Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
File: 8runwtAt4Uiqno-gmhx6K3cKGdw.mft (raw, json)
Hash identifier: 01O9wcaGJIaqYyk7QfgWMp8KbL2IRp8p/26Wz1AKH30=
Subject key identifier: C2:4E:9A:14:DC:C4:3C:D7:BC:7A:07:90:B4:F9:3C:00:CA:26:DD:2D
Authority key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
Certificate issuer: /CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Certificate serial: 0198D65FBAFA16BEE68EDA51A80A224612EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:00:54 +0000
Manifest this update: Sat 23 Aug 2025 10:00:54 +0000
Manifest next update: Sun 24 Aug 2025 10:00:54 +0000
Files and hashes: 1: 8runwtAt4Uiqno-gmhx6K3cKGdw.crl (hash: Rmls239OKA+w3WXBsLQGozwDjqNUOzGZjYhlQbsnnZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ba:fa:16:be:e6:8e:da:51:a8:0a:22:46:12:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Validity
Not Before: Aug 23 10:00:54 2025 GMT
Not After : Aug 24 10:00:54 2025 GMT
Subject: CN=c24e9a14dcc43cd7bc7a0790b4f93c00ca26dd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:43:05:67:05:11:0e:c6:92:bd:c6:1d:aa:
4f:4d:c1:3a:94:00:cf:63:c3:5e:18:e5:28:3c:b5:
7f:5c:fd:ff:1a:9b:44:c7:4c:b1:36:97:1d:f7:a3:
87:f0:25:11:ff:30:f4:4b:43:99:98:18:65:08:dc:
18:d3:77:62:bb:cb:70:94:51:7b:6f:b5:c1:a0:80:
fc:cb:86:4e:65:97:dc:f8:d3:11:19:1a:1e:f6:ac:
9d:e5:09:c7:e7:cc:14:e6:71:d2:dd:cb:e6:f3:c4:
bd:53:30:27:11:19:a8:fc:a0:e0:f2:c0:c4:c3:ab:
c4:9d:08:5a:d9:1d:ad:c2:37:cb:41:9f:d3:56:31:
5e:af:6a:34:49:e2:b4:c5:a2:a9:7d:53:83:26:16:
8d:51:af:69:a7:df:5b:cd:76:03:3e:10:03:1f:98:
99:aa:8c:8c:6f:4c:0a:14:89:81:f6:7e:58:bb:8d:
ad:ad:07:dd:72:26:5d:91:3f:07:5e:dc:1b:3b:d9:
69:f8:2c:6c:a2:c3:26:8b:17:06:d3:c7:b1:d7:e8:
7a:a4:67:c8:7b:14:57:de:1c:9b:89:5e:0c:89:44:
c6:b4:b3:49:b3:ab:30:e6:1b:ea:9c:10:04:f9:37:
a9:fc:5e:0e:1c:b6:77:72:da:e7:a8:fb:ac:9f:6c:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4E:9A:14:DC:C4:3C:D7:BC:7A:07:90:B4:F9:3C:00:CA:26:DD:2D
X509v3 Authority Key Identifier:
keyid:F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9c:8c:55:aa:8d:32:b7:62:db:d1:7a:ec:1d:f4:21:53:60:
00:b2:5b:42:fc:a9:a9:61:e7:64:f9:7d:55:bb:88:30:6c:a0:
c5:ef:74:af:72:fc:96:bb:f2:75:e0:af:76:6b:8f:d3:26:c5:
87:c9:40:34:c8:22:1f:14:0f:8b:b5:ab:89:28:fe:89:b8:f3:
73:92:a9:b1:f2:7e:c9:4a:ae:34:ef:59:04:9c:bf:e6:c9:0f:
c7:f9:65:37:a9:ae:bd:16:ac:7d:d9:73:de:eb:5d:d8:0f:f3:
4b:63:9c:53:57:6f:9a:c6:9f:59:72:15:54:68:dc:3d:99:91:
b1:63:e0:34:e1:75:45:8e:d7:50:46:64:62:8e:78:48:70:73:
7d:ef:4d:7b:78:fc:d4:39:50:77:3a:d0:69:43:ed:ee:d0:21:
9b:03:d8:3f:75:67:69:57:b9:27:31:b3:aa:24:60:40:9d:07:
b1:66:78:c2:2f:e6:85:90:36:5f:e2:96:24:7b:97:cf:6d:61:
e8:86:0d:3b:8c:99:1e:dd:75:7f:c2:7e:f6:a3:28:f1:33:8f:
86:f4:ab:51:33:1b:0d:de:7e:eb:36:ed:81:4d:67:f8:0d:88:
c5:8c:43:a9:65:9b:bf:9c:f8:c0:76:e7:9f:0c:44:7a:3a:c7:
45:11:a5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:33:55 2025 by rpki-client