Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
File: iAsPesuH0TTDhZ1y0NGmHkdRusA.mft (raw, json)
Hash identifier: d3lkECOmHHOjZGa4tbA9Mk0oFxI0TRnMY4zd+No1A9Y=
Subject key identifier: 37:EC:83:54:C7:32:68:47:ED:74:C2:6F:DE:9A:D6:66:9B:33:08:A5
Authority key identifier: 88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
Certificate issuer: /CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Certificate serial: 0198959257BD1EA3386C839D25691CE3A9F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
Manifest number: 0CD3
Signing time: Sun 10 Aug 2025 20:00:52 +0000
Manifest this update: Sun 10 Aug 2025 20:00:52 +0000
Manifest next update: Mon 11 Aug 2025 20:00:52 +0000
Files and hashes: 1: UubezK0uH4JLqxbhgPEY0N-6nSw.roa (hash: Oagl7z5x1jSe2CWCzxXuth3kqDf2dweMIxQL2+jadVg=)
2: iAsPesuH0TTDhZ1y0NGmHkdRusA.crl (hash: APKyr42VWKZZ3Hno/VLLGmPR73HnZkv3fjdO8rl2MsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:57:bd:1e:a3:38:6c:83:9d:25:69:1c:e3:a9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Validity
Not Before: Aug 10 20:00:52 2025 GMT
Not After : Aug 11 20:00:52 2025 GMT
Subject: CN=37ec8354c7326847ed74c26fde9ad6669b3308a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:d4:58:e4:9b:0d:bc:d5:22:75:89:d5:19:
5c:5a:94:12:5b:4f:9a:8e:3e:58:8f:9b:32:db:ba:
d1:89:66:67:d0:0f:53:66:08:73:89:d4:e4:18:2f:
7b:e5:5b:66:af:63:61:da:b0:fa:13:b0:7b:58:1e:
01:7e:7f:f2:82:ee:e8:e8:66:c0:29:d0:d3:43:73:
6c:16:2b:b7:e8:2c:15:55:64:ef:c1:18:5e:f7:51:
7b:71:6c:88:77:7c:a1:76:1d:a5:9e:52:75:03:4a:
50:9c:f7:ea:82:66:25:19:67:d4:ee:47:db:5b:fa:
f6:11:13:7c:f3:02:d2:69:18:72:cd:24:86:36:4b:
8b:89:db:ab:19:68:d0:a4:77:f8:77:33:ad:ae:75:
63:0c:a3:e5:a8:35:ad:ee:51:10:47:ae:7a:d9:b6:
3e:f1:12:6a:9f:3c:38:e8:32:98:ec:9a:a6:b0:4a:
9d:03:44:20:b3:02:5e:8f:1b:81:25:e1:a4:a2:fc:
6a:a2:65:53:08:c7:40:ec:96:70:e6:7d:c0:93:4d:
83:2a:7d:5f:2d:9b:55:e9:6e:d2:49:04:70:69:79:
da:aa:fc:fc:23:d0:e4:ef:a0:45:47:49:17:93:fd:
a8:3f:a8:3d:66:ff:52:bf:d6:d2:ea:d0:c5:59:e9:
b0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EC:83:54:C7:32:68:47:ED:74:C2:6F:DE:9A:D6:66:9B:33:08:A5
X509v3 Authority Key Identifier:
keyid:88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b4:cc:51:fe:a7:2f:f4:76:8a:7d:20:c5:ca:79:c2:60:a8:
82:c8:62:82:18:0f:71:48:ec:e6:af:1e:3b:1a:30:5e:ce:1e:
c9:d6:9b:ad:fc:29:b8:85:5f:eb:fc:15:c2:65:79:b6:0f:6b:
ef:f0:ba:a0:a6:01:3a:ae:dd:c3:f0:8b:ed:cc:88:75:47:d7:
91:17:32:0d:78:21:84:13:05:96:1e:ff:e2:9f:05:95:c6:72:
74:6c:02:d4:10:e6:4f:60:56:7f:0b:a1:aa:4e:fc:ef:d3:fb:
0b:53:0e:45:86:e4:02:55:30:fd:0e:ee:dd:8a:a7:74:0b:6c:
53:13:9c:a8:6c:b2:b6:aa:e9:8f:90:51:58:f3:d5:2b:87:66:
55:1b:8d:51:95:6d:6c:44:1b:96:b0:be:88:9d:cd:d4:ef:5c:
28:f0:e7:3d:fe:77:27:a9:e1:0d:b3:96:ae:a6:32:49:23:eb:
04:68:2a:ee:3b:39:a5:4a:34:8c:e3:55:c2:77:d0:37:34:99:
e3:e2:88:03:86:55:da:01:a4:0c:78:9b:7d:46:ef:f7:3b:6e:
75:e3:33:dc:3f:67:0a:d8:54:1e:27:05:42:96:13:c5:9e:97:
77:e6:5d:de:77:ed:02:b4:07:d8:41:5f:d7:3a:22:2f:d8:3e:
7f:34:93:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:37 2025 by rpki-client