
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
File: rTaQk6MtG34Ou-MkRRxY10iuzUI.mft (raw, json)
Hash identifier: jaOYzMidvhzqdnIeDwju98jsA/RZNjT61QsjYY2R0Dc=
Subject key identifier: 54:63:FD:AC:AB:5E:EC:18:B0:AB:E1:7B:50:9E:3D:1A:92:AF:DF:D9
Authority key identifier: AD:36:90:93:A3:2D:1B:7E:0E:BB:E3:24:45:1C:58:D7:48:AE:CD:42
Certificate issuer: /CN=ad369093a32d1b7e0ebbe324451c58d748aecd42
Certificate serial: 01988BEAEF182237B6200CEE2446FBDA72C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
Manifest number: 0539
Signing time: Fri 08 Aug 2025 23:01:26 +0000
Manifest this update: Fri 08 Aug 2025 23:01:26 +0000
Manifest next update: Sat 09 Aug 2025 23:01:26 +0000
Files and hashes: 1: rTaQk6MtG34Ou-MkRRxY10iuzUI.crl (hash: QjSEakXSq1yAlsx4YrI7038HML/i4Mrho0jh2w7nirQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:ef:18:22:37:b6:20:0c:ee:24:46:fb:da:72:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad369093a32d1b7e0ebbe324451c58d748aecd42
Validity
Not Before: Aug 8 23:01:26 2025 GMT
Not After : Aug 9 23:01:26 2025 GMT
Subject: CN=5463fdacab5eec18b0abe17b509e3d1a92afdfd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a6:b1:ec:ca:8d:42:db:bc:43:02:b3:5f:90:
ec:7c:76:7c:87:6c:03:f8:04:5a:96:96:38:c5:7a:
bc:4b:4b:3e:3b:53:1d:3e:aa:af:49:e1:d0:2a:21:
5e:cc:10:4e:d7:e4:26:a4:1f:db:9c:ab:19:ee:7e:
de:a7:af:21:1d:e1:7b:5e:0b:b0:e8:49:8c:87:d2:
f4:66:65:00:ca:99:63:10:17:88:c1:ad:61:88:40:
87:2b:c9:2d:9c:e9:df:6d:6b:fc:ad:ab:39:5a:cf:
78:c1:52:1c:60:21:28:e1:92:f8:21:bc:bc:2b:62:
8a:d5:16:f2:9c:a6:ef:9e:a4:53:bf:a6:70:82:ad:
60:2a:ff:b3:6b:f3:cb:9d:43:62:0a:73:cb:ef:fc:
05:c7:1c:9a:c2:c2:13:cd:fb:da:96:f6:75:87:83:
5d:6a:f6:6a:d4:86:7a:4a:72:15:1a:c1:93:7b:78:
5a:89:df:92:60:73:25:37:57:af:18:5a:21:a7:25:
58:1f:f0:c1:b0:50:69:c9:a2:a1:aa:27:a5:e1:9b:
99:81:3f:e0:e3:15:46:82:64:4b:82:23:06:66:c5:
9c:6f:b9:ca:7f:1c:54:f2:07:02:43:82:50:25:74:
b0:e4:4a:b7:30:8b:27:9e:3b:c6:9e:38:66:48:ad:
6a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:63:FD:AC:AB:5E:EC:18:B0:AB:E1:7B:50:9E:3D:1A:92:AF:DF:D9
X509v3 Authority Key Identifier:
keyid:AD:36:90:93:A3:2D:1B:7E:0E:BB:E3:24:45:1C:58:D7:48:AE:CD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:7b:a0:33:d7:5f:18:4e:47:23:1f:f9:ad:de:5c:7a:13:42:
cd:46:de:24:c2:66:e2:95:f9:53:bf:6c:f0:82:f5:9c:e3:ba:
03:bd:ed:9e:ad:cd:1d:69:e3:ed:05:b0:b1:f7:6d:1e:bd:12:
bc:cb:ad:83:8c:39:62:f9:48:e8:69:2b:72:27:31:a7:af:aa:
21:e4:31:35:a0:14:4f:9c:0d:be:2a:63:c3:cb:ae:6d:f4:30:
c8:fe:85:74:74:97:26:6c:fa:d7:e0:ca:32:a3:3b:2d:42:a2:
3a:cb:d3:d6:30:58:9a:e3:84:9e:e2:c0:0e:39:05:df:ae:76:
e0:16:e3:f6:6b:bb:be:de:00:13:31:eb:c5:5e:11:0b:f4:75:
1a:e5:8c:e3:4c:01:a7:be:5c:df:02:78:df:66:77:f6:81:59:
7c:9c:12:60:b9:3e:65:bc:a8:a0:06:ca:f7:04:8d:6f:fb:ce:
7f:53:f4:02:f7:a3:65:84:e4:8d:e2:e6:a6:3c:2c:3a:9d:6e:
1e:4d:e3:9f:fd:ac:01:1c:f1:93:b5:bc:2c:99:0c:8f:74:4c:
89:a6:59:72:61:0e:dd:3f:59:bd:2b:10:be:f0:a8:b2:2d:be:
a2:0f:83:0b:b9:75:d0:2b:5a:98:a1:3c:59:ee:b8:b9:98:45:
4f:bd:42:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:19:34 2025 by rpki-client