Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
File: R8x-nha98tTmHHXufgADPnZvmJc.mft (raw, json)
Hash identifier: nBFEPMuWj2UXBzxWbz71SifHa2p7JDAO9nO9BUmW22s=
Subject key identifier: AE:C4:7C:75:B1:5E:97:07:24:B1:AC:21:E3:29:C8:49:C9:A3:D6:16
Authority key identifier: 47:CC:7E:9E:16:BD:F2:D4:E6:1C:75:EE:7E:00:03:3E:76:6F:98:97
Certificate issuer: /CN=47cc7e9e16bdf2d4e61c75ee7e00033e766f9897
Certificate serial: 0198D5BC1438850EB348CDB987E278B288CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 07:02:09 +0000
Manifest this update: Sat 23 Aug 2025 07:02:09 +0000
Manifest next update: Sun 24 Aug 2025 07:02:09 +0000
Files and hashes: 1: R8x-nha98tTmHHXufgADPnZvmJc.crl (hash: AuJ0flvVUy3uhP/kUQhniJXgFzWZkPaIM/D+1Ls/rgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:14:38:85:0e:b3:48:cd:b9:87:e2:78:b2:88:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cc7e9e16bdf2d4e61c75ee7e00033e766f9897
Validity
Not Before: Aug 23 07:02:09 2025 GMT
Not After : Aug 24 07:02:09 2025 GMT
Subject: CN=aec47c75b15e970724b1ac21e329c849c9a3d616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:39:d7:fe:78:9e:7f:52:63:91:36:9a:28:
d5:18:3f:d6:36:9e:5a:f5:08:79:65:66:db:9b:02:
64:a3:73:96:7b:ac:37:ab:99:de:6b:fb:d4:64:d4:
04:49:c8:a8:10:7e:0c:d2:1d:c3:42:33:c9:31:9e:
64:a3:c6:f9:c2:75:95:a9:b5:af:28:19:77:bf:aa:
01:6a:62:3b:e0:93:15:17:ba:bf:ec:2e:4c:3c:19:
f8:23:c4:3b:25:b8:29:a5:c9:36:bf:5e:1d:43:9c:
4e:e2:aa:17:3a:b6:ad:b9:f5:2e:bd:f8:d4:1f:a6:
d7:ea:bf:3e:9c:f9:0f:3d:7f:eb:18:03:87:8a:9e:
60:8e:3b:05:0c:71:69:58:55:46:e7:7a:9d:12:71:
35:86:10:03:aa:ed:89:67:1e:87:4d:5b:e6:8c:8e:
44:ce:4a:cc:9a:90:c3:67:fc:e4:b2:40:9b:2e:d5:
c9:6a:ea:49:01:79:8b:2a:0d:27:ca:9c:f8:9e:f0:
5b:fa:09:22:bd:22:9a:5a:d1:40:50:be:74:95:5c:
42:e9:a2:a1:a5:8c:1e:80:a5:db:1e:00:c4:0b:73:
fb:b3:a0:e5:d6:f0:5b:72:f5:f0:5f:9f:5c:30:f7:
c9:3a:82:ed:ac:63:19:d7:65:7f:b1:8e:0b:c6:71:
44:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C4:7C:75:B1:5E:97:07:24:B1:AC:21:E3:29:C8:49:C9:A3:D6:16
X509v3 Authority Key Identifier:
keyid:47:CC:7E:9E:16:BD:F2:D4:E6:1C:75:EE:7E:00:03:3E:76:6F:98:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:4b:ec:02:48:f7:fa:37:47:a9:a9:4f:9c:9e:d0:a0:b6:ca:
21:a8:24:f2:d0:5e:df:e4:9e:80:c7:d0:0d:b2:c1:e4:00:f7:
9a:4f:a2:50:8f:e4:e1:c1:6b:5e:6d:d5:b2:a5:e3:5c:c2:26:
74:19:dd:2d:84:f2:43:0a:5a:96:d5:00:17:5a:a2:16:4e:a7:
dc:f9:8f:68:2c:fc:29:02:3d:a6:17:7c:e3:8c:d7:db:8a:1a:
0d:4a:5f:ac:8f:f5:62:ff:25:bd:c4:45:7c:80:44:65:ca:46:
32:e1:b4:ec:42:34:b4:ec:29:eb:44:8f:4c:ae:7e:1f:d5:38:
9e:3a:f4:b6:6b:e7:5a:c6:78:a5:0d:bc:76:58:47:21:2a:1e:
16:5d:28:34:61:c9:9c:05:7d:4e:01:11:d9:34:0f:02:fd:91:
42:7e:36:5d:b4:42:17:18:ce:50:78:f7:1e:86:34:e5:55:59:
df:b0:56:ce:5c:2e:03:5c:01:df:62:f5:34:b9:0e:0d:28:4c:
e7:aa:a9:f0:be:6e:7d:a6:48:7a:26:35:2e:9b:db:36:3c:15:
a9:10:6e:33:0e:7d:9a:36:41:38:d1:f0:e7:1f:86:a9:13:42:
7d:39:f0:f8:e7:44:bb:42:2b:b4:6b:aa:c9:b6:71:0d:cc:be:
e0:67:d9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:59 2025 by rpki-client