Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
File: rAsK5lTCnX8fDU4tNRarfe8Msp0.mft (raw, json)
Hash identifier: t+SR0G4rARTtcs0VqFGwbF8c9CRjBPSTiQR/czDGdEU=
Subject key identifier: 32:86:59:5C:AE:5E:D5:2A:04:5A:9F:B3:18:F6:3B:DB:AD:E0:41:A1
Authority key identifier: AC:0B:0A:E6:54:C2:9D:7F:1F:0D:4E:2D:35:16:AB:7D:EF:0C:B2:9D
Certificate issuer: /CN=ac0b0ae654c29d7f1f0d4e2d3516ab7def0cb29d
Certificate serial: 01987DF7DED9D4CD063A01D9D1B317F293E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
Manifest number: 053B
Signing time: Wed 06 Aug 2025 06:00:52 +0000
Manifest this update: Wed 06 Aug 2025 06:00:52 +0000
Manifest next update: Thu 07 Aug 2025 06:00:52 +0000
Files and hashes: 1: rAsK5lTCnX8fDU4tNRarfe8Msp0.crl (hash: j/z8KnlSON29E1mHYhvT9qB8lfPG4td5tBiXsMrfzfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:de:d9:d4:cd:06:3a:01:d9:d1:b3:17:f2:93:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0b0ae654c29d7f1f0d4e2d3516ab7def0cb29d
Validity
Not Before: Aug 6 06:00:52 2025 GMT
Not After : Aug 7 06:00:52 2025 GMT
Subject: CN=3286595cae5ed52a045a9fb318f63bdbade041a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:90:91:23:0c:10:0d:bd:df:4d:a0:6a:cd:9a:
44:79:cc:09:39:3a:16:12:5d:58:85:bb:3f:9a:f6:
a4:1f:93:d1:54:1e:7b:7e:81:6f:a0:46:50:dd:bd:
6a:8f:c8:54:e0:58:54:1a:e2:bd:27:9c:a7:76:62:
ac:4f:39:d4:59:77:d8:46:99:20:d7:06:c7:3c:83:
fd:32:e6:7e:76:8e:53:28:1a:31:82:57:1c:2c:f8:
57:69:9d:36:e6:30:5d:5f:05:9f:62:18:c7:92:5c:
90:11:d9:9e:62:34:c0:25:41:cf:a5:55:f8:3a:7a:
50:de:72:78:29:af:4e:c1:8d:50:d5:6e:29:91:fe:
fd:49:90:5f:c1:b6:74:39:71:3a:fd:b4:be:0e:a4:
98:43:75:6b:5b:90:8e:b7:1f:8c:7c:eb:0f:31:e5:
9c:c2:67:76:fc:59:17:8d:5b:6b:be:67:af:9c:6a:
bc:d4:55:8e:9d:07:24:b9:7a:3c:1d:53:11:9a:99:
a7:5d:77:13:20:86:56:b4:ca:66:8a:eb:92:5b:37:
b2:0a:90:e6:89:30:fd:8a:93:a5:16:2c:96:b7:5a:
3e:70:7b:03:92:a0:38:51:07:6e:6a:93:88:ee:6b:
2d:4a:94:5a:8a:b6:ea:9d:c2:c4:95:ee:aa:5b:30:
f3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:86:59:5C:AE:5E:D5:2A:04:5A:9F:B3:18:F6:3B:DB:AD:E0:41:A1
X509v3 Authority Key Identifier:
keyid:AC:0B:0A:E6:54:C2:9D:7F:1F:0D:4E:2D:35:16:AB:7D:EF:0C:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAsK5lTCnX8fDU4tNRarfe8Msp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/435d45-bee2-491a-b287-65f42efe59de/1/rAsK5lTCnX8fDU4tNRarfe8Msp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:38:6d:18:6f:50:78:4f:de:a5:54:b3:2d:84:98:c6:c4:d8:
f0:cd:cf:d6:47:c5:8f:e6:b7:c8:a7:41:21:11:ac:ac:86:22:
42:bf:fd:e5:01:e0:a4:2f:46:7f:03:31:04:b6:48:3a:62:70:
09:e1:97:72:29:c9:ce:48:38:19:bf:7d:60:1e:50:40:f5:45:
b9:11:55:71:b6:a2:a1:56:ef:52:5f:7b:ca:c4:b1:f6:b2:0c:
35:d0:86:f7:9e:80:ef:d6:df:2c:89:7e:56:c4:1f:e2:11:da:
0b:7e:b9:ef:24:3b:52:ad:98:cd:ff:ca:1a:d0:a3:89:e9:d3:
85:56:aa:9f:1c:1c:65:54:03:ee:19:05:43:9f:b5:70:06:81:
ad:a5:b2:35:42:26:53:68:06:85:06:5b:5f:e9:a4:96:26:36:
da:08:59:42:2d:53:39:2e:e4:98:4b:11:80:7d:83:b4:d6:ca:
3e:41:b9:7e:f8:f2:e1:30:ab:f0:47:ef:9e:7e:9f:93:78:b7:
34:d0:50:1a:b4:aa:bb:dc:50:af:93:3a:ec:1f:ba:fa:77:28:
5a:a7:6b:2a:41:ac:04:5b:ce:6a:97:a2:fe:36:67:f1:22:b7:
4e:9a:82:bf:79:d5:33:b2:b0:13:74:ff:8f:1b:9a:3b:2b:b8:
bc:58:bb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:36:36 2025 by rpki-client