Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
File: R8x-nha98tTmHHXufgADPnZvmJc.mft (raw, json)
Hash identifier: MTx1renZumPQF60I/kfG5mFLym2y8Rvy+ijP9LqtMqU=
Subject key identifier: 32:14:AA:D8:5E:5F:3D:6A:AA:AD:91:4A:D1:85:1F:50:D4:21:EE:00
Authority key identifier: 47:CC:7E:9E:16:BD:F2:D4:E6:1C:75:EE:7E:00:03:3E:76:6F:98:97
Certificate issuer: /CN=47cc7e9e16bdf2d4e61c75ee7e00033e766f9897
Certificate serial: 01983D2A130D372C627D30BD5979C78660DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
Manifest number: 15F8
Signing time: Thu 24 Jul 2025 16:00:24 +0000
Manifest this update: Thu 24 Jul 2025 16:00:24 +0000
Manifest next update: Fri 25 Jul 2025 16:00:24 +0000
Files and hashes: 1: R8x-nha98tTmHHXufgADPnZvmJc.crl (hash: CBvIMUIMmfQDS+XaZp1OQUEz/f+JAyJZ6bMob2AKQfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:2a:13:0d:37:2c:62:7d:30:bd:59:79:c7:86:60:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cc7e9e16bdf2d4e61c75ee7e00033e766f9897
Validity
Not Before: Jul 24 16:00:24 2025 GMT
Not After : Jul 25 16:00:24 2025 GMT
Subject: CN=3214aad85e5f3d6aaaad914ad1851f50d421ee00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:e2:3d:f3:f4:f1:10:4d:d0:f2:b2:0e:13:
78:30:16:0a:30:5f:1b:03:81:fe:42:f0:63:12:89:
71:b4:87:35:ab:05:e8:8d:ac:b5:0e:13:de:1c:5c:
23:0b:eb:a4:34:21:9d:d8:3c:b2:ea:5d:95:a6:25:
18:92:84:50:e1:f0:13:0e:27:4e:d9:d6:79:03:eb:
f5:75:e3:03:60:28:a6:20:d2:b8:5a:c7:3f:90:06:
1c:c0:e8:7b:de:13:c1:76:6d:83:43:6f:d0:36:32:
32:e4:8e:d0:21:da:ee:9f:44:6e:9f:ed:39:39:6f:
d8:11:b0:ab:94:b4:07:30:7a:91:93:59:fd:e3:de:
d8:85:b7:18:da:65:44:58:d0:dc:fb:ad:00:7e:14:
37:50:64:d2:06:a6:e3:81:1a:c1:0f:c7:dc:61:a0:
36:93:a0:94:71:83:3e:93:74:47:8e:71:44:67:1b:
b7:c5:7e:3c:25:26:b0:4f:7e:4c:29:84:33:3f:48:
ff:a9:8a:7e:bd:b4:6d:b8:21:87:1d:4e:c0:c4:70:
47:1e:24:5b:f9:bb:05:6e:78:96:2f:07:96:46:fe:
a0:b4:25:16:ca:26:7f:33:b3:cb:bd:21:52:f2:e0:
d9:22:2c:a8:07:c5:30:b0:a4:71:72:26:bf:64:d6:
04:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:14:AA:D8:5E:5F:3D:6A:AA:AD:91:4A:D1:85:1F:50:D4:21:EE:00
X509v3 Authority Key Identifier:
keyid:47:CC:7E:9E:16:BD:F2:D4:E6:1C:75:EE:7E:00:03:3E:76:6F:98:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:75:aa:c9:15:bd:25:7a:82:87:11:a8:5d:fd:3b:3c:70:60:
09:2c:ae:df:0c:f4:a3:62:b4:b5:20:fc:ac:e6:d2:66:fd:b4:
b2:5a:26:17:af:5b:d3:5e:58:b7:9e:5e:47:35:b9:dc:20:fd:
cb:88:bd:23:ea:b0:0e:be:a2:90:1f:ba:cf:f8:cb:85:48:d8:
cd:e7:78:3b:75:ce:ab:e4:ca:58:f4:1e:7d:dc:37:62:7c:4a:
3d:ed:8f:e8:82:9a:aa:63:1d:12:12:2b:d6:53:7e:d8:37:26:
3e:b5:cc:ae:cc:f9:9f:64:32:db:ad:18:2c:06:5c:62:66:b4:
b8:05:7a:41:db:4d:3b:e8:9d:39:9b:af:45:2a:c8:8c:21:34:
ed:be:72:e5:d5:85:68:19:6d:37:3c:8b:b1:f8:6b:b1:d7:bf:
b4:23:1f:52:d9:a5:12:c0:0e:37:97:f1:96:d9:f2:1d:7f:f6:
68:d0:17:25:45:bd:97:1b:d5:9d:c1:de:f6:1d:a6:fb:56:6c:
a8:58:c8:de:34:b7:71:e6:f3:d0:8e:82:0b:0c:23:c6:51:f1:
1b:a9:a1:b0:c5:bb:0c:a5:e9:03:0d:0b:bb:05:b2:c3:bd:5c:
e3:3e:dc:6b:9e:43:24:33:2f:1a:7b:1b:e5:7b:8f:36:00:a7:
36:31:f7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:33:01 2025 by rpki-client