Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
File: RusRr5NV2porXfc-zdf9CWektYw.mft (raw, json)
Hash identifier: kpsruytiPMBxvwSxMhpxMxhDRhDFwImn5Yk3EyiBQjk=
Subject key identifier: 64:41:24:A4:2D:C9:00:E4:5E:5F:D2:85:97:D7:92:F0:08:3D:A3:95
Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
Certificate issuer: /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Certificate serial: 0198D5F1968B6803881AD54492C2FB2EE379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 08:00:36 +0000
Manifest this update: Sat 23 Aug 2025 08:00:36 +0000
Manifest next update: Sun 24 Aug 2025 08:00:36 +0000
Files and hashes: 1: GYTVmNtXsClBN2_m1uRr3vF4R2k.roa (hash: 5aAitfXDnMCmu3njYRXM+C5ciF1JourPlKjasRSY100=)
2: RusRr5NV2porXfc-zdf9CWektYw.crl (hash: oAWJzQG9xVawGJpM7xktpz9S3SnIkiAwqHyDHpZfhIc=)
3: a7IWjlJ3-v5YN5JtWuXJERn1hs0.roa (hash: ubv2dUjgg/MjekVb1dt+BNRzcRiJnDJyWbeGdndwL9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:96:8b:68:03:88:1a:d5:44:92:c2:fb:2e:e3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Validity
Not Before: Aug 23 08:00:36 2025 GMT
Not After : Aug 24 08:00:36 2025 GMT
Subject: CN=644124a42dc900e45e5fd28597d792f0083da395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:b1:a5:78:aa:bd:14:6b:2a:e9:68:83:76:
ba:bb:aa:9f:f8:bf:97:2c:48:b7:b2:d6:d5:ca:ea:
f6:a9:78:96:9b:60:96:84:8e:19:3c:5c:41:2a:ef:
70:14:8f:55:ff:8b:47:33:89:b0:18:58:e1:9b:a0:
37:00:d9:b4:38:8b:a9:66:36:92:27:ac:0f:7c:46:
c0:43:9a:95:08:72:3b:51:50:01:37:ed:9e:4b:80:
1b:48:66:0f:4d:9a:22:9d:4c:3b:3c:c2:61:a2:ca:
af:31:2f:6d:ed:01:d8:c2:95:99:7c:4f:02:f1:28:
07:5b:81:2c:45:e4:a7:ee:b2:48:1b:c9:da:ba:9e:
69:1f:45:b3:de:d9:b8:9f:53:68:ce:f4:45:a7:ed:
4a:a7:31:f9:55:a3:01:90:d9:07:bf:2a:fc:a1:54:
1a:63:8e:99:80:47:c2:6d:13:a2:f1:16:7f:9c:a5:
80:5a:85:69:af:f1:7f:a8:e4:b6:21:08:87:a6:66:
8d:c7:5b:8f:9c:cf:17:9d:7c:a7:e0:8a:0e:6c:57:
09:10:1e:75:3c:fb:51:56:92:9a:c1:e6:f8:9f:84:
75:7b:52:3a:ae:01:72:2f:37:3b:01:d3:0f:8e:33:
1c:f3:16:bc:93:e8:2c:b3:01:54:72:fb:61:df:90:
5e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:41:24:A4:2D:C9:00:E4:5E:5F:D2:85:97:D7:92:F0:08:3D:A3:95
X509v3 Authority Key Identifier:
keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:19:1c:86:e3:53:80:47:ba:17:65:27:f9:e8:a3:dd:5c:a4:
ab:de:52:77:43:d0:25:a3:9b:4d:65:ad:4d:53:b5:20:54:c7:
56:94:91:fd:7b:61:be:9b:4f:3f:ac:4f:36:28:f7:bd:f3:28:
fd:f0:1b:1a:8c:01:22:13:df:5d:94:a6:1a:cd:32:f0:d4:7e:
ab:18:8e:dd:98:3d:d4:2a:3e:ce:c5:b2:b5:dd:78:2a:3f:16:
18:78:4f:2d:be:ac:e2:c3:7d:24:4f:26:f9:32:16:95:58:1d:
f6:2b:24:80:ab:7e:2c:00:a1:fe:03:ec:89:22:c9:f5:04:09:
63:fd:1f:b2:91:c5:6a:00:ab:96:8c:35:b8:54:59:06:93:f3:
d4:a0:64:ba:a1:ca:32:2b:70:d0:e5:ba:35:0b:53:b6:a9:3b:
77:aa:8d:4b:43:09:ea:9e:38:5d:bf:45:a0:16:ad:66:a9:fe:
17:da:31:7a:9f:b2:26:a4:ab:89:99:dd:a6:d2:9c:b8:47:78:
64:c3:9e:89:f8:4c:06:78:42:e5:74:2b:ee:30:d0:43:64:eb:
68:19:5a:fe:21:18:49:b3:95:87:45:93:32:b2:37:93:cd:79:
7d:1a:20:11:01:0e:76:20:6a:15:e7:96:b8:4b:d0:49:e5:11:
b7:5d:10:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:22:16 2025 by rpki-client