Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
File: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json)
Hash identifier: CfC/Og/hQzS2UIqJ6PMkBQmCNpAeCFzPfTrMXOUeR/k=
Subject key identifier: CB:0E:73:C8:C1:E6:C0:FA:73:82:A5:67:D8:4A:7D:97:F9:17:3D:C9
Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Certificate serial: 0198914817D65CBBE79D28596EE2B9B8C599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
Manifest number: 0D94
Signing time: Sun 10 Aug 2025 00:01:17 +0000
Manifest this update: Sun 10 Aug 2025 00:01:17 +0000
Manifest next update: Mon 11 Aug 2025 00:01:17 +0000
Files and hashes: 1: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: md1aADA3S5wXbZYLLPQso3roYKA12ksPMWhYbfBJmO0=)
2: YkEpFHQglRkkx7TW2iOd8M7ku-c.roa (hash: kIeQhyyEYB0FfxtFkPtqVvMk30nvPQUJg2CwKA7jeLY=)
3: uq0Ty9FTaErs0rzB7yOaaIcCy9E.roa (hash: cH522XBAhZQR4is+g9SDDOs+Uj5P/+RJANdH54+jdMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 00:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:48:17:d6:5c:bb:e7:9d:28:59:6e:e2:b9:b8:c5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Validity
Not Before: Aug 10 00:01:17 2025 GMT
Not After : Aug 11 00:01:17 2025 GMT
Subject: CN=cb0e73c8c1e6c0fa7382a567d84a7d97f9173dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:66:71:4d:56:4b:c2:75:fd:20:3c:1f:25:34:
6a:e2:54:0a:13:ca:09:c8:4d:35:6c:d6:eb:30:4a:
eb:2b:92:6e:b9:2e:59:60:b0:f9:b2:06:b6:99:81:
8c:42:5f:3f:af:70:43:f7:d2:c2:3e:d6:34:35:03:
6c:22:e1:46:6e:0d:cd:9b:bf:b0:f0:cb:5e:34:c7:
d1:58:0d:03:13:23:7c:05:d2:25:0f:43:ae:fa:98:
12:8e:40:c1:ce:b2:db:13:91:54:15:42:28:2b:e1:
a1:73:12:4d:51:ef:5b:65:79:56:99:f0:bf:6e:8e:
8e:cb:c2:60:29:14:b2:2b:35:0e:54:51:31:15:e7:
7e:69:95:a7:86:7d:16:f2:ec:5d:fa:cd:d0:04:f4:
3c:ae:42:20:49:c4:e4:db:ce:77:cf:4a:db:04:04:
fc:3d:f8:28:3a:76:af:98:79:60:f1:66:e9:55:4b:
21:ed:f5:0c:44:f1:cc:16:77:89:54:a5:13:39:7b:
97:75:38:cc:fd:d4:b0:48:19:3d:5e:45:e7:4a:c8:
35:b0:5c:32:aa:32:65:9d:cf:40:37:7a:e9:b2:3a:
3e:96:3a:11:4c:34:69:c1:73:40:88:e9:11:ef:84:
2d:5e:f2:e9:32:1c:82:04:fe:44:1a:2d:4f:76:07:
7f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0E:73:C8:C1:E6:C0:FA:73:82:A5:67:D8:4A:7D:97:F9:17:3D:C9
X509v3 Authority Key Identifier:
keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4e:6f:62:f7:43:82:3d:d0:aa:65:fc:79:3b:c9:9e:cd:4b:
92:70:cd:d7:0f:de:39:2d:16:5e:2c:97:7a:bd:ce:c1:bc:15:
54:cc:e9:9c:3a:6b:42:80:43:f6:23:ba:fd:ae:0b:ee:22:eb:
c0:9a:50:3c:74:cd:91:b4:b4:65:eb:f1:0c:e5:37:4d:6b:8f:
55:43:9d:23:80:e2:6c:2a:7d:c0:2e:e4:ea:16:c2:87:b2:0a:
74:c8:50:cc:04:aa:a2:ed:aa:7c:4c:c7:05:31:ee:cc:ce:87:
a7:58:ee:d4:6a:f6:a0:eb:3a:18:4e:51:27:6e:c8:99:f1:10:
48:3c:dd:55:bc:ca:ca:ac:b0:81:b3:7f:49:11:1f:bd:67:1d:
9a:86:de:6e:f2:a4:c3:94:f6:9b:c7:cf:12:a8:17:ec:4f:b4:
d3:03:1d:6f:a7:90:e4:85:40:75:d5:21:c5:dd:0e:52:5c:90:
ba:da:b8:75:20:85:2a:c9:0c:b3:b3:9e:b3:ff:6c:a7:43:84:
cd:50:aa:3f:b4:b6:5f:d5:cf:25:59:b4:ba:ac:cc:4c:e2:d4:
20:0a:45:e0:2a:e8:2e:23:98:00:d1:f1:ef:30:b4:35:9a:bf:
09:4c:1d:79:91:b4:ee:0d:94:ea:6c:7a:a8:0f:1c:00:00:d8:
e7:69:27:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:47:05 2025 by rpki-client