Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
File: 0KFr9-DjuTMLVEg-GfYTsCtie-8.mft (raw, json)
Hash identifier: /c8WnszjE7XvsAey1HwV/TKdzmXAGr6HjmmDiErr0Xw=
Subject key identifier: 83:CE:D5:C1:61:CF:27:67:72:2E:E1:66:BE:09:69:8B:2C:75:F8:D2
Authority key identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
Certificate issuer: /CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Certificate serial: 01988F59DEA7A49E17D021C95793880511C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
Manifest number: 1060
Signing time: Sat 09 Aug 2025 15:01:28 +0000
Manifest this update: Sat 09 Aug 2025 15:01:28 +0000
Manifest next update: Sun 10 Aug 2025 15:01:28 +0000
Files and hashes: 1: 0KFr9-DjuTMLVEg-GfYTsCtie-8.crl (hash: IoeVCNXefTca76YT5tF7bb590Q4fJp5AKChuQbfppmI=)
2: s0kyiXR6V1bkt2ciUZ2EpXqYq0U.roa (hash: BMvoEX7a6X6vFfIWsQqEPuUPXNmqfef7qS8aBYQEmho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:de:a7:a4:9e:17:d0:21:c9:57:93:88:05:11:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Validity
Not Before: Aug 9 15:01:28 2025 GMT
Not After : Aug 10 15:01:28 2025 GMT
Subject: CN=83ced5c161cf2767722ee166be09698b2c75f8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:60:7f:34:35:da:4a:5c:e4:43:cb:e9:d4:
17:fe:2f:63:5f:bd:87:b0:ef:58:6b:9c:b6:7f:b6:
41:32:54:b5:36:b7:d1:d6:1a:db:42:f9:13:57:95:
cb:ad:1a:2d:2e:7f:11:35:89:76:2e:5b:ff:91:6b:
ad:0d:db:d7:24:47:ef:f1:83:4c:36:29:a2:e7:05:
1b:07:c4:e3:f2:c7:81:c6:b9:4a:02:c2:59:82:a7:
52:49:c7:99:b0:13:5c:48:26:70:bd:33:71:ca:26:
9d:14:b3:da:db:33:b8:aa:a9:fb:72:e5:bd:f8:12:
10:90:fe:4b:99:22:f7:9b:98:27:1d:84:03:de:af:
ba:1e:d7:8f:0f:c4:17:7c:00:9d:57:58:03:a1:bd:
2b:39:3f:76:5b:1e:bf:33:f6:1f:b0:5e:62:e1:4f:
44:89:fe:c0:c3:28:fb:9e:bc:86:9e:94:73:be:07:
ee:dd:59:4d:3e:a8:98:61:60:62:24:fc:c8:f6:55:
16:72:e5:5f:b8:4e:17:6b:14:fc:cd:b9:a0:b5:51:
6d:ee:c7:a7:38:ef:40:be:5d:ee:81:0d:25:43:0a:
d3:b8:c3:98:a9:0f:2c:a1:79:27:ec:b2:ac:67:8e:
cb:65:48:09:a0:9e:76:c6:dc:3a:3b:b9:17:87:16:
5e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CE:D5:C1:61:CF:27:67:72:2E:E1:66:BE:09:69:8B:2C:75:F8:D2
X509v3 Authority Key Identifier:
keyid:D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f1:3d:a1:f9:1d:9c:47:4b:4d:6a:22:0f:94:bc:fc:96:bb:
fb:5d:16:67:35:7c:c4:7f:e2:c8:d5:19:07:3b:2b:e7:d0:23:
3c:79:35:15:41:fe:7e:f6:66:53:67:3c:8c:61:c7:78:2c:d3:
12:14:90:2e:e1:01:25:4f:30:ac:ab:e5:17:92:04:a3:4e:f5:
a2:94:7e:c6:bb:67:1e:2c:93:98:20:11:3f:18:72:4a:f0:8e:
26:36:27:0e:1b:88:01:b9:9b:a2:f7:5b:c3:a7:23:fb:f0:a4:
25:5c:d0:fe:89:e5:0e:f9:53:01:ac:cd:68:37:4b:74:a0:c8:
b6:a9:54:68:d3:74:3f:db:22:d4:9d:82:ed:a1:b6:e8:fb:d7:
45:84:23:5b:49:2f:02:0b:09:52:e9:7b:85:2d:68:f0:61:f8:
8b:89:c5:87:e6:e6:77:bd:56:cf:19:e5:9e:25:84:0d:65:bd:
29:b6:64:2e:d3:a5:55:dc:d7:94:35:e3:b8:2c:0c:c7:83:ed:
05:72:9d:9b:b3:88:38:98:1b:2f:dd:86:31:53:9c:8b:73:9f:
f9:64:eb:0b:4a:f8:71:0d:bd:f8:93:35:22:fe:48:89:01:e1:
dd:15:e1:1a:fc:9d:a7:60:ec:16:a1:9c:c0:0b:20:bb:f8:fe:
78:0e:d0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:42:25 2025 by rpki-client