Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft
File: Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft (raw, json)
Hash identifier: NqPZEIYXZ1aocnIbcVFE9obqL9lqIfBVHZpvCkgw7xw=
Subject key identifier: 80:5D:11:2A:8D:21:29:C3:B3:B7:C5:67:44:E4:B4:E8:9B:FB:F2:4C
Authority key identifier: 46:EE:A0:5D:DB:D3:89:DE:CA:F1:8D:B8:0E:3E:11:BF:9C:28:5A:88
Certificate issuer: /CN=46eea05ddbd389decaf18db80e3e11bf9c285a88
Certificate serial: 0199FF22D1DC954AB3806CB96F06297F33E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft
Manifest number: 138B
Signing time: Mon 20 Oct 2025 01:01:35 +0000
Manifest this update: Mon 20 Oct 2025 01:01:35 +0000
Manifest next update: Tue 21 Oct 2025 01:01:35 +0000
Files and hashes: 1: Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl (hash: Do2OnoXIsyvYtOjr34ISU+ku8CFRwRxR1mCoQAj3ino=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:d1:dc:95:4a:b3:80:6c:b9:6f:06:29:7f:33:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eea05ddbd389decaf18db80e3e11bf9c285a88
Validity
Not Before: Oct 20 01:01:35 2025 GMT
Not After : Oct 21 01:01:35 2025 GMT
Subject: CN=805d112a8d2129c3b3b7c56744e4b4e89bfbf24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1d:eb:8e:a8:42:5f:be:84:88:d4:29:e8:23:
c7:ee:86:41:87:bc:a6:e5:bb:38:29:ec:02:a1:f5:
de:3d:3a:f0:da:fb:9a:90:26:1d:82:2a:26:06:ab:
24:e9:fb:82:b5:4f:70:dc:43:c8:b3:e0:4a:5c:b7:
e5:31:ab:74:88:66:e5:20:91:d9:65:ce:23:61:01:
af:49:46:df:10:42:63:1c:b4:40:8f:09:06:dd:05:
c8:25:14:c0:84:ff:0c:fe:59:9a:83:7f:94:d0:79:
99:57:ff:78:33:b5:c6:fb:08:cc:1f:6f:4c:95:14:
54:dd:a1:7b:12:43:4a:af:1a:3e:10:2e:c0:86:c0:
fc:0d:01:ac:a7:6a:73:f3:a1:7f:81:39:78:6e:91:
08:5a:a0:d6:64:65:99:fa:00:9f:16:3a:56:37:55:
a8:c7:16:66:f0:6f:b9:7e:95:95:44:00:22:5d:99:
0d:2c:11:93:14:51:10:48:2b:90:52:73:43:22:b5:
25:05:df:60:40:18:de:d7:c1:ad:74:ee:49:15:b7:
94:17:4d:48:ce:63:bf:0a:0d:cc:01:32:54:84:63:
39:43:65:bb:f8:12:6d:18:f3:8f:d2:bf:ce:f4:87:
8d:59:7a:04:60:89:c1:df:44:5f:7a:df:69:4f:37:
23:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5D:11:2A:8D:21:29:C3:B3:B7:C5:67:44:E4:B4:E8:9B:FB:F2:4C
X509v3 Authority Key Identifier:
keyid:46:EE:A0:5D:DB:D3:89:DE:CA:F1:8D:B8:0E:3E:11:BF:9C:28:5A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:86:91:ea:91:e7:5f:2d:83:93:6f:d9:6e:16:85:0e:0a:98:
3c:c2:45:6d:6d:33:cc:c3:6d:8c:01:72:cd:5b:26:c8:05:04:
9a:39:aa:01:b5:9c:b0:82:9d:83:61:0c:78:32:98:96:2b:fc:
b8:79:b0:21:af:f3:a7:ac:73:5c:84:08:25:6c:c4:68:12:00:
8f:e8:65:48:0b:7b:37:26:f0:84:53:4f:17:fa:f3:f9:1e:e8:
da:e6:9b:29:1a:0e:c4:45:fb:b8:7b:fe:30:eb:ad:54:38:86:
ec:93:c9:19:d8:98:43:99:fe:d4:e1:01:fa:84:2f:2d:23:19:
90:1b:d7:d8:7d:9e:6c:5f:52:1d:8d:6d:ed:7a:72:88:2b:35:
c2:08:50:5c:83:0c:c1:95:03:bb:74:bf:d8:71:05:96:77:e7:
f4:03:44:bd:62:0b:2c:57:7d:17:2c:dd:74:66:ae:0d:5b:68:
5a:cc:95:73:ae:5c:ec:6b:58:b2:7a:dc:f5:a2:8e:aa:fd:2d:
47:eb:33:1b:24:d7:74:f1:e9:b5:e2:88:87:b3:27:b3:11:20:
ee:e8:73:4b:96:cd:ee:c7:50:33:f6:fd:05:ab:e2:d3:78:e9:
11:54:01:77:e3:84:ad:f9:27:09:ad:44:c8:ca:18:40:73:3a:
bd:d8:2e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:48 2025 by rpki-client