Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
File: mx8SO1ukvBt3k7np-htD2sSaZgo.mft (raw, json)
Hash identifier: Je4kJs97BYnkMPchVymk+BKA3NCJzWTkuQp0lWFNALY=
Subject key identifier: C8:0E:61:3B:19:74:E9:88:AE:BE:77:DB:D4:D5:06:0D:A2:48:16:57
Authority key identifier: 9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
Certificate issuer: /CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Certificate serial: 01987A5243B37543C1E5F2150C2916A3C253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
Manifest number: 0F44
Signing time: Tue 05 Aug 2025 13:01:08 +0000
Manifest this update: Tue 05 Aug 2025 13:01:08 +0000
Manifest next update: Wed 06 Aug 2025 13:01:08 +0000
Files and hashes: 1: mx8SO1ukvBt3k7np-htD2sSaZgo.crl (hash: /nuFdriTXrgx3ei6+gCx8VpkzkjHzAbCtoA2cOWKyq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:52:43:b3:75:43:c1:e5:f2:15:0c:29:16:a3:c2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Validity
Not Before: Aug 5 13:01:08 2025 GMT
Not After : Aug 6 13:01:08 2025 GMT
Subject: CN=c80e613b1974e988aebe77dbd4d5060da2481657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:2b:62:83:60:a6:d8:8c:3a:2c:01:94:07:
3b:aa:08:da:17:8d:04:9e:99:c1:ba:a3:d2:c0:52:
4f:ff:4d:6d:7c:15:09:f7:e3:36:a1:52:fb:53:aa:
7d:a9:5b:1c:04:83:92:a8:ed:8c:ea:e6:f8:61:2f:
d1:7e:5e:3e:96:98:a3:4e:93:46:0a:0b:36:87:1a:
5f:e7:6d:96:d0:2b:4f:a9:1e:24:dc:a4:90:06:39:
e4:71:47:cf:59:4b:16:9e:8e:da:8a:bd:79:b8:65:
63:34:64:ba:9d:33:5c:ee:fe:70:f3:12:6b:06:04:
e0:33:1d:56:a6:3c:33:e2:63:a0:1c:56:03:7a:5e:
98:2f:68:84:4e:39:ac:36:f0:df:9c:60:35:36:17:
6f:fb:e4:74:76:5a:18:13:e1:a6:2c:3c:e6:ca:9e:
54:55:90:21:6d:40:72:ef:f7:70:6e:0b:e8:c3:0d:
5e:ae:de:b6:fb:ea:f0:1c:bd:90:08:7e:be:5e:a1:
b9:aa:c3:67:96:d3:e8:07:6a:28:19:64:5f:51:de:
6b:61:3c:5c:b8:0a:09:92:ff:27:2f:0a:a5:4c:c6:
a2:fe:51:51:83:26:22:96:61:82:47:69:28:ff:2f:
28:da:78:14:28:79:11:a0:d0:28:95:40:05:77:e4:
62:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0E:61:3B:19:74:E9:88:AE:BE:77:DB:D4:D5:06:0D:A2:48:16:57
X509v3 Authority Key Identifier:
keyid:9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a7:b0:49:df:6a:c9:c4:b8:74:a4:89:00:d1:67:ba:b2:56:
40:68:94:35:b0:9e:b0:c9:e8:e8:88:8d:f5:d6:6b:7f:15:cb:
b3:1b:d3:f9:f6:d3:5a:12:9f:69:81:50:a0:78:fd:eb:03:69:
61:8d:0c:41:f9:4e:a4:c2:f8:72:65:c8:8f:c5:88:b1:f8:44:
a7:c7:f6:8b:c7:67:93:b7:f7:3c:b5:b5:0c:7e:9d:e1:fd:57:
01:89:6d:c3:9d:f8:fa:a4:bc:5d:0d:43:58:45:41:73:83:ee:
d8:b6:c8:fa:a6:4e:50:eb:b0:9d:ab:3d:a6:ae:f7:67:02:1d:
82:d9:fe:20:5b:77:cd:36:77:bc:fd:3c:40:24:a4:d4:ae:13:
a7:bf:3c:f8:5a:95:a8:1d:29:cc:14:dc:52:9c:09:1b:33:50:
39:8d:ff:69:08:2d:0f:fc:8f:65:bc:8a:76:7b:54:89:20:35:
cf:f6:54:c6:da:ed:c5:e8:b0:98:ed:9e:d3:25:99:0d:37:dc:
ba:2d:db:a7:65:2c:41:11:9b:42:34:7d:a1:3b:20:cf:3b:da:
85:41:c6:55:c4:09:99:07:6c:f1:d6:85:1a:1a:32:fc:5b:b0:
a9:6e:69:b9:17:8f:5a:dd:7c:9e:d3:2f:bb:2e:7a:f4:ed:a9:
f0:6e:47:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:23:56 2025 by rpki-client