Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
File: 8runwtAt4Uiqno-gmhx6K3cKGdw.mft (raw, json)
Hash identifier: ceyPIjo1+6LLFh7VgNksW/bqdamGXojrqzyUXVYIdgk=
Subject key identifier: 13:73:2E:C2:41:02:79:81:5F:84:EA:6E:68:CC:E7:B5:E8:C0:11:ED
Authority key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
Certificate issuer: /CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Certificate serial: 0197B8907C5ABD6CA6ECDB4D5ED6AA7C79D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 22:02:46 +0000
Manifest this update: Sat 28 Jun 2025 22:02:46 +0000
Manifest next update: Sun 29 Jun 2025 22:02:46 +0000
Files and hashes: 1: 8runwtAt4Uiqno-gmhx6K3cKGdw.crl (hash: zH5yfxKrmPhTkuo85Gku7B17dMtgU/Fl1852EhKiNdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:7c:5a:bd:6c:a6:ec:db:4d:5e:d6:aa:7c:79:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Validity
Not Before: Jun 28 22:02:46 2025 GMT
Not After : Jun 29 22:02:46 2025 GMT
Subject: CN=13732ec2410279815f84ea6e68cce7b5e8c011ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9e:38:2b:8b:53:44:d3:0b:ed:28:fb:83:3f:
e1:d5:c4:7e:c6:4e:9e:30:1c:19:7b:a5:f9:33:3d:
5b:f2:be:99:3e:fa:0a:0e:40:e5:ce:1c:c3:f0:b3:
d3:0d:28:65:1e:c6:37:8c:b8:13:31:c6:ab:c0:8f:
03:4c:3a:a1:40:20:b2:f4:a5:db:14:69:25:6b:cc:
2e:8a:27:85:07:99:3b:09:90:c8:cc:1d:5e:d7:ab:
39:62:28:25:ab:ca:63:9a:77:ab:be:03:5d:3d:fd:
d0:40:69:85:1a:5d:b1:a1:5b:73:07:69:45:7b:d3:
c8:8c:ce:3b:2c:c4:7a:ed:cb:fd:30:c1:96:b8:92:
19:b9:aa:0f:60:ab:04:ac:d3:ba:b0:5d:a0:a7:5d:
c9:85:27:ae:7e:ed:08:be:7d:00:51:9e:14:38:99:
ac:4b:74:07:02:ea:1e:01:61:66:88:f2:ea:f9:7e:
39:8b:50:aa:65:e8:da:cd:6c:6a:02:aa:36:b3:6b:
71:e7:02:95:46:0b:d6:f7:e7:8d:d8:97:f9:0c:91:
8d:95:b8:9e:0c:a0:50:7f:e4:41:93:01:cc:b3:22:
67:52:5e:3c:10:50:a6:bd:e1:80:aa:46:76:14:ae:
29:02:dd:cb:a7:07:1e:f6:6c:73:d2:89:ee:92:cf:
6b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:73:2E:C2:41:02:79:81:5F:84:EA:6E:68:CC:E7:B5:E8:C0:11:ED
X509v3 Authority Key Identifier:
keyid:F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:27:d5:99:ba:b9:9f:41:60:9b:de:e2:d9:b7:60:13:89:b9:
ee:b5:f5:49:19:2a:87:86:73:81:5a:2e:a8:d9:88:66:f9:cf:
5d:07:72:7e:89:81:c4:6d:81:8e:9b:a2:db:10:ab:21:84:17:
44:64:6f:db:ce:0e:fa:49:6f:ed:84:18:10:af:16:d1:46:50:
2d:24:e7:c4:e3:bf:93:e2:76:4c:58:63:c0:74:52:d8:04:6b:
a4:db:b7:5c:18:5d:41:ec:b7:e7:87:af:c1:ca:09:5d:77:b7:
dc:2e:ee:60:1c:39:65:8e:f3:10:0c:c0:45:3a:3e:99:26:f1:
2c:01:13:0d:96:4e:b5:ef:93:a1:02:ae:19:d2:39:75:2f:23:
df:d4:61:8d:84:c3:27:36:56:ca:58:bd:55:fe:87:b9:0a:f3:
f8:da:0c:f6:55:e6:8e:83:22:29:64:f8:db:dc:1f:15:5c:99:
d7:a6:77:b5:9a:99:9a:6b:89:67:dd:08:bb:36:de:91:7a:b7:
59:27:c8:6f:5d:c8:4d:4e:0b:8f:0c:40:90:78:16:85:f1:cd:
d1:7d:88:a2:91:36:71:f1:93:42:3f:3a:aa:45:fb:b4:a8:04:
f7:48:64:d0:02:37:81:40:4c:0f:b1:69:0b:5c:14:eb:87:1a:
f3:03:e0:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kHxavWym7NtNXtaqfHnYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYmJhN2MyZDAyZGUxNDhhYTllOGZhMDlhMWM3YTJiNzcw
YTE5ZGMwHhcNMjUwNjI4MjIwMjQ2WhcNMjUwNjI5MjIwMjQ2WjAzMTEwLwYDVQQD
EygxMzczMmVjMjQxMDI3OTgxNWY4NGVhNmU2OGNjZTdiNWU4YzAxMWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ44K4tTRNML7Sj7gz/h1cR+xk6e
MBwZe6X5Mz1b8r6ZPvoKDkDlzhzD8LPTDShlHsY3jLgTMcarwI8DTDqhQCCy9KXb
FGkla8wuiieFB5k7CZDIzB1e16s5Yiglq8pjmnervgNdPf3QQGmFGl2xoVtzB2lF
e9PIjM47LMR67cv9MMGWuJIZuaoPYKsErNO6sF2gp13JhSeufu0Ivn0AUZ4UOJms
S3QHAuoeAWFmiPLq+X45i1CqZejazWxqAqo2s2tx5wKVRgvW9+eN2Jf5DJGNlbie
DKBQf+RBkwHMsyJnUl48EFCmveGAqkZ2FK4pAt3Lpwce9mxz0onuks9r0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNzLsJBAnmBX4TqbmjM57XowBHtMB8GA1UdIwQY
MBaAFPK7p8LQLeFIqp6PoJoceit3ChncMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHJ1bnd0QXQ0VWlxbm8tZ21oeDZLM2NLR2R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85NTcxMDktMzg5Mi00ZGM0LTgxNmEt
NWJkZDE0MmJhZTc0LzEvOHJ1bnd0QXQ0VWlxbm8tZ21oeDZLM2NLR2R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy85NTcxMDktMzg5Mi00ZGM0LTgxNmEtNWJkZDE0MmJhZTc0
LzEvOHJ1bnd0QXQ0VWlxbm8tZ21oeDZLM2NLR2R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyfVmbq5
n0Fgm97i2bdgE4m57rX1SRkqh4ZzgVouqNmIZvnPXQdyfomBxG2Bjpui2xCrIYQX
RGRv284O+klv7YQYEK8W0UZQLSTnxOO/k+J2TFhjwHRS2ARrpNu3XBhdQey354ev
wcoJXXe33C7uYBw5ZY7zEAzARTo+mSbxLAETDZZOte+ToQKuGdI5dS8j39RhjYTD
JzZWyli9Vf6HuQrz+NoM9lXmjoMiKWT429wfFVyZ16Z3tZqZmmuJZ90IuzbekXq3
WSfIb13ITU4LjwxAkHgWhfHN0X2IopE2cfGTQj86qkX7tKgE90hk0AI3gUBMD7Fp
C1wU64ca8wPgFQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:35 2025 by rpki-client