Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
File: 8runwtAt4Uiqno-gmhx6K3cKGdw.mft (raw, json)
Hash identifier: A+MS6zDOZXuZU/gIh6P1IISE+Otxj1dkCCUBdbIMtdM=
Subject key identifier: CF:3A:38:1C:7D:E7:2A:C5:11:C7:B6:CE:F9:4F:A4:CE:05:17:40:11
Authority key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
Certificate issuer: /CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Certificate serial: 019A71B7CA34E21E930E72C32D29136037FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:01:01 +0000
Manifest this update: Tue 11 Nov 2025 07:01:01 +0000
Manifest next update: Wed 12 Nov 2025 07:01:01 +0000
Files and hashes: 1: 8runwtAt4Uiqno-gmhx6K3cKGdw.crl (hash: D5Doeqem1s1sPppkLbq+uH0/TnkjQmdjjiPfoWiL4LY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ca:34:e2:1e:93:0e:72:c3:2d:29:13:60:37:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Validity
Not Before: Nov 11 07:01:01 2025 GMT
Not After : Nov 12 07:01:01 2025 GMT
Subject: CN=cf3a381c7de72ac511c7b6cef94fa4ce05174011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:1d:29:13:ed:87:94:63:80:a0:12:59:cf:
5a:7b:17:5b:cd:de:f9:f4:a0:f8:24:c8:02:80:2a:
c7:06:48:30:d2:1a:dd:7d:51:63:be:b7:39:33:ab:
46:b8:85:85:a1:6a:7b:cc:71:e0:59:6a:ed:a7:db:
4c:a9:04:6a:c3:84:82:50:1c:42:42:7b:8b:a9:11:
2b:d9:e8:0e:be:e3:6c:0a:f4:0f:ce:08:c2:06:0b:
c0:cc:63:f4:11:84:53:a6:4e:d1:52:ae:84:cf:e3:
6b:0c:04:0c:bf:e4:f7:b9:84:b4:8f:91:f6:89:98:
28:9c:6d:e8:47:29:d7:cc:d1:57:6d:cf:bc:b4:dd:
b4:a9:e1:22:56:c2:59:83:97:66:ab:b5:66:bb:8d:
74:2f:a6:2c:78:98:23:c9:b2:49:84:db:90:ab:6c:
f4:76:75:eb:7a:52:a5:dc:b4:16:d5:e6:8f:d7:22:
25:94:9b:8f:88:61:30:9b:23:db:54:15:8b:f8:5d:
dc:c8:67:fa:40:69:10:3e:48:ff:16:e0:66:7f:a3:
70:fe:a0:c8:ee:e7:00:a2:a8:97:35:63:0b:a7:33:
3a:de:a0:cb:56:f4:8b:4e:51:77:83:15:7b:08:7a:
ab:6a:10:38:73:98:03:9e:90:0a:3c:ba:46:cb:1c:
ac:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3A:38:1C:7D:E7:2A:C5:11:C7:B6:CE:F9:4F:A4:CE:05:17:40:11
X509v3 Authority Key Identifier:
keyid:F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:98:ef:1f:3e:77:6b:30:12:66:68:c5:13:57:c3:48:8b:e1:
81:0e:e8:83:2c:ff:cb:2c:32:b0:9e:f3:eb:27:05:2e:da:86:
e0:3f:a4:27:88:2b:42:ff:22:14:56:8c:40:16:ef:c2:df:c6:
49:3d:57:67:87:93:40:70:67:4a:6d:c3:9a:00:19:01:e2:06:
d4:0c:62:45:c7:dd:70:7b:74:7f:fd:af:d4:c2:e9:79:91:ed:
3f:1f:b6:e4:49:3b:af:9c:21:c7:53:c9:cb:05:64:27:b5:51:
0f:32:63:70:c5:63:c5:ab:34:53:96:46:6d:aa:b8:79:70:54:
08:3c:57:66:e8:1d:a4:61:ae:6c:56:90:ca:6b:94:70:58:65:
38:78:f1:d2:07:34:d6:56:71:ec:34:26:f6:db:90:14:1b:86:
eb:3b:10:03:29:dc:34:5e:d4:c5:26:62:11:89:20:36:2a:94:
4b:6d:77:f8:77:af:ee:cf:02:51:e8:8d:42:22:36:6a:dc:fd:
2d:eb:59:12:d4:19:5c:a3:12:14:df:bc:a0:53:0b:f1:47:f1:
b8:2a:37:e1:41:b3:2a:e0:fc:a8:54:79:47:fb:e1:7c:23:b4:
a3:3d:eb:c6:b8:df:da:30:41:54:ed:d0:28:ef:f2:bc:0c:1b:
5b:46:e0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:15 2025 by rpki-client