Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft
File: Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft (raw, json)
Hash identifier: og+FOpZd2DTjHs41vBi6cIGhYCZJ2BecbYqBGRfAyi0=
Subject key identifier: C1:5C:0F:26:B6:33:D6:86:23:74:58:2A:CF:7D:3A:E7:BF:2F:58:FE
Authority key identifier: 46:EE:A0:5D:DB:D3:89:DE:CA:F1:8D:B8:0E:3E:11:BF:9C:28:5A:88
Certificate issuer: /CN=46eea05ddbd389decaf18db80e3e11bf9c285a88
Certificate serial: 01987CE4EAC607688A4A4041987A6970AF80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft
Manifest number: 12C3
Signing time: Wed 06 Aug 2025 01:00:33 +0000
Manifest this update: Wed 06 Aug 2025 01:00:33 +0000
Manifest next update: Thu 07 Aug 2025 01:00:33 +0000
Files and hashes: 1: Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl (hash: pY4LJOnd9ae9BgrbnoxYCdK5ehxs1Vw/Ij1V+lvaJik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e4:ea:c6:07:68:8a:4a:40:41:98:7a:69:70:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eea05ddbd389decaf18db80e3e11bf9c285a88
Validity
Not Before: Aug 6 01:00:33 2025 GMT
Not After : Aug 7 01:00:33 2025 GMT
Subject: CN=c15c0f26b633d6862374582acf7d3ae7bf2f58fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:69:77:14:b0:01:5e:12:5e:03:3e:05:25:8d:
db:74:c8:c8:da:29:8f:2a:04:80:27:ee:66:d3:f4:
3c:2b:f8:1b:4b:8a:cc:cd:3e:f6:37:6c:9c:3d:8f:
92:5f:09:ea:45:31:e5:29:1d:87:aa:96:27:86:8c:
68:19:b1:7f:0d:db:9a:16:6d:45:81:29:1a:ec:b4:
38:20:1e:19:93:de:ae:52:02:c6:af:59:4a:a1:d7:
e9:02:6d:4d:6f:15:b9:d0:3d:3e:89:ca:66:c2:14:
b7:cb:d2:fd:da:6d:89:b8:b0:a0:be:14:b4:a5:e9:
51:96:3f:06:fe:0e:63:cc:be:73:0a:61:aa:14:52:
b1:23:bd:93:fe:e7:8d:90:77:47:9d:9e:df:4f:e7:
df:50:78:86:fe:ee:8d:04:22:8b:59:29:05:fa:12:
2d:31:2a:2f:7c:19:71:b2:25:14:22:77:9e:bb:6c:
b5:da:0f:e2:29:47:3d:08:ca:2c:25:bc:8f:47:09:
65:f3:43:48:e1:56:40:a3:16:71:8d:ac:84:fb:3e:
98:c9:2d:24:45:c3:3b:f5:b5:e2:9d:00:66:17:b9:
93:68:ba:d0:0d:20:a5:4b:18:72:4a:84:17:63:81:
89:bc:c4:4c:79:0c:e0:5a:4a:a5:e7:b6:0c:26:00:
07:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5C:0F:26:B6:33:D6:86:23:74:58:2A:CF:7D:3A:E7:BF:2F:58:FE
X509v3 Authority Key Identifier:
keyid:46:EE:A0:5D:DB:D3:89:DE:CA:F1:8D:B8:0E:3E:11:BF:9C:28:5A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ea:a1:88:c3:c3:cf:a6:24:9b:af:dc:12:2a:1e:5b:0b:20:
ec:41:91:af:79:24:a5:7e:44:87:78:f6:26:7c:26:df:18:ce:
d0:f9:bc:7c:0a:d6:12:60:58:6a:80:e5:84:81:e4:9d:42:b3:
6d:0f:15:3d:27:da:eb:92:84:d2:94:11:3d:91:e1:50:06:5c:
30:a0:5d:4b:7a:5c:31:73:86:6a:9b:5e:76:55:06:a5:f3:aa:
d1:26:9e:f9:4b:ee:f4:fd:30:92:4e:58:29:7e:b0:1f:f0:a0:
99:99:b9:b1:df:38:25:0f:af:29:eb:9a:34:49:23:44:68:f7:
c5:38:41:be:a7:d1:8c:e6:d0:d1:7d:80:ec:1f:0d:dd:a3:0b:
8b:17:f2:e9:c7:4d:d5:36:f2:b4:d5:83:20:f5:c9:2b:a5:16:
46:fe:2e:fd:b0:a8:35:79:4a:19:f9:dd:92:b6:64:dc:ad:67:
b9:51:d9:41:91:dd:a1:f4:b0:5a:5b:df:e3:d6:f6:3f:89:58:
50:ca:3e:51:56:1b:8c:4b:c0:40:82:04:d8:ea:fa:54:f5:e6:
b9:ef:6b:d0:ca:77:5c:10:f0:0e:a2:27:b2:1a:5c:f6:c4:f5:
c8:c6:03:95:2a:b6:13:26:c7:ee:71:21:f4:51:f5:e4:d6:d9:
bd:34:da:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:15:59 2025 by rpki-client