Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
File: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft (raw, json)
Hash identifier: C1SfDqXyhF6WbOQdrfQv+og+s095fMNoFqHH7WGMQwc=
Subject key identifier: 15:1A:6C:B2:8E:A0:6A:09:0A:A4:99:6C:23:ED:5B:7B:BB:F5:1A:62
Authority key identifier: F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86
Certificate issuer: /CN=f12b381e00d61621acc45cf18a3e70597d5b9186
Certificate serial: 0198A04E72400FCE850FAC6F1CD48C437110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
Manifest number: 12CE
Signing time: Tue 12 Aug 2025 22:02:32 +0000
Manifest this update: Tue 12 Aug 2025 22:02:32 +0000
Manifest next update: Wed 13 Aug 2025 22:02:32 +0000
Files and hashes: 1: 8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl (hash: fX2l8tTn8t/dLWmXhD2Az1ZB6DNELyPJ+tKw9qJYuJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:72:40:0f:ce:85:0f:ac:6f:1c:d4:8c:43:71:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b381e00d61621acc45cf18a3e70597d5b9186
Validity
Not Before: Aug 12 22:02:32 2025 GMT
Not After : Aug 13 22:02:32 2025 GMT
Subject: CN=151a6cb28ea06a090aa4996c23ed5b7bbbf51a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:67:75:44:ca:95:ec:9e:e2:bf:5b:90:35:2f:
94:26:99:db:e9:ec:1b:99:4d:c6:45:e1:84:62:ce:
47:97:85:5e:64:3a:ad:84:0a:9f:16:8f:91:52:a9:
e5:69:da:5d:a1:1b:56:8b:40:e4:41:24:ea:3f:50:
35:ab:95:01:8d:b2:9e:69:db:80:96:c5:1a:51:66:
bc:b4:6e:1b:30:62:54:07:12:03:48:33:17:bf:80:
4b:f8:42:73:b7:b3:dc:0d:49:03:a4:96:44:03:3a:
f0:5a:f0:62:ac:5c:5c:31:20:f6:45:f4:59:78:59:
2a:f5:00:65:fc:fd:f8:f1:c2:b6:04:75:39:37:1d:
46:53:b2:e7:95:df:c3:9e:0a:84:cb:74:ae:0b:d0:
f3:15:95:bf:a0:e2:77:9a:30:7d:bc:aa:66:57:4d:
ec:45:d5:45:40:0e:c6:8d:dd:c2:de:c8:2b:dc:dd:
99:83:f3:03:3e:05:37:b6:73:22:88:01:7b:ac:56:
bf:35:fe:83:b4:d0:d8:a7:98:72:cd:07:57:be:72:
37:81:84:8b:d9:00:3b:83:ed:43:ba:30:93:33:f8:
48:f4:42:d7:f3:5e:08:e1:35:a9:a6:4a:6b:2e:9f:
ff:a0:8d:73:e3:32:88:0b:e6:52:b4:d0:cd:76:e4:
68:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1A:6C:B2:8E:A0:6A:09:0A:A4:99:6C:23:ED:5B:7B:BB:F5:1A:62
X509v3 Authority Key Identifier:
keyid:F1:2B:38:1E:00:D6:16:21:AC:C4:5C:F1:8A:3E:70:59:7D:5B:91:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Ss4HgDWFiGsxFzxij5wWX1bkYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8b2c9f-15ce-434e-be93-5d436cef608f/1/8Ss4HgDWFiGsxFzxij5wWX1bkYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:13:58:e2:fa:ae:8c:97:c5:e4:06:d0:16:a3:fc:5d:43:3b:
da:43:dd:77:ff:cf:84:1b:99:8f:9f:ce:cf:16:41:4f:ec:54:
7a:40:aa:4d:3e:09:d7:5c:ac:2a:00:47:53:2d:c6:bb:ab:e5:
b6:b0:e7:80:6f:d3:fb:b1:4a:cb:29:eb:de:be:d5:8f:79:d5:
e1:56:2b:a7:ff:1d:7a:ff:09:3b:74:ff:4a:4b:e2:0b:3d:c6:
44:a6:fc:83:c2:d8:b1:c3:f4:dc:66:6a:57:19:54:ef:6d:e0:
69:c3:b1:0d:5f:e9:fd:fe:6e:63:be:0a:45:ae:b2:d4:e4:3b:
79:38:d1:71:c1:6a:ec:70:fe:54:a5:c0:ae:1e:c2:2a:c9:e3:
c2:a9:e5:19:ee:4b:19:ba:b1:3a:da:26:9a:5f:b7:12:43:32:
fa:3e:4b:2e:4c:53:17:59:a2:ef:47:b5:0b:ba:a0:98:bc:de:
32:96:ab:cb:be:2b:5d:f1:29:2c:80:e8:c7:6d:1a:92:5d:a6:
f2:b6:2b:69:cb:07:38:bf:2a:cd:45:8d:01:f8:35:2b:17:32:
62:b6:77:62:09:81:58:e9:b4:78:a8:20:45:db:c2:ab:a4:55:
cc:96:29:39:8b:05:9f:11:6a:34:da:c0:04:2f:e6:68:8a:ca:
99:80:b1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:43:00 2025 by rpki-client