Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
File: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft (raw, json)
Hash identifier: qv/jv+1gxBc65m5hN7ufh3wXM/pTnCiztLx2SoNpEWQ=
Subject key identifier: 2F:D4:10:00:A7:E2:28:F4:B4:B6:8E:B3:67:02:52:AC:2E:AB:FD:2B
Authority key identifier: D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
Certificate issuer: /CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Certificate serial: 01989781521B63E4AA9A2BE9DBB8C3B8FAB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
Manifest number: 0C50
Signing time: Mon 11 Aug 2025 05:01:31 +0000
Manifest this update: Mon 11 Aug 2025 05:01:31 +0000
Manifest next update: Tue 12 Aug 2025 05:01:31 +0000
Files and hashes: 1: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl (hash: u9J6g0QU3IOdni5C3uKFTMqimM1pwACAkZHpI52PVx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:81:52:1b:63:e4:aa:9a:2b:e9:db:b8:c3:b8:fa:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Validity
Not Before: Aug 11 05:01:31 2025 GMT
Not After : Aug 12 05:01:31 2025 GMT
Subject: CN=2fd41000a7e228f4b4b68eb3670252ac2eabfd2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:39:59:f6:a4:c0:6f:1a:de:86:7c:d1:52:
ae:c0:e1:20:32:c3:1b:1c:3e:f2:42:4a:1f:d1:bb:
76:ba:d9:bf:16:39:41:2e:df:4b:12:59:9b:d0:a2:
b8:30:f2:b7:57:20:0b:9d:df:28:82:fa:d7:16:36:
41:57:76:c4:12:a3:72:dd:2f:e0:f5:27:88:84:2f:
56:ca:a9:0e:13:48:37:ad:f5:f1:3b:82:7a:f7:04:
67:72:b9:6c:a9:9a:57:32:dd:e9:7e:c0:42:cc:dc:
0b:8f:3c:4e:b3:b4:a0:92:99:9f:ff:48:bb:da:7f:
83:b8:16:c2:4a:97:30:23:9a:73:9f:d8:c1:66:bb:
42:2e:4a:89:16:f9:0d:69:5d:82:6a:1b:f7:b7:25:
49:42:57:21:ca:5b:90:1c:55:8f:d3:fc:fe:2f:de:
50:22:13:e8:84:35:1f:2f:46:4a:02:d7:31:30:c1:
be:ea:1c:9d:76:f9:1c:45:b4:dd:1b:02:bb:0b:90:
f5:7a:0b:ca:0f:ec:44:cf:cb:b0:9a:80:db:d6:02:
e6:68:fc:dc:19:e6:05:01:78:4d:31:af:76:9d:4c:
c2:0f:12:47:8a:9d:a9:48:6d:7a:cc:c6:a1:7d:e6:
e0:e5:b1:e5:0c:c7:a3:14:97:5d:dd:80:b8:0f:66:
63:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D4:10:00:A7:E2:28:F4:B4:B6:8E:B3:67:02:52:AC:2E:AB:FD:2B
X509v3 Authority Key Identifier:
keyid:D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ce:71:7d:a5:08:44:3a:81:1f:ca:83:12:1f:e0:b3:89:68:
5e:88:cf:28:d6:81:c0:4e:94:54:89:fd:20:2e:95:37:a1:c3:
74:f1:35:b6:d2:1f:70:fd:70:70:11:36:bd:cb:ee:e0:84:78:
11:32:dd:ee:fb:11:cb:9f:f2:26:08:aa:48:af:34:1f:5a:26:
42:ab:4a:5f:78:63:b2:e8:b6:bb:da:5d:86:2b:5c:76:2e:46:
79:d0:a4:00:4f:96:6d:ca:55:d5:7c:00:1c:bc:ab:8a:8b:fe:
b1:81:47:f9:47:e5:6d:6d:c2:3d:aa:4f:05:b7:83:66:8f:9e:
f4:1b:cb:eb:ef:c5:05:b3:e3:fb:06:3d:84:3c:71:58:2d:a7:
08:37:07:aa:09:41:5a:43:1b:74:f7:c7:88:a2:7c:b9:34:0b:
3c:71:9d:0c:ea:f9:68:7e:0c:89:27:64:2d:f2:0b:4a:93:ef:
47:c7:20:27:48:00:54:9d:01:e9:77:86:36:d0:92:4c:6b:54:
ef:b6:f0:a9:c1:2f:58:40:34:d3:99:37:95:d9:9a:b7:29:ae:
da:a9:08:34:30:ab:6e:b3:7a:34:4c:1e:b2:ef:00:d3:08:88:
2b:e0:71:5d:6c:e8:ac:34:10:19:fe:1a:0a:bd:0a:20:03:1c:
f3:ab:81:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:25:44 2025 by rpki-client