
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
File: ru85tCEAXzAraRD5Y5P0tlR6j-w.mft (raw, json)
Hash identifier: iVT5GiyDqetEbFLM+wGwEQosvcSf4yTqIIiegZDsRb4=
Subject key identifier: 10:DA:4C:33:04:8E:46:50:87:23:25:78:FE:2A:BD:49:7B:C6:A5:AF
Authority key identifier: AE:EF:39:B4:21:00:5F:30:2B:69:10:F9:63:93:F4:B6:54:7A:8F:EC
Certificate issuer: /CN=aeef39b421005f302b6910f96393f4b6547a8fec
Certificate serial: 01988B7D1F1A039E7A3D3FF1AB6976DFF2B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
Manifest number: C4
Signing time: Fri 08 Aug 2025 21:01:29 +0000
Manifest this update: Fri 08 Aug 2025 21:01:29 +0000
Manifest next update: Sat 09 Aug 2025 21:01:29 +0000
Files and hashes: 1: ru85tCEAXzAraRD5Y5P0tlR6j-w.crl (hash: M8laKyOG1BJ+2bwS4LfqaASujd83A4UR863BlETAEVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:1f:1a:03:9e:7a:3d:3f:f1:ab:69:76:df:f2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeef39b421005f302b6910f96393f4b6547a8fec
Validity
Not Before: Aug 8 21:01:29 2025 GMT
Not After : Aug 9 21:01:29 2025 GMT
Subject: CN=10da4c33048e465087232578fe2abd497bc6a5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f2:e8:80:e2:7d:79:46:34:2e:cf:0d:9d:94:
05:a1:13:cf:c9:c5:79:fc:30:85:02:0e:5e:8e:22:
ca:c5:f4:ef:9b:15:36:53:7c:a3:f0:0a:09:82:1e:
13:17:e4:3f:e6:d4:af:14:48:11:f5:5d:9e:60:27:
21:49:33:fd:f2:bc:9e:c9:fb:a2:77:49:d4:6e:71:
1d:c4:6a:77:07:e0:fc:83:14:96:9d:3f:d3:30:df:
02:70:a2:5f:b3:f7:8c:cc:8f:56:31:2e:43:84:5f:
da:a7:94:05:e7:49:95:84:aa:dc:62:44:cc:a0:b7:
12:21:25:1b:d2:a1:73:b3:97:e8:df:14:0b:db:64:
f5:b4:19:39:a7:28:4a:78:04:da:bf:e6:ff:d2:e7:
71:c8:81:f5:55:24:e7:83:21:d1:8a:16:66:c6:f1:
6e:d5:3b:00:af:0d:44:27:e8:52:2a:16:76:29:60:
0a:11:79:71:10:89:f2:ad:61:90:61:b2:ff:da:96:
08:10:88:90:ee:d0:df:70:64:da:03:ca:55:b7:e9:
d4:67:0a:15:91:37:a5:62:d8:62:f5:eb:0b:06:02:
23:e9:0c:32:75:55:01:1b:bb:9c:2c:33:99:a3:16:
2f:7a:a3:b0:84:12:d8:15:2c:09:c2:ea:48:e7:97:
69:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DA:4C:33:04:8E:46:50:87:23:25:78:FE:2A:BD:49:7B:C6:A5:AF
X509v3 Authority Key Identifier:
keyid:AE:EF:39:B4:21:00:5F:30:2B:69:10:F9:63:93:F4:B6:54:7A:8F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9e:b1:71:cb:49:b4:4c:88:15:8a:bd:a2:9d:b0:e7:f0:2b:
43:95:a3:26:6d:03:fd:c4:78:7f:91:b4:8a:d4:b1:04:29:5c:
ac:8c:63:17:78:84:6d:52:b4:8f:91:d8:19:87:ef:55:54:1d:
f5:c0:a5:80:8b:7d:58:a8:a1:c1:fa:13:01:fb:31:03:1e:13:
b0:15:30:ed:48:a2:53:81:7d:da:64:3c:1b:8d:7c:2e:4d:e4:
d9:5a:87:00:09:97:b1:87:98:52:02:8c:54:39:19:98:67:88:
09:02:04:94:80:fa:72:d2:12:8c:6d:7e:ce:04:56:41:2c:fc:
af:07:03:bf:25:ec:1f:b3:ad:8a:e1:cf:f9:ea:11:c1:6a:33:
ba:f7:dd:3a:1a:c2:28:5d:38:3d:37:67:27:e8:6e:4f:11:e2:
c6:46:e1:71:2d:bb:f7:56:7f:38:bd:5d:c8:11:fa:44:08:d2:
d5:65:70:89:d4:bf:1a:4b:6a:57:78:10:66:ab:42:48:ff:70:
3e:c2:d0:ad:f1:bf:7b:30:6d:c9:20:4c:28:08:21:92:09:fd:
2a:61:b7:4e:55:f7:ab:fe:14:79:ff:e2:d5:55:b7:17:f4:ef:
17:19:57:4a:21:de:e1:2e:34:e7:34:46:bc:a2:cd:58:0b:e8:
c0:be:be:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:25 2025 by rpki-client