
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
File: 8runwtAt4Uiqno-gmhx6K3cKGdw.mft (raw, json)
Hash identifier: aB253LBOQyXr4uhAaKzFjaCCHTx3MV3tQfjgsQHu0WE=
Subject key identifier: DF:24:30:D8:0F:0F:37:EC:4E:DC:4E:BC:C5:82:4E:CD:26:22:8A:3A
Authority key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
Certificate issuer: /CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Certificate serial: 0199FDD8B82D812D38D9DFE2E5B67C0ED7ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 19:01:02 +0000
Manifest this update: Sun 19 Oct 2025 19:01:02 +0000
Manifest next update: Mon 20 Oct 2025 19:01:02 +0000
Files and hashes: 1: 8runwtAt4Uiqno-gmhx6K3cKGdw.crl (hash: 3BCz9szF7pE7P+pGmt0IZ7wE73bkun3wzHSwUhRYfS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:b8:2d:81:2d:38:d9:df:e2:e5:b6:7c:0e:d7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Validity
Not Before: Oct 19 19:01:02 2025 GMT
Not After : Oct 20 19:01:02 2025 GMT
Subject: CN=df2430d80f0f37ec4edc4ebcc5824ecd26228a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bd:af:7d:c2:21:04:93:0a:b6:ab:87:b6:b9:
8c:6c:c8:81:97:33:8b:56:0c:3d:15:91:0b:56:36:
de:25:ee:fa:a6:b6:d3:39:8d:63:dd:74:c4:f8:19:
a7:5e:87:c3:0f:8f:ca:92:c9:ef:b4:fa:ab:08:40:
41:48:51:f2:8f:fa:57:35:fc:c9:f4:8f:b7:03:95:
80:2d:16:0d:3a:c6:08:16:75:10:10:c3:d5:16:e8:
1b:db:73:cd:9f:42:d3:9e:79:f4:4a:24:f1:3d:99:
1f:fc:7f:8c:7d:0a:6e:f0:4f:16:41:a5:f7:33:e3:
c4:60:95:b8:ab:5f:08:f4:96:c7:ba:25:87:44:10:
84:dc:90:61:99:28:3d:e0:3e:ff:fa:39:07:20:0b:
54:61:a8:68:b5:09:e7:1f:f8:66:8b:fb:37:91:eb:
14:e6:b1:82:86:2c:b7:cb:e9:87:03:74:fd:2e:c2:
b5:c5:ed:4a:da:07:b3:2a:26:cf:46:bc:9b:88:5b:
a0:fd:f5:1f:40:9f:ba:17:37:15:27:b3:86:63:38:
2b:a0:be:22:d4:9b:8f:4e:48:0a:cd:a1:75:8b:35:
ee:24:d1:12:0a:00:c8:1f:e0:b4:b7:0a:0d:73:0f:
f3:00:99:f0:c3:2b:a7:9d:be:ab:00:1c:9d:3f:19:
02:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:24:30:D8:0F:0F:37:EC:4E:DC:4E:BC:C5:82:4E:CD:26:22:8A:3A
X509v3 Authority Key Identifier:
keyid:F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b6:3d:97:9d:8e:09:bb:1a:0f:33:cf:80:ad:e7:3b:6a:48:
86:b8:71:47:ec:e0:f9:85:d3:b2:29:0a:f2:a9:e2:7a:ad:40:
4d:14:62:b9:21:e5:49:5e:85:a1:ec:14:ee:78:78:d5:a6:61:
be:11:76:e7:d7:44:d8:b7:2d:ad:cf:68:40:4b:e2:05:c2:6a:
a2:e9:c5:0b:a5:0e:94:f6:9f:88:5a:fe:61:fc:a4:93:bb:da:
cf:2b:9a:52:d3:c5:fa:7c:61:0a:74:a8:d3:66:3a:b1:ef:be:
d9:3d:1f:b8:76:ba:06:82:32:1b:8f:57:b5:77:3f:84:be:17:
1f:bf:e2:9f:bc:aa:e5:a9:29:ac:e9:5d:94:0c:fe:cd:3d:f1:
91:d5:67:e8:a9:50:75:f0:0e:a3:fb:d5:d5:4d:7f:3d:c9:34:
27:f3:f0:05:db:71:ef:f1:0b:5b:a8:f3:90:e7:8f:82:08:b0:
c4:a3:be:7b:47:de:fa:af:21:44:8f:b3:dc:80:f7:86:30:bc:
5d:02:c3:d8:e6:41:d0:1a:ae:c6:7c:83:66:e3:bf:d7:19:e0:
01:32:58:87:78:85:07:e7:12:8c:39:15:54:62:f3:fe:57:8d:
b0:24:54:3e:2f:5d:7a:ad:71:d2:6c:a2:a5:6d:c1:6f:3b:6b:
f6:1a:07:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:14:26 2025 by rpki-client