Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
File: tRu6i9P6566CScnEYWi6kAI9sZQ.mft (raw, json)
Hash identifier: +LFoW2EmiVas0ksIaVjZy3rXPc2ywCZegYzAiyb2zUU=
Subject key identifier: F6:29:C9:D2:EE:33:48:10:F3:CF:38:A9:BE:92:EF:74:B1:B9:A6:F4
Authority key identifier: B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
Certificate issuer: /CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Certificate serial: 0198971348C8D575840831403AF19CF8E7B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
Manifest number: 1624
Signing time: Mon 11 Aug 2025 03:01:20 +0000
Manifest this update: Mon 11 Aug 2025 03:01:20 +0000
Manifest next update: Tue 12 Aug 2025 03:01:20 +0000
Files and hashes: 1: tRu6i9P6566CScnEYWi6kAI9sZQ.crl (hash: Urg6ECBNOuN7ZJaZI6s4oRCipoW1zP/HSf0oJCOM+MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:48:c8:d5:75:84:08:31:40:3a:f1:9c:f8:e7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Validity
Not Before: Aug 11 03:01:20 2025 GMT
Not After : Aug 12 03:01:20 2025 GMT
Subject: CN=f629c9d2ee334810f3cf38a9be92ef74b1b9a6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f9:6a:cf:69:71:3e:46:70:f8:7e:ee:23:bd:
8c:d2:a3:c6:77:ef:cd:70:d5:80:1a:5d:51:bb:8e:
4b:ae:84:c2:1b:dd:79:ad:fb:44:9d:f9:20:9d:19:
0c:88:2d:ae:21:1f:60:66:47:b0:22:bb:9f:7a:d7:
18:24:af:8c:34:9e:2a:17:51:75:09:7b:42:f9:0a:
88:f1:7f:dd:80:14:4b:e9:b4:c5:ef:25:b7:67:f3:
c0:42:d9:07:cd:c8:90:a0:5b:0c:fd:5b:07:89:c2:
3a:9a:d7:07:c5:1a:ca:1a:3f:4b:1c:22:35:e6:34:
32:c0:f6:e4:3e:4f:12:34:8f:7f:55:e4:37:98:d9:
ff:8f:d0:8c:5f:ca:11:9f:00:eb:fb:b8:2b:9a:7a:
14:98:cd:e8:35:cb:5d:09:2c:8b:33:43:ef:e4:d2:
bb:5d:29:0b:43:45:45:00:6b:56:e7:eb:c6:11:82:
ca:eb:92:37:d8:62:2d:79:59:91:06:68:bf:19:32:
d4:06:5c:ec:4d:88:c3:c0:de:a2:dd:a2:0e:42:f1:
76:44:b7:6f:83:7b:67:91:d2:07:2f:51:48:07:2f:
55:85:5b:2c:81:d2:13:7d:53:76:92:cc:b3:0f:3d:
81:cf:54:71:77:1e:e1:cd:c0:4e:77:ca:d9:c0:cd:
44:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:29:C9:D2:EE:33:48:10:F3:CF:38:A9:BE:92:EF:74:B1:B9:A6:F4
X509v3 Authority Key Identifier:
keyid:B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8d:e0:d8:0a:fe:da:9d:4d:39:97:a5:5a:26:36:67:ac:23:
33:57:dd:5d:6a:87:4b:f6:3c:dc:34:8b:f9:1b:d8:19:39:b2:
a6:a7:62:35:d8:1f:9c:94:da:15:a4:71:00:76:46:f5:eb:bf:
8c:55:da:76:00:41:21:f5:42:c6:04:cb:0b:cf:37:de:89:5f:
63:83:e6:2a:88:08:e3:ae:4b:4d:dd:e1:13:af:58:60:69:a2:
be:91:1f:07:d0:fa:1b:7c:b1:f8:7d:2c:cb:5a:10:ad:e8:00:
53:be:95:2d:20:8b:60:0b:13:26:ac:5c:64:eb:89:46:10:b2:
56:5e:66:3e:72:ac:17:f6:a1:42:e0:72:da:08:df:bb:0c:85:
c2:8d:53:30:90:a1:c3:31:4e:eb:3a:71:08:05:d0:72:5c:66:
99:db:da:f2:9f:e8:ec:b0:bf:85:14:b1:8e:6d:80:a9:03:ad:
7a:ed:f0:f0:44:eb:85:20:0c:3c:8b:de:ba:53:65:ee:02:2d:
45:58:7f:3b:14:11:d5:fd:0a:9f:81:f8:c7:ae:f6:59:b9:dd:
5b:df:ab:1b:f6:03:62:e3:4a:9a:e3:e4:a8:94:24:b0:5c:e7:
41:4a:08:03:e6:c2:a5:c0:0c:95:2c:65:48:a8:91:4f:e2:91:
bd:a5:3a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:54:13 2025 by rpki-client