22:22:65:a3:71:99:ef:33:63:a5:2d:a4:bd:13:f1:
f1:c8:77:80:cb:e5:87:68:7c:9b:51:f9:77:97:89:
6b:f8:b6:7b:cd:bd:20:77:8f:aa:52:3a:78:fc:77:
d7:f0:38:1f:74:da:32:f1:b6:b4:dc:c6:02:88:df:
20:d7:34:da:45:65:db:69:b9:fc:39:7d:75:b8:a7:
af:ab:e2:29:30:23:c9:a2:9a:84:1e:26:c3:12:c3:
c3:f7:90:ad:38:03:e6:40:af:28:70:07:bd:f3:bd:
90:76:86:21:65:8b:ba:40:4a:b0:10:e4:c3:59:ef:
39:c2:63:51:7b:c8:65:6b:c4:02:39:e7:9b:03:99:
1f:89:ed:58:cd:c9:b7:04:ae:6e:54:75:4a:58:4e:
78:8a:d5:f0:f4:2d:66:31:d4:2b:83:98:76:7a:a3:
15:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B8:73:43:9C:7F:71:41:36:4B:DF:0C:1E:F1:89:57:77:DB:66:1B
X509v3 Authority Key Identifier:
keyid:F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:85:79:8a:ab:5f:d6:bc:e6:00:ac:d2:99:3f:ea:45:6e:6f:
7c:49:fa:a3:c9:62:2c:9d:42:ce:57:af:da:76:d9:d1:78:45:
d1:b1:c8:c0:9c:cb:c3:f8:59:70:19:20:c4:7c:13:6c:7a:65:
f5:6c:f2:df:5e:1f:86:a7:91:50:5d:3a:97:29:6c:1b:6f:24:
16:1a:5d:0f:26:09:6b:1a:0a:ce:3f:ae:0d:0f:07:17:b9:80:
4e:d7:22:95:8b:9f:8c:00:12:b1:ab:1f:5e:0a:cb:ff:f1:ee:
ba:e5:4a:31:0f:a7:31:4f:98:fb:a2:8a:d0:c0:8a:4c:66:be:
da:cf:9b:3b:94:3a:b0:27:19:b2:8f:e5:1d:ed:b3:e1:31:56:
87:bf:4f:fe:d0:4c:d7:4d:0a:2d:0e:27:bd:af:98:62:19:de:
c8:0c:d5:df:b9:a4:ee:fe:2e:90:a0:e2:3e:60:dc:53:1c:98:
b7:1b:47:2f:9a:7d:8f:a9:ce:1b:7a:63:c5:d4:3f:bb:94:cf:
95:cc:d4:19:70:7e:79:89:b7:99:9b:41:e4:cf:99:e0:29:9b:
60:3b:80:c1:16:80:87:79:69:6d:60:24:d5:77:34:0b:8c:84:
de:9d:06:af:86:29:ee:ff:86:28:52:ce:08:81:cb:da:4a:49:
f8:c1:bb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:12:02 2025 by rpki-client