Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
File: mx8SO1ukvBt3k7np-htD2sSaZgo.mft (raw, json)
Hash identifier: r6djB0VDwMVawlH0/YY7NyW21zQyv1l4HwkiRNFfCC8=
Subject key identifier: D3:19:CC:85:E5:16:0A:A3:62:1D:FF:BF:B0:EB:98:99:06:0D:7E:9F
Authority key identifier: 9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
Certificate issuer: /CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Certificate serial: 019773ADDD5AEDEC9DF437E63B5EF1F4DCA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
Manifest number: 0EBC
Signing time: Sun 15 Jun 2025 13:01:03 +0000
Manifest this update: Sun 15 Jun 2025 13:01:03 +0000
Manifest next update: Mon 16 Jun 2025 13:01:03 +0000
Files and hashes: 1: mx8SO1ukvBt3k7np-htD2sSaZgo.crl (hash: k0pQ45Tl/9Ptik85sL09IKdnMmHaZ31ZWfJfyWc6U5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:ad:dd:5a:ed:ec:9d:f4:37:e6:3b:5e:f1:f4:dc:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Validity
Not Before: Jun 15 13:01:03 2025 GMT
Not After : Jun 16 13:01:03 2025 GMT
Subject: CN=d319cc85e5160aa3621dffbfb0eb9899060d7e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4e:1e:1c:d4:2e:c1:8b:eb:72:60:98:a8:56:
11:77:c4:a9:66:f1:6c:f9:11:ee:18:c2:b9:dd:9b:
9a:c3:6b:76:41:12:1c:54:46:98:b6:da:5f:5c:25:
db:6c:87:e7:72:3b:68:2d:51:08:bb:a7:58:f3:c8:
51:e4:f0:e8:89:83:34:f8:4f:98:81:83:a1:03:4f:
7b:71:49:a4:b3:a0:53:2b:0d:7f:5b:20:c8:fc:74:
4a:02:4d:a6:47:d3:e9:de:3e:c0:f2:de:1e:c1:12:
66:a3:e3:48:d3:bf:00:d9:70:3a:61:0e:2f:95:be:
75:ab:c2:1e:40:fc:16:74:a2:40:21:b3:7e:68:2c:
32:08:3f:bd:49:3c:3b:4b:ec:83:ec:4b:f8:b9:38:
41:52:36:64:6a:70:6c:cd:30:d2:b6:50:3f:44:f3:
65:67:a7:15:8a:b7:64:81:9d:e1:08:3e:ff:b5:be:
90:e1:4d:2d:ac:10:1c:84:f8:f8:af:5a:59:22:59:
38:af:00:bd:91:b7:7a:ba:7a:51:e5:ab:3b:df:31:
bf:80:28:97:9c:94:72:79:65:eb:6b:d5:64:ea:d1:
21:b3:7b:04:75:a5:d9:57:bf:b2:40:fa:e8:f4:dc:
7d:17:8f:8e:ae:0c:fb:8a:8c:f6:0d:8e:c8:24:17:
57:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:19:CC:85:E5:16:0A:A3:62:1D:FF:BF:B0:EB:98:99:06:0D:7E:9F
X509v3 Authority Key Identifier:
keyid:9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:87:b4:7a:8a:46:5b:e9:31:17:5c:78:3d:32:29:ab:3f:5a:
ea:1e:e4:d3:75:70:37:78:8a:76:0a:a8:24:07:ab:95:ba:a4:
de:c0:25:6e:99:f3:01:a4:ca:7b:1a:6b:fd:47:f8:43:85:a0:
0f:95:33:2a:96:dc:b1:21:48:c5:ed:2a:ac:48:f3:e7:c1:8a:
c2:c8:99:8a:bf:d1:ef:f3:08:e6:62:be:ee:1c:56:11:fc:1b:
2a:e8:7d:a8:23:e6:f0:a8:1d:d4:02:29:40:de:12:77:d0:7f:
7a:bc:07:b8:dd:89:b9:56:07:9d:88:aa:5f:e4:bb:b1:f8:e5:
8a:79:30:09:e4:11:c8:cf:6f:7a:0e:2a:f7:3f:0f:1d:fa:8d:
8c:65:12:a6:95:c6:51:71:d7:66:a9:fb:90:11:64:fe:6e:9a:
8e:e3:85:3b:e7:1f:73:8f:f5:97:5a:bb:a7:a7:85:84:2a:a0:
b6:a0:70:d9:0b:f9:82:1a:48:88:78:74:a2:ac:f1:8e:ce:86:
a3:fc:76:ef:58:1d:65:0e:61:40:2e:eb:ad:4c:f8:a2:76:95:
40:3d:1d:6e:22:79:e2:df:35:83:e2:1b:0b:e4:52:51:ae:f2:
5e:55:13:2c:b4:5c:5f:14:5b:d4:8c:a6:3e:f3:64:29:c8:a9:
e8:a4:2e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:53:53 2025 by rpki-client