Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
File: 8runwtAt4Uiqno-gmhx6K3cKGdw.mft (raw, json)
Hash identifier: 022NJzDGLldzkKbelhkoNg/qIaXKoiKT4xX6dcK7Dqg=
Subject key identifier: 3F:D0:CD:8B:71:3C:AC:C9:AC:92:6E:0A:3B:DA:7D:25:7C:94:2B:B5
Authority key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
Certificate issuer: /CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Certificate serial: 019A4EF479BF4BD677E13081215BB573F628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:00:35 +0000
Manifest this update: Tue 04 Nov 2025 13:00:35 +0000
Manifest next update: Wed 05 Nov 2025 13:00:35 +0000
Files and hashes: 1: 8runwtAt4Uiqno-gmhx6K3cKGdw.crl (hash: LzJESiQhKciyuG8HBh7MmDFVLJye08EF8qoYG1ucEYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:79:bf:4b:d6:77:e1:30:81:21:5b:b5:73:f6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Validity
Not Before: Nov 4 13:00:35 2025 GMT
Not After : Nov 5 13:00:35 2025 GMT
Subject: CN=3fd0cd8b713cacc9ac926e0a3bda7d257c942bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:44:cc:d6:3a:61:ff:d4:26:1e:50:37:08:ae:
f8:01:eb:2e:e1:1a:de:9a:8e:d8:f4:72:13:2c:f3:
bb:db:6b:a9:d7:9e:11:89:02:3e:7a:8b:46:c4:72:
dc:c6:5a:30:4c:a4:24:0c:09:d8:b1:11:2c:53:58:
56:fd:99:ea:2c:38:78:61:97:c9:a4:21:a1:14:9e:
4b:f2:e0:dd:3b:6a:13:46:84:4a:2a:6d:5e:43:6c:
81:0b:8f:15:3a:42:fd:ae:bd:be:69:2b:6f:08:0c:
d8:c4:31:38:36:34:e4:06:1c:7b:82:73:b5:26:a2:
4b:8d:c4:02:82:14:95:0b:89:9e:59:1c:bd:21:81:
54:97:8a:ff:56:d2:d7:ec:b3:d6:d2:3a:03:6f:2f:
18:81:f1:8b:04:af:44:50:14:8c:c1:65:0f:78:bc:
60:11:4b:c0:1e:b3:93:68:c7:b1:fb:6a:c4:86:ce:
50:44:36:33:c4:e4:3d:c1:84:b0:63:9c:cc:5f:90:
a7:ff:b8:86:23:37:26:b9:1c:58:f0:c0:06:92:37:
49:b7:38:44:77:5f:ad:6e:6d:4a:19:b3:a7:06:31:
0d:f2:28:c7:0d:46:c2:a7:a4:3d:a0:66:c8:27:e0:
9c:2b:33:c8:50:32:1e:40:a1:55:a8:de:ea:31:d3:
bf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D0:CD:8B:71:3C:AC:C9:AC:92:6E:0A:3B:DA:7D:25:7C:94:2B:B5
X509v3 Authority Key Identifier:
keyid:F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:60:fb:54:23:3e:c0:02:bd:01:43:08:ed:20:97:94:dc:c4:
b3:0c:39:d5:b8:8d:85:c0:ed:df:11:f4:c6:ec:d1:1c:f5:91:
6e:21:0d:e6:5d:94:af:a9:f3:c2:8f:ba:79:95:4d:27:3e:c4:
bc:67:27:69:ec:e6:25:b8:0b:43:6f:ab:3e:eb:d0:4e:f5:8b:
fd:90:be:99:a4:95:82:e2:c5:a5:79:40:1d:f0:17:e9:3f:64:
cc:53:1a:0c:7e:f7:25:25:9b:8f:03:92:9f:17:75:62:f9:23:
f4:3a:e2:7a:69:e3:d0:d4:ff:97:f4:34:8f:54:57:1f:7d:a3:
4d:16:ea:5b:65:52:ae:2e:71:07:3f:41:55:d4:20:b8:15:ef:
60:c9:ea:0a:2f:ca:c2:4b:5e:b0:b3:3e:e8:09:cc:f0:25:2a:
30:1a:b1:e8:f6:9c:cc:84:68:ef:90:0e:b9:e5:ff:af:1f:61:
e8:0e:13:ad:c8:13:67:8d:f2:a9:87:63:ed:08:bf:bc:b7:be:
73:a6:a0:ca:2a:f2:6f:a1:2d:99:93:51:a6:83:ac:45:ce:30:
de:d4:08:93:8c:ca:1e:cc:f2:92:86:e1:41:e7:9a:5a:5a:a1:
49:b8:60:25:cb:2f:4f:8f:37:2a:f5:b2:74:bb:7d:4e:e8:0b:
b7:b8:25:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:25 2025 by rpki-client