Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
File: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft (raw, json)
Hash identifier: ToNhQ8qOcx20e2KdMQ2dUVo5l7OHznUI5ERc/1FCRCo=
Subject key identifier: 4E:51:D3:EE:0A:E4:55:20:22:0F:7C:B8:28:AC:D9:D4:56:F8:C7:FE
Authority key identifier: F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
Certificate issuer: /CN=f0a95b78b0576501278efd7e020269ba1f06d386
Certificate serial: 019896A5BA64FB8E73E6A3D54AD9C9F4089C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
Manifest number: 0BFF
Signing time: Mon 11 Aug 2025 01:01:40 +0000
Manifest this update: Mon 11 Aug 2025 01:01:40 +0000
Manifest next update: Tue 12 Aug 2025 01:01:40 +0000
Files and hashes: 1: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl (hash: mlxB3A/RVtZt149Yf632ozauMEmPJ/h3CpAnTFtMK68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:ba:64:fb:8e:73:e6:a3:d5:4a:d9:c9:f4:08:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a95b78b0576501278efd7e020269ba1f06d386
Validity
Not Before: Aug 11 01:01:40 2025 GMT
Not After : Aug 12 01:01:40 2025 GMT
Subject: CN=4e51d3ee0ae45520220f7cb828acd9d456f8c7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c2:40:f9:f2:4a:e9:67:c5:59:f0:ed:0b:b4:
8f:7d:c6:34:ad:f8:ae:b5:7e:aa:d3:2c:27:4e:da:
99:e3:2b:e7:d2:63:7d:f4:f7:b6:ba:53:aa:12:7f:
3f:fd:c7:a8:1a:37:dc:ce:3e:fa:30:5a:ef:90:cb:
9a:95:4f:2b:45:b2:39:c4:6a:87:73:f4:68:04:7c:
70:6d:8f:54:20:6c:6b:66:ac:7c:90:d4:dc:13:85:
bd:1d:76:75:78:29:cd:78:35:83:84:b2:7f:db:e6:
71:6a:c1:cb:f8:cd:78:8c:1a:ba:da:d9:ae:52:69:
ae:dc:cb:f9:60:35:1c:bf:6a:52:49:55:b3:64:ea:
67:1c:d1:0d:ac:03:40:67:f3:85:b4:af:da:43:b6:
72:7d:7a:20:ce:43:81:ad:9f:ac:30:96:a5:67:2a:
f1:c6:95:4a:ca:c0:0f:27:27:91:db:bf:11:f7:1b:
8f:d9:a8:9b:ec:72:bb:c3:20:84:d5:7c:35:a6:62:
98:7b:41:20:7d:ce:ff:60:b4:ba:70:91:20:1d:3b:
f6:7f:9f:0b:cf:94:01:eb:6f:4a:61:56:1a:f9:c7:
b5:ec:ad:e4:81:71:2f:01:9c:bd:6e:f5:a4:9f:a0:
73:b8:74:bb:4c:45:7b:f4:98:97:88:62:19:fe:f9:
86:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:51:D3:EE:0A:E4:55:20:22:0F:7C:B8:28:AC:D9:D4:56:F8:C7:FE
X509v3 Authority Key Identifier:
keyid:F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ab:b1:26:6d:f9:e7:7f:58:33:f3:8d:9b:fb:7a:8a:a7:16:
e4:44:0e:6e:16:21:9a:84:0b:e8:70:2c:db:66:b6:ca:03:5c:
44:85:e7:4a:ac:a1:44:90:05:a1:36:c1:97:c0:b2:91:9f:42:
a9:c9:42:78:ca:21:34:cd:a1:40:d6:31:90:b5:df:d7:81:02:
8f:aa:44:ed:2d:93:25:27:dd:ec:fc:c3:76:4b:f4:86:0f:ca:
2a:4c:4c:e9:1d:48:47:d8:50:68:68:58:37:14:d1:f6:c9:c4:
e4:5d:be:bd:1d:52:de:e4:78:8a:4b:15:cc:1b:b2:54:e1:0b:
9f:9b:68:5e:e7:c8:8f:ac:10:7a:07:70:4a:76:d2:f2:bf:e1:
05:32:dd:5d:24:9d:af:9f:c8:8a:c2:39:e8:34:95:59:38:7f:
4a:57:3e:44:0e:5b:a6:df:1d:c9:26:8b:0c:2f:1d:a1:00:bd:
93:d6:ce:dd:e6:e4:a7:de:c1:b0:1d:55:0a:b6:48:86:14:85:
e3:32:16:45:66:6b:97:52:b4:36:75:d9:29:b6:21:49:8d:83:
89:35:87:09:8e:e9:e2:d8:c4:47:74:59:5b:29:88:3b:52:4e:
d5:6d:a7:b2:91:63:bb:9d:63:34:d2:92:b6:85:1d:0c:c5:80:
97:8c:60:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:02 2025 by rpki-client