Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
File: ruqgluuzdlfk060hdmQRctbiArw.mft (raw, json)
Hash identifier: e/dMXr/ifBhCW6EiE+wLmiPiM/yxN+2YPk2ToA1E1Ko=
Subject key identifier: BA:20:97:A8:3B:BF:89:44:2F:6E:3C:88:BF:5F:DC:70:08:24:A8:48
Authority key identifier: AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
Certificate issuer: /CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Certificate serial: 019788EBB276D88F97B8AD475EEC494C0889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
Manifest number: 0A35
Signing time: Thu 19 Jun 2025 16:00:37 +0000
Manifest this update: Thu 19 Jun 2025 16:00:37 +0000
Manifest next update: Fri 20 Jun 2025 16:00:37 +0000
Files and hashes: 1: ruqgluuzdlfk060hdmQRctbiArw.crl (hash: 4hNgEBll7bDe3z5IK6JfNi72TYM5ShwYsozkNLKldc4=)
2: skCVKxk18u8iDsYso8A72bgiHug.roa (hash: nn/x2nXxtAw5Z/QReAqKvy2u4x4tQ9QyKaEVK0rkZpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:eb:b2:76:d8:8f:97:b8:ad:47:5e:ec:49:4c:08:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Validity
Not Before: Jun 19 16:00:37 2025 GMT
Not After : Jun 20 16:00:37 2025 GMT
Subject: CN=ba2097a83bbf89442f6e3c88bf5fdc700824a848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:a8:3e:95:02:53:2f:e9:b1:d2:e1:68:01:
ec:df:2d:19:b1:40:fb:31:df:41:1b:80:80:43:cf:
cd:39:ba:55:f8:12:9f:9c:a6:5d:ba:fa:1f:da:bb:
aa:60:70:ae:d1:a2:72:e6:fc:67:f4:5a:5e:24:16:
3d:c2:f7:bd:a3:75:7b:4d:8f:63:38:7c:5f:e6:b1:
e1:02:aa:44:0d:a5:b7:67:c4:68:6b:3e:c8:60:fd:
a8:b0:16:90:8e:e4:e0:35:1f:d4:54:70:1a:20:a2:
7a:a3:e4:00:4e:36:62:d0:4d:8a:44:f2:01:f9:21:
91:89:e3:8b:fc:fe:4d:f0:58:e5:d7:5e:1d:49:56:
0e:ba:7b:ce:d6:69:7b:99:bb:20:95:ed:21:4d:a7:
de:ea:a1:ef:5d:bf:7f:c3:2d:30:d7:20:3d:05:25:
db:65:f0:44:a9:5f:ba:f6:e7:53:a2:fc:d3:d1:f1:
a4:5e:3c:cd:93:ad:5e:ca:3b:e7:a8:75:7f:80:2a:
e9:8d:be:50:fa:00:f7:fb:2e:61:46:3d:09:00:df:
22:87:bd:42:1a:e3:ae:62:55:79:08:4f:35:f6:f3:
c4:54:97:a2:c8:3e:d6:c0:8e:cd:bb:b3:5b:7d:12:
96:b0:38:97:fd:a7:a5:63:3e:50:f1:58:cc:00:08:
2b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:20:97:A8:3B:BF:89:44:2F:6E:3C:88:BF:5F:DC:70:08:24:A8:48
X509v3 Authority Key Identifier:
keyid:AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a3:c9:22:96:62:50:3a:f4:22:c3:0c:67:f2:0a:42:9b:b9:
10:c3:63:ed:04:18:fc:58:b0:27:ea:f9:9e:88:ef:6b:78:fe:
0e:dd:48:2b:38:e8:c3:82:a3:ab:90:e6:37:c1:b0:56:14:ae:
f7:eb:9e:ac:64:d7:aa:0d:db:50:ac:58:fa:b4:52:9f:11:f7:
fe:cd:7c:e7:db:5b:c5:69:49:05:c5:b0:25:9e:a3:30:6e:4f:
29:78:b3:03:2c:90:90:32:e6:0b:07:82:48:36:68:d9:18:06:
10:81:90:3c:9e:b3:19:31:19:71:e0:87:11:ac:88:a1:fa:c5:
fb:db:4c:4b:ca:cf:54:fc:2e:14:dc:65:e2:46:1d:0a:8b:bc:
c8:ec:34:a4:2e:6d:cb:aa:2f:d1:27:89:df:62:7b:69:ec:26:
46:6d:43:5c:e7:08:e5:3e:cc:f3:1f:bc:8e:e3:8b:86:fa:d0:
9d:92:5d:2f:6e:2d:7c:cd:4e:6e:fd:b7:ed:97:61:66:51:82:
ba:a0:0c:79:a8:8f:46:6f:c8:2c:b0:e5:7b:3b:ca:70:f4:0f:
8c:62:b2:64:20:73:f8:24:dd:e6:80:04:f4:aa:f0:70:81:f9:
97:2c:04:9d:4e:cf:ef:72:83:78:2b:e0:06:b2:85:08:05:9b:
1e:19:fd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 18:04:26 2025 by rpki-client