Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
File: 8cgdjkJn0tRetlJQoqSCULX7Uls.mft (raw, json)
Hash identifier: iaMx0cwONHl4FRmw98ZMP6RHlB7yV3GkaQTYakGfJok=
Subject key identifier: 08:F0:11:15:63:B1:7F:6C:31:49:48:5D:79:86:BF:5F:78:A5:80:73
Authority key identifier: F1:C8:1D:8E:42:67:D2:D4:5E:B6:52:50:A2:A4:82:50:B5:FB:52:5B
Certificate issuer: /CN=f1c81d8e4267d2d45eb65250a2a48250b5fb525b
Certificate serial: 01988CFF26C57CA2A5D16D944158067BE522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cgdjkJn0tRetlJQoqSCULX7Uls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
Manifest number: 0A48
Signing time: Sat 09 Aug 2025 04:03:08 +0000
Manifest this update: Sat 09 Aug 2025 04:03:08 +0000
Manifest next update: Sun 10 Aug 2025 04:03:08 +0000
Files and hashes: 1: 8cgdjkJn0tRetlJQoqSCULX7Uls.crl (hash: eebX/MKl/aj2PPgEdcm8EsRe0erIqP4CgZICXyiBodM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cgdjkJn0tRetlJQoqSCULX7Uls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:ff:26:c5:7c:a2:a5:d1:6d:94:41:58:06:7b:e5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c81d8e4267d2d45eb65250a2a48250b5fb525b
Validity
Not Before: Aug 9 04:03:08 2025 GMT
Not After : Aug 10 04:03:08 2025 GMT
Subject: CN=08f0111563b17f6c3149485d7986bf5f78a58073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:90:74:c1:08:59:0e:81:00:f6:6c:1f:82:ee:
e7:69:e0:3b:a5:57:e0:62:c4:46:d3:bc:7c:0f:fd:
44:8e:0b:15:0b:2f:67:34:e0:64:9d:c3:12:63:fe:
57:c8:1d:6d:ed:29:bc:a5:ee:1d:be:c7:18:61:e5:
fb:34:9e:01:20:cc:da:3c:fe:e7:3f:30:95:52:b9:
07:f9:06:44:f3:68:a9:0e:e5:aa:ef:64:fd:d4:1d:
06:b6:f4:e6:c4:bf:dc:2d:75:cb:43:f7:f2:03:7c:
a6:af:d2:5e:77:ff:ff:59:11:23:2f:ec:0a:15:16:
7c:5e:44:c4:fb:61:e9:d7:cd:f4:d1:4d:8d:b1:e9:
bc:c0:ed:6d:27:c2:41:9b:84:9d:01:43:b2:4f:1c:
68:d4:47:ab:80:ee:75:e4:9d:78:fb:c3:71:03:d7:
ef:33:47:6f:a3:c3:5e:b0:b6:6d:c4:29:8f:ec:9b:
62:76:db:16:af:b9:8e:b3:55:df:b7:97:27:80:5a:
a9:bc:e9:17:f3:57:29:24:6d:12:a9:b9:f4:63:9d:
35:5e:ae:07:51:c0:a3:0e:d4:d2:80:de:cb:82:fe:
88:1c:e4:d4:d2:71:15:a8:d5:0c:e5:cf:00:89:d8:
11:a6:96:b2:2d:1e:c3:9c:2a:2f:06:1f:62:73:a3:
bd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F0:11:15:63:B1:7F:6C:31:49:48:5D:79:86:BF:5F:78:A5:80:73
X509v3 Authority Key Identifier:
keyid:F1:C8:1D:8E:42:67:D2:D4:5E:B6:52:50:A2:A4:82:50:B5:FB:52:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cgdjkJn0tRetlJQoqSCULX7Uls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b9:3b:19:d8:3c:d3:68:3e:92:88:71:a4:89:62:11:ee:c0:
98:fa:22:10:5e:1a:00:38:bd:e5:47:92:3a:6a:78:c3:f2:e3:
aa:81:fd:59:9a:e2:bd:18:bd:ba:3e:f0:43:5a:6f:67:fc:b6:
be:18:27:5a:ee:68:72:d0:5c:4c:3c:5a:bf:48:fb:37:d8:43:
34:40:47:65:53:6f:bb:d1:ae:cb:15:98:42:96:59:47:2f:6f:
41:c4:c7:ca:95:7c:dd:6b:c5:ce:83:a6:e5:1d:b3:5c:54:c5:
38:b4:40:e0:c1:df:85:2a:0d:e8:e4:3f:a0:eb:9a:c1:21:88:
d6:c8:75:a2:4a:ee:5b:8e:8d:f0:65:0b:3e:6c:54:c0:70:9a:
c7:a4:03:6c:46:94:2a:01:c7:84:1a:c8:41:d0:5d:81:c2:82:
29:44:29:73:d6:a3:32:58:9d:b6:4f:69:64:cb:dd:92:99:d9:
9f:e7:58:86:3d:82:a2:ca:17:fb:54:4a:98:35:a6:88:cb:d7:
a6:02:70:1c:31:63:c4:73:59:d7:9e:74:2e:6a:3e:ac:e7:4d:
d0:d2:3a:47:46:d2:14:1f:26:21:4e:db:74:9c:58:ec:11:92:
e2:be:77:57:c6:a9:9f:ad:84:15:76:a8:b2:54:0b:0c:32:64:
51:71:09:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:21:28 2025 by rpki-client