Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
File: RUH1XBZZBCT7NMZeDi6sIogkcNs.mft (raw, json)
Hash identifier: QBQfyhUnZvibSVdEP0HBCRwXubDVqFxvC5sHd2o598c=
Subject key identifier: 67:70:F9:5B:6F:FB:C2:FC:59:47:74:C3:23:B5:07:53:B1:70:47:A6
Authority key identifier: 45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
Certificate issuer: /CN=4541f55c16590424fb34c65e0e2eac22882470db
Certificate serial: 0199FFC8483E4F26F6722081ED04A549F36B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
Manifest number: 0724
Signing time: Mon 20 Oct 2025 04:02:19 +0000
Manifest this update: Mon 20 Oct 2025 04:02:19 +0000
Manifest next update: Tue 21 Oct 2025 04:02:19 +0000
Files and hashes: 1: RUH1XBZZBCT7NMZeDi6sIogkcNs.crl (hash: WzG5DZuH+PzOhyiOZ7rQLyEs/DuY3DQpv0p0A6zsQhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:48:3e:4f:26:f6:72:20:81:ed:04:a5:49:f3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4541f55c16590424fb34c65e0e2eac22882470db
Validity
Not Before: Oct 20 04:02:19 2025 GMT
Not After : Oct 21 04:02:19 2025 GMT
Subject: CN=6770f95b6ffbc2fc594774c323b50753b17047a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3c:af:d2:57:d1:c5:3b:89:f3:1d:f5:52:53:
6d:e5:30:cd:00:65:f9:3f:b5:15:cf:d0:d5:34:87:
5f:e2:f7:bb:20:ee:1d:a8:a6:6c:a1:4a:83:88:0e:
53:03:45:35:b6:24:a6:ba:87:a8:96:0c:8a:c7:ae:
26:b7:96:a0:e9:aa:96:2e:70:9d:55:f2:96:e1:b7:
37:8e:38:6f:f2:c5:f8:22:6b:08:45:d1:88:5b:25:
51:f4:26:75:53:66:66:d9:45:e5:72:5a:c0:be:84:
a9:04:19:ac:b3:f3:cb:26:91:02:09:91:66:3a:a5:
eb:56:5a:ae:0f:2c:89:42:95:d9:99:76:a7:8c:d0:
bd:3d:e5:69:b2:a5:5d:5a:08:7f:ac:d0:27:4f:36:
45:6c:47:5c:21:06:3b:f2:76:85:70:d6:97:96:11:
29:b9:d1:29:b1:2c:da:13:60:fa:6d:52:ad:d5:ff:
f9:69:39:27:ce:b7:6f:5d:fd:75:8a:8d:fa:e9:bb:
78:cd:54:16:30:e8:15:df:f4:b9:e8:0e:f3:90:45:
ba:11:93:0d:c2:ab:e6:66:44:22:45:ca:95:de:13:
e0:5d:94:bb:56:e0:1e:37:ef:28:ef:9b:58:46:e5:
96:f7:6b:9b:0b:34:45:01:f0:17:66:3b:99:6c:f1:
6c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:70:F9:5B:6F:FB:C2:FC:59:47:74:C3:23:B5:07:53:B1:70:47:A6
X509v3 Authority Key Identifier:
keyid:45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:67:31:15:b8:9f:dc:34:a5:d7:43:3b:b7:47:73:be:d6:a9:
b4:b0:1c:a9:24:24:45:d8:57:0c:66:89:66:d0:d4:2d:19:f5:
5d:fa:50:5f:2b:e8:58:5b:93:3c:56:fc:cb:4e:41:23:91:28:
a5:fa:a9:0d:69:ed:1d:aa:cb:9e:e0:65:0e:8f:e7:de:a0:29:
a7:ca:99:2f:8c:62:de:9e:cc:52:db:82:7b:a8:06:04:3c:f9:
10:6b:fa:10:dc:54:8d:d4:1b:e0:5c:61:ea:81:84:02:a2:22:
82:55:af:5c:54:45:7d:19:67:1a:d0:01:63:6c:5e:20:31:c0:
8a:53:77:da:e5:f3:4b:39:1e:c4:49:7b:d2:d7:5c:cc:8a:0a:
9e:91:ae:f4:e9:cb:4c:76:71:29:9b:c3:c8:84:7d:36:ae:94:
e1:69:5a:55:99:53:c3:6e:78:62:31:99:82:41:e7:51:4e:8a:
83:9f:3b:85:81:1a:7c:fc:09:d8:94:c8:a4:91:9c:30:bb:3a:
d5:67:b2:07:5e:3d:e9:ef:cf:16:f4:89:e7:77:b9:63:c6:e9:
60:3d:95:bb:1a:f5:2d:75:a1:4b:64:0d:cc:4c:c2:44:1a:80:
b2:8b:48:a6:0e:62:8c:78:28:ae:c2:7e:15:8f:a8:ac:bc:02:
5a:65:22:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:46:36 2025 by rpki-client