Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
File: 8runwtAt4Uiqno-gmhx6K3cKGdw.mft (raw, json)
Hash identifier: WHg88Ha1z/YFjUxoDd3GxuTc0B2aGWFfCtFeFUgB+ao=
Subject key identifier: 30:02:40:F3:60:58:F6:3A:B2:E9:C4:5E:1E:16:A3:B7:FC:21:98:3F
Authority key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
Certificate issuer: /CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Certificate serial: 0196BF6FCA1846C418E296D54B9C1750D051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 13:01:36 +0000
Manifest this update: Sun 11 May 2025 13:01:36 +0000
Manifest next update: Mon 12 May 2025 13:01:36 +0000
Files and hashes: 1: 8runwtAt4Uiqno-gmhx6K3cKGdw.crl (hash: tQIDuZMobZ3/XLDIqqcouXDNAlpujTTXaLoi9WyZlEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:ca:18:46:c4:18:e2:96:d5:4b:9c:17:50:d0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Validity
Not Before: May 11 13:01:36 2025 GMT
Not After : May 12 13:01:36 2025 GMT
Subject: CN=300240f36058f63ab2e9c45e1e16a3b7fc21983f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ba:9e:1a:8d:02:24:3a:c0:b5:76:21:16:ff:
a9:0c:49:8b:b0:89:ef:67:a0:06:46:57:a6:eb:18:
d9:b4:06:32:2f:24:05:17:95:35:3f:26:c4:95:9c:
2e:87:84:ba:a8:27:c3:d7:e7:a2:a1:b3:7c:cd:98:
43:dd:49:65:09:8a:99:1e:cc:f2:af:1f:ce:ad:85:
cc:e7:b2:5a:eb:72:d4:f4:83:0c:55:43:ce:55:c6:
b9:3d:2e:31:5e:0e:3c:f4:f3:6a:b1:aa:b8:a9:20:
8a:c8:1e:0a:07:ea:ec:d4:78:32:3d:e3:fe:0d:c1:
66:9b:a3:24:1d:c8:d5:af:d8:04:a2:97:ef:62:ae:
60:12:a6:b9:e3:fb:51:93:12:ec:7f:d6:76:21:b7:
26:35:c9:92:46:83:95:2f:03:40:ce:d9:53:44:4a:
57:1b:f2:e3:67:7a:9b:01:b2:b3:01:5a:1b:22:e6:
0c:3c:2d:a6:e1:50:0f:ad:8f:97:6c:41:ae:5b:60:
cf:88:2b:b0:a6:6b:a0:6a:2c:6b:6f:2c:22:2e:cb:
78:02:26:54:0e:fc:d7:1c:ce:90:4d:5f:d1:1d:3e:
0e:cc:94:59:9d:5d:50:da:a7:57:61:41:d3:85:fa:
6c:31:bf:e6:73:24:34:04:85:df:4c:e5:6c:97:83:
d1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:02:40:F3:60:58:F6:3A:B2:E9:C4:5E:1E:16:A3:B7:FC:21:98:3F
X509v3 Authority Key Identifier:
keyid:F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:66:98:9a:59:55:b8:a5:92:6f:71:3a:56:bd:f9:2c:88:66:
67:b0:04:68:15:bc:6c:59:fb:f8:de:d2:0f:0b:f2:24:53:c0:
7b:f6:d1:75:8b:d8:8b:1a:0d:ba:cf:7d:ef:81:ad:76:d1:71:
c3:31:0d:ba:09:d9:85:61:fd:85:cc:0b:55:16:eb:b4:fd:92:
5b:53:12:b7:91:d2:80:0f:8f:31:13:20:67:bf:cf:6f:f4:cf:
e8:37:92:af:ff:01:e5:3f:91:e4:c5:77:4d:f0:b3:29:6b:c9:
27:00:67:e2:3d:63:68:84:3e:59:be:6b:0a:25:9f:59:cd:d5:
86:06:59:4a:05:92:eb:33:d7:f1:8e:a8:70:44:7d:de:b1:c5:
1b:60:ea:f9:65:08:a6:fb:52:7c:3f:4c:30:0f:90:92:8e:29:
00:d3:eb:a3:e4:46:e5:78:98:d6:a4:b4:5c:e4:d7:1d:a1:c0:
31:3f:45:d5:21:6e:1e:85:06:bf:05:11:b5:16:32:a3:b4:d9:
a8:94:1f:61:31:89:37:ad:f9:f0:5f:62:db:fe:f4:46:a3:62:
92:40:f3:89:c9:43:13:1d:3b:cb:ae:fe:b2:59:72:61:21:ab:
f6:5f:45:b4:f0:ed:35:6e:16:a2:35:93:de:b2:a4:29:31:ab:
ae:75:bc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:17:33 2025 by rpki-client