Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
File: 8-7mn4nyRS3K6JgpR7LRRpU3lns.mft (raw, json)
Hash identifier: 5FQgE8NSDf++DpCt+JPpafD/co+rPOrvVTlQixLY1lY=
Subject key identifier: 16:5C:B5:41:CA:60:41:E7:B7:A9:7E:68:3A:D9:39:30:25:54:0D:5D
Authority key identifier: F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
Certificate issuer: /CN=f3eee69f89f2452dcae8982947b2d1469537967b
Certificate serial: 019921B13F58E9E2598083E8EB6BBA501C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 01:01:28 +0000
Manifest this update: Sun 07 Sep 2025 01:01:28 +0000
Manifest next update: Mon 08 Sep 2025 01:01:28 +0000
Files and hashes: 1: 8-7mn4nyRS3K6JgpR7LRRpU3lns.crl (hash: oznKU6On8ftUtXrLdCRWoKgxO0DtapNy1o1AXTNLcn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:3f:58:e9:e2:59:80:83:e8:eb:6b:ba:50:1c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3eee69f89f2452dcae8982947b2d1469537967b
Validity
Not Before: Sep 7 01:01:28 2025 GMT
Not After : Sep 8 01:01:28 2025 GMT
Subject: CN=165cb541ca6041e7b7a97e683ad9393025540d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:95:bd:a5:87:70:21:a2:32:d8:c4:62:1c:8b:
f7:79:73:8f:b8:bd:20:93:61:da:b5:92:9e:1a:70:
ac:9b:6d:e3:bd:a1:4b:b1:15:26:4c:be:c3:f1:4f:
82:66:01:bd:ee:d6:d2:9f:84:6d:e6:d2:8d:3c:89:
25:c5:5a:23:e5:b8:b7:e1:75:a4:8c:27:12:b4:0c:
10:a0:31:88:21:13:91:e8:08:45:21:dc:aa:b3:fc:
d9:bd:9f:ff:cb:24:ad:b5:65:01:3a:d8:40:03:13:
d8:c0:50:b0:c9:c0:0a:cc:06:fe:c2:b2:cb:17:18:
11:99:d8:6d:a4:60:67:b7:67:1d:2c:69:d7:44:31:
22:6a:c5:6f:7c:81:ad:d1:ee:61:92:ab:6a:78:b4:
1a:e4:e5:76:79:1a:48:15:78:57:84:5d:ac:95:08:
4f:f0:33:41:05:4c:1c:f6:bc:38:e6:30:b1:ff:1e:
a6:a3:30:0c:9a:55:26:23:df:3b:87:29:81:f6:3a:
8f:0a:de:54:cc:ed:8e:85:f0:92:34:20:9f:04:ec:
29:a3:37:60:68:bb:c8:75:e7:5d:fd:90:33:23:27:
d0:d8:8c:69:f8:95:1a:ed:3d:29:0c:9e:87:5e:31:
5e:4e:17:b3:84:4c:c8:bf:a1:58:2f:69:5d:db:af:
68:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5C:B5:41:CA:60:41:E7:B7:A9:7E:68:3A:D9:39:30:25:54:0D:5D
X509v3 Authority Key Identifier:
keyid:F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b1:b9:3e:09:65:e7:71:fc:b1:15:af:18:3b:04:b3:cb:6a:
80:56:1c:7e:68:e6:07:0f:ff:e6:a5:7d:74:b9:97:09:00:97:
02:0b:f0:84:b7:b9:71:c2:3e:e8:39:a8:5a:b2:7d:fb:71:af:
f9:31:e1:a3:4b:60:12:af:84:12:2f:09:3f:88:3e:63:64:97:
90:e1:e5:59:30:ef:dd:c1:3a:5c:9d:38:10:bf:00:1b:5d:83:
3b:1d:b2:6a:f1:09:ab:c9:c2:e4:c3:94:c0:a6:95:88:13:b3:
06:1f:4a:82:71:eb:71:28:72:35:53:b6:a2:04:72:48:3a:16:
e7:50:4d:e9:94:3f:87:7d:fb:fe:a2:53:14:4a:9e:8e:3b:e9:
a0:a1:20:d8:5e:9b:e9:da:41:46:2a:0c:d0:70:0d:b3:26:f7:
8f:0c:f8:16:16:85:42:25:f6:c7:98:fa:51:71:9e:b2:a9:f1:
4a:cf:d8:47:3c:95:5c:39:6d:14:3d:2e:a2:e8:4c:c4:ae:b2:
37:a4:03:62:22:12:9c:8b:69:83:6e:18:30:dc:e6:db:65:7c:
98:ee:05:cb:91:c1:ad:0e:67:9b:6f:a0:8d:76:83:b0:19:4a:
c7:19:59:a6:f4:8a:c1:c4:4d:e0:36:5e:9e:1e:35:bc:67:a0:
bb:5b:7b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:51 2025 by rpki-client