Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
File: RUH1XBZZBCT7NMZeDi6sIogkcNs.mft (raw, json)
Hash identifier: jTBQ0qnBwtNm4Qn5LW4QlPSGSj8hBoOlESEQ55kpadU=
Subject key identifier: 97:0F:54:C7:9A:54:05:26:9A:35:C3:94:BD:02:22:89:50:30:2F:70
Authority key identifier: 45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
Certificate issuer: /CN=4541f55c16590424fb34c65e0e2eac22882470db
Certificate serial: 0197B6A09F044124782064793284E1C62C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
Manifest number: 05F5
Signing time: Sat 28 Jun 2025 13:01:09 +0000
Manifest this update: Sat 28 Jun 2025 13:01:09 +0000
Manifest next update: Sun 29 Jun 2025 13:01:09 +0000
Files and hashes: 1: RUH1XBZZBCT7NMZeDi6sIogkcNs.crl (hash: XujzO3BOizIfqHYXQE4q5ermCS3X4M3b7zTABNlifog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:9f:04:41:24:78:20:64:79:32:84:e1:c6:2c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4541f55c16590424fb34c65e0e2eac22882470db
Validity
Not Before: Jun 28 13:01:09 2025 GMT
Not After : Jun 29 13:01:09 2025 GMT
Subject: CN=970f54c79a5405269a35c394bd02228950302f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:39:61:1d:de:69:c7:c1:60:c8:ca:16:02:cf:
cb:b0:c5:04:cc:48:9e:e9:c0:a6:c4:bd:43:a3:19:
f0:e6:21:9c:70:fc:29:2b:e7:14:17:05:c6:88:69:
2f:1d:02:31:b0:b1:9a:dd:cd:ed:1e:36:39:25:85:
9b:ba:d0:31:d0:68:60:5c:4f:53:2e:8c:b7:b0:29:
d2:ef:aa:50:0a:90:28:21:e9:cf:69:40:fa:fa:48:
96:a1:da:a0:e1:8c:0c:ba:3f:c8:0a:d6:3c:f3:0c:
5f:da:3d:67:76:1a:08:96:69:41:28:37:84:d7:e7:
a5:f3:b3:d5:c6:f2:e5:09:69:54:81:bc:75:fa:fc:
a9:10:ff:0d:9a:30:6d:9c:1d:2e:98:62:7a:21:5e:
74:33:42:0b:d7:73:c3:46:46:99:5e:7f:26:8b:7c:
54:c7:5c:08:13:c2:9d:08:f7:83:d7:63:7e:e7:c4:
71:0c:b1:fd:36:7f:2c:49:93:06:da:00:38:7b:46:
d8:b4:38:8e:19:6e:a4:79:03:b6:6c:6c:50:9d:40:
08:3c:46:d0:f9:a6:6c:7f:1c:be:4d:8d:6e:12:f8:
a7:a1:1e:3a:eb:7d:ae:02:f7:63:94:7e:f1:23:87:
66:99:e6:93:41:fc:b0:8a:34:53:00:6a:30:8a:43:
55:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0F:54:C7:9A:54:05:26:9A:35:C3:94:BD:02:22:89:50:30:2F:70
X509v3 Authority Key Identifier:
keyid:45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:8f:d9:fb:d0:e7:e8:76:2f:20:e3:7c:ef:f5:8c:c9:b1:5e:
e7:91:1e:51:0e:88:ef:92:9f:c2:a8:d5:13:97:9a:ec:78:10:
91:e4:5f:a5:30:41:47:09:1b:b9:27:0f:bf:49:83:a0:27:5e:
34:66:da:c2:15:de:d3:af:6a:76:db:1d:77:10:04:f6:ec:c6:
9d:13:5f:86:5f:f4:77:ed:79:58:b2:c9:c2:8b:9d:e0:c3:7e:
4b:69:ca:67:de:31:cb:67:8e:ad:8c:2f:a7:9e:66:6e:9a:a6:
db:47:09:da:97:c0:48:85:e6:95:61:9b:bb:d9:ba:d1:2e:f7:
3d:b8:78:0b:46:b2:f8:59:38:5f:c3:2d:63:ff:e3:d5:a7:a6:
94:56:f8:35:85:5e:9f:19:81:6e:b6:30:c2:59:46:44:23:ab:
ce:3a:bf:15:73:7f:81:6b:5c:b4:15:85:99:da:6c:72:0c:f3:
09:91:48:30:6d:f3:5b:4f:18:22:b6:59:d2:05:de:47:cb:1a:
5b:88:dd:5e:3a:70:d8:48:43:62:2e:4e:76:39:10:07:cc:0b:
ca:1f:d1:c1:00:50:dc:1d:71:82:fa:c6:70:47:a0:57:64:33:
f6:a9:d0:93:e1:8e:89:f1:a8:e6:4d:dd:da:d8:fa:89:86:42:
39:a0:a9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:10 2025 by rpki-client