Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft
File: RuUyMK589oaKpoO2JLWagRiI8Lo.mft (raw, json)
Hash identifier: OHm+TVRF7DtTb50eV4FKGdYtORL8TC74CYUfOuPCRu0=
Subject key identifier: F5:FF:0A:D1:C5:83:02:05:1B:F7:89:B7:5A:99:C0:56:41:1B:90:7E
Authority key identifier: 46:E5:32:30:AE:7C:F6:86:8A:A6:83:B6:24:B5:9A:81:18:88:F0:BA
Certificate issuer: /CN=46e53230ae7cf6868aa683b624b59a811888f0ba
Certificate serial: 01976CCFA38104C6992A732E7FE9EF127854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft
Manifest number: 020F
Signing time: Sat 14 Jun 2025 05:00:36 +0000
Manifest this update: Sat 14 Jun 2025 05:00:36 +0000
Manifest next update: Sun 15 Jun 2025 05:00:36 +0000
Files and hashes: 1: 2yUVHb7bKQBM4p7hGq3iiZimEbc.roa (hash: a9OMpn99so26tcAAD5Nx55fldNYwi9TBv8dYukEeMlU=)
2: RuUyMK589oaKpoO2JLWagRiI8Lo.crl (hash: pxL59kDaPruFcFPHbQ/E9AgMturT6G/nnY2zRTySNWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:a3:81:04:c6:99:2a:73:2e:7f:e9:ef:12:78:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46e53230ae7cf6868aa683b624b59a811888f0ba
Validity
Not Before: Jun 14 05:00:36 2025 GMT
Not After : Jun 15 05:00:36 2025 GMT
Subject: CN=f5ff0ad1c58302051bf789b75a99c056411b907e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b0:db:a2:1b:9c:00:35:f6:ab:5b:df:41:25:
cb:f8:7a:b6:b6:b8:fc:74:d1:41:e8:74:89:66:5c:
75:da:79:d1:95:d4:2d:1c:60:dd:6c:dd:a2:04:11:
57:8d:6a:7f:a3:62:82:02:8d:19:64:b8:75:85:03:
90:c8:df:91:28:56:ba:0f:5a:82:df:e5:cd:a7:e5:
4d:a7:65:9e:4a:90:02:b5:f6:be:72:41:fb:4a:0a:
d2:cf:9c:22:8a:7a:34:4c:18:10:3a:58:5d:d6:26:
02:d5:a3:fa:2d:cb:88:19:c9:e9:fb:66:a8:1a:9c:
0a:f9:8b:c5:bb:20:76:82:ab:ae:39:01:ea:d0:68:
84:7f:72:26:d0:65:91:d6:cd:1a:88:34:d8:77:34:
00:ac:63:b9:ea:ae:78:7f:1c:03:68:af:3c:eb:87:
39:83:cf:2b:fc:b6:a2:62:83:a6:51:19:f0:84:dd:
8c:c7:21:d6:8d:b9:1b:75:0e:8a:77:92:be:d6:37:
c3:41:2e:f9:53:84:22:d9:80:9c:5d:04:88:54:38:
b8:94:1a:c8:d2:44:a3:a3:a6:60:85:78:c8:ce:77:
74:07:93:01:f2:d9:a6:2d:8a:a7:dc:25:6a:90:84:
7c:3f:59:d0:34:02:ec:cd:a4:54:4a:a0:f4:54:d3:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FF:0A:D1:C5:83:02:05:1B:F7:89:B7:5A:99:C0:56:41:1B:90:7E
X509v3 Authority Key Identifier:
keyid:46:E5:32:30:AE:7C:F6:86:8A:A6:83:B6:24:B5:9A:81:18:88:F0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:cc:4f:5f:e2:39:c7:0f:6f:73:d1:f8:17:b9:ce:b7:be:2e:
c1:d4:8a:54:89:0d:cd:85:49:83:fe:52:1d:35:8d:56:85:90:
69:39:e1:84:61:a6:4a:f1:8a:3a:b0:21:c1:ff:3a:46:13:26:
61:a6:c0:b4:1d:86:37:47:06:eb:82:a0:8a:52:28:f8:90:ae:
41:81:b4:d7:eb:4f:42:1d:18:56:30:81:bb:5f:32:d3:8c:dd:
d1:9e:26:ee:74:9b:e1:72:cf:8f:98:3f:fe:34:7f:7d:6c:ee:
fb:23:4a:20:67:4c:bf:c5:3b:5e:4d:26:85:0e:c2:53:04:da:
4a:82:c3:ff:fd:f3:35:55:07:b1:d4:ea:ae:5b:57:69:f6:58:
95:cf:e1:00:dc:9d:89:f9:46:9b:d3:76:7d:3d:0f:d8:d1:cf:
e6:98:f9:ac:59:4b:c5:02:f6:81:c2:1f:47:3e:ae:6b:67:28:
a7:7e:e6:65:14:dd:d3:ab:5e:d5:9d:70:cc:a6:85:53:c0:1e:
fe:37:08:ee:71:f2:38:8b:5b:6a:ce:f7:e0:e1:08:9a:23:a8:
eb:1e:ac:34:3b:76:0d:56:87:3e:48:e3:2d:92:37:bc:2e:55:
c1:73:d5:f4:a3:84:87:b4:7e:18:1c:10:18:31:07:ca:90:ea:
27:bf:95:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:01:29 2025 by rpki-client