Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
File: RUH1XBZZBCT7NMZeDi6sIogkcNs.mft (raw, json)
Hash identifier: jKwrr/XiVgPdB7JcRKHhU+Qu6IsTO+JHdKuNKJlp6FY=
Subject key identifier: C0:D3:0F:82:1A:54:39:55:87:43:76:E7:10:02:2E:8C:E7:7A:08:25
Authority key identifier: 45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
Certificate issuer: /CN=4541f55c16590424fb34c65e0e2eac22882470db
Certificate serial: 0198D65F1B5702DF76AAACDBD6F9054E5B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
Manifest number: 068A
Signing time: Sat 23 Aug 2025 10:00:13 +0000
Manifest this update: Sat 23 Aug 2025 10:00:13 +0000
Manifest next update: Sun 24 Aug 2025 10:00:13 +0000
Files and hashes: 1: RUH1XBZZBCT7NMZeDi6sIogkcNs.crl (hash: WakrSaD32qnT5SfvLGMQTASzKPFLQ8p5rGZZjJ6/8Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:1b:57:02:df:76:aa:ac:db:d6:f9:05:4e:5b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4541f55c16590424fb34c65e0e2eac22882470db
Validity
Not Before: Aug 23 10:00:13 2025 GMT
Not After : Aug 24 10:00:13 2025 GMT
Subject: CN=c0d30f821a543955874376e710022e8ce77a0825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:2c:3d:f0:90:2b:2b:78:74:75:c5:c3:e7:
bf:00:9a:cb:64:7d:a6:4f:85:1b:3c:ec:b2:1d:57:
69:96:10:4a:12:5a:d9:04:9e:12:1e:15:fb:bc:d1:
50:a6:6a:09:0a:45:47:f8:59:e6:74:b9:7e:cf:85:
a0:d2:aa:43:08:83:18:64:5d:ce:1a:4c:68:7b:30:
6e:91:57:9a:88:b0:29:8f:ec:b4:5f:a5:f4:21:71:
01:27:ba:7c:45:a9:27:cc:2c:a8:24:e1:c3:36:c3:
56:ca:f5:94:ff:ae:5f:41:2a:f6:ea:a4:82:50:e3:
fe:97:2c:3e:ae:e5:eb:64:b6:ad:7b:54:c2:d4:e7:
94:a1:83:bf:06:57:95:70:db:77:3c:b1:82:99:d8:
5c:0c:e2:ee:0e:30:a3:b1:7c:bf:ed:93:75:fa:84:
d3:69:15:ab:af:82:5f:22:5c:31:cd:fa:ee:00:4d:
79:58:8b:fc:89:74:d8:92:e8:3b:3c:3e:2f:72:4a:
c2:84:a6:c6:bd:4a:2b:e5:16:9c:34:46:3f:be:07:
06:1c:66:a3:42:b0:0a:e6:4b:09:42:6a:8f:49:03:
db:c0:1a:85:b8:46:13:af:2e:b7:fc:93:c3:1a:af:
d6:c2:9a:b0:40:39:90:c7:7a:fc:25:1d:aa:61:8f:
5f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D3:0F:82:1A:54:39:55:87:43:76:E7:10:02:2E:8C:E7:7A:08:25
X509v3 Authority Key Identifier:
keyid:45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d5:02:ba:83:63:1c:c1:ae:8e:22:a8:f2:f2:a8:46:14:9f:
97:4a:37:c2:d8:a1:c5:ff:95:f8:9f:eb:7e:33:69:81:b0:7f:
49:2f:7f:36:b0:b5:0f:29:12:61:6d:01:42:23:82:06:e6:12:
96:86:98:be:42:15:a1:7f:b1:03:bc:3c:fb:df:c4:19:d2:8d:
22:55:e3:f4:27:bf:2f:ad:1f:23:cb:58:8c:f7:52:b6:dc:c1:
62:53:37:e9:6d:88:84:85:ab:5e:40:06:7d:ff:f1:44:15:b9:
bc:16:60:2b:92:e2:20:de:23:64:00:74:1e:8a:a5:93:21:13:
e5:e8:14:41:d5:6c:2f:9c:f8:2f:1d:27:4b:92:15:c8:fd:e1:
c1:68:91:64:02:1d:cd:e9:86:b9:91:00:dd:e1:26:e5:59:89:
4e:2a:a0:45:d3:7b:4b:81:66:ff:77:b8:8b:9e:0b:5e:99:ef:
9f:82:cc:e7:c9:75:fd:de:86:5b:bf:5b:a6:ae:0f:8a:de:41:
0d:4f:c2:be:55:f1:dd:38:7d:8f:e4:c5:a7:32:00:f9:06:71:
c8:41:e6:bc:68:b8:2e:7c:a3:a1:73:fa:42:e6:eb:f9:1f:4b:
48:89:68:7e:64:25:38:b7:25:2b:2c:b0:d9:f3:43:22:e2:0e:
11:2d:94:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:37 2025 by rpki-client