Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
File: 8runwtAt4Uiqno-gmhx6K3cKGdw.mft (raw, json)
Hash identifier: 9g/wYOLxQV7FxfJWyUfz80/EtbKPEBuP/rBZI+d2H84=
Subject key identifier: 21:74:5C:FE:73:3E:93:28:B6:4C:CE:E5:B2:3D:FF:BD:73:AE:26:9C
Authority key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
Certificate issuer: /CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Certificate serial: 0199239F60E61BD41B6704BD86D6BBC75FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 10:01:11 +0000
Manifest this update: Sun 07 Sep 2025 10:01:11 +0000
Manifest next update: Mon 08 Sep 2025 10:01:11 +0000
Files and hashes: 1: 8runwtAt4Uiqno-gmhx6K3cKGdw.crl (hash: ZWnBUuODFpNQHUFA8UxDxUUn1iV8WYuU6edqhiK4QUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:60:e6:1b:d4:1b:67:04:bd:86:d6:bb:c7:5f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Validity
Not Before: Sep 7 10:01:11 2025 GMT
Not After : Sep 8 10:01:11 2025 GMT
Subject: CN=21745cfe733e9328b64ccee5b23dffbd73ae269c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:bc:01:64:75:b2:2d:bd:d1:17:c0:ba:b7:
e9:e7:4e:1e:24:60:6f:d9:5e:a6:e3:0e:49:12:df:
45:6d:d3:6f:a6:5a:89:4d:58:81:7a:8a:f2:4b:03:
51:d1:33:58:5a:7f:3e:4c:2c:16:d9:9d:b9:2b:7c:
7d:5f:64:bc:c4:6c:79:4c:8f:49:96:79:f2:8b:4e:
5a:4e:de:89:b5:97:05:a4:68:75:9f:ea:1c:85:75:
12:cc:16:54:3c:09:80:bb:2d:6c:44:33:24:f9:ec:
de:42:e5:fd:26:44:8d:b1:75:e5:4f:33:8b:9a:54:
e3:98:91:50:b2:65:52:16:b4:1c:ba:aa:fc:5d:28:
8e:00:4f:29:a1:7e:c8:e2:f8:95:65:e9:39:1c:87:
df:a4:ed:9f:61:76:ec:22:ae:ce:d8:0c:7c:27:c4:
bf:92:b4:9b:99:42:0a:bd:71:72:ff:e4:b7:5f:11:
01:44:84:18:10:3c:1a:09:b5:1b:6e:9a:20:26:3a:
d6:72:72:8a:6a:f0:e9:5c:34:de:2a:59:4f:04:34:
6c:4a:e3:6b:bc:d3:11:97:0d:ac:59:59:dc:cf:a6:
2c:68:b7:aa:d9:e8:8b:c7:c9:b5:93:cd:b4:e9:35:
7c:40:df:b7:47:df:a1:41:5d:77:46:de:3c:87:27:
4a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:74:5C:FE:73:3E:93:28:B6:4C:CE:E5:B2:3D:FF:BD:73:AE:26:9C
X509v3 Authority Key Identifier:
keyid:F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ea:37:53:4d:06:22:b7:0f:d2:01:94:50:c6:19:c0:f5:23:
26:aa:df:7c:6c:a7:09:b0:c9:19:4d:72:fd:8d:18:45:fa:d8:
97:d8:7b:64:c9:ec:d1:cd:02:86:d5:69:e4:c4:2c:86:58:ac:
ba:1a:0f:67:1c:3d:01:d0:20:a5:1f:bf:f3:78:56:b7:4e:57:
fa:1f:fc:db:e9:56:c6:2d:c3:d8:ce:97:53:66:16:72:53:d4:
cf:af:85:5b:0c:1d:5e:e9:22:f3:95:33:51:a5:0d:ce:12:eb:
4d:41:ee:e8:18:31:20:64:37:80:88:c1:4a:9b:2e:f4:00:12:
30:6b:a3:e3:04:d4:e8:f8:94:d5:df:cc:08:42:b3:63:da:f8:
5a:9c:83:ca:17:c3:37:dc:60:13:fc:f1:fb:50:6b:ac:3a:0a:
75:a4:eb:0a:b0:7a:b5:10:31:29:55:98:c9:13:86:45:b2:bc:
5b:d7:e2:b4:8b:93:49:8f:dd:6b:f3:27:27:96:d8:ae:c8:91:
32:c5:d1:e8:df:98:d3:2a:e2:10:b4:72:93:9f:ed:be:eb:b1:
ad:49:08:a7:d8:d5:b6:c7:c0:dd:d9:81:21:b9:48:5f:bb:d6:
46:96:aa:cf:97:5d:d6:4b:4c:2a:65:62:f7:15:69:56:f4:f4:
04:b7:35:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:46 2025 by rpki-client