Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
File: RusRr5NV2porXfc-zdf9CWektYw.mft (raw, json)
Hash identifier: ogwdPtzGYD4egQ5UXTYp59y6nEA3huTUL17nk1UcwKY=
Subject key identifier: 81:02:25:3F:45:A7:AE:92:30:5D:A8:CB:45:43:19:81:7E:EB:60:70
Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
Certificate issuer: /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Certificate serial: 0197B8214E9804F93E02CE1D05D879984591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 20:01:19 +0000
Manifest this update: Sat 28 Jun 2025 20:01:19 +0000
Manifest next update: Sun 29 Jun 2025 20:01:19 +0000
Files and hashes: 1: GYTVmNtXsClBN2_m1uRr3vF4R2k.roa (hash: 5aAitfXDnMCmu3njYRXM+C5ciF1JourPlKjasRSY100=)
2: RusRr5NV2porXfc-zdf9CWektYw.crl (hash: ed4C3eCt5FCSqE1PpcwBWeQcQsB18q5AMDfEhukPr4Q=)
3: a7IWjlJ3-v5YN5JtWuXJERn1hs0.roa (hash: ubv2dUjgg/MjekVb1dt+BNRzcRiJnDJyWbeGdndwL9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:4e:98:04:f9:3e:02:ce:1d:05:d8:79:98:45:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Validity
Not Before: Jun 28 20:01:19 2025 GMT
Not After : Jun 29 20:01:19 2025 GMT
Subject: CN=8102253f45a7ae92305da8cb454319817eeb6070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:d4:02:be:bf:b1:e8:4a:3f:84:cb:dc:2e:
19:3a:6a:f6:6f:ae:2a:a3:e7:60:ca:54:c0:c7:09:
9b:9a:1b:dd:b3:df:49:c3:35:6f:a9:07:3f:d1:8c:
f8:9c:05:67:c1:87:eb:4c:6c:73:f9:16:4b:46:dd:
44:bd:cb:de:fc:15:8a:15:b6:20:ab:c8:a3:95:e1:
0e:3e:8f:ae:d0:ef:5c:36:e8:a5:b7:85:ae:cf:43:
cc:fa:ba:bf:61:46:29:45:be:90:c1:97:50:7e:ab:
bd:55:c3:1c:02:39:6c:f1:71:2e:81:5c:a6:64:77:
35:54:be:fd:c4:3a:ea:86:2e:31:c0:3d:5a:98:1d:
c8:0f:58:98:56:34:2b:71:87:b1:4a:b3:a6:37:51:
71:6b:b6:75:8d:6f:98:56:a1:29:ab:9f:1b:b6:0a:
a0:4e:c6:7f:07:21:9b:3d:bd:d3:7a:9f:fb:42:87:
ad:2c:59:9a:a1:f6:91:38:43:18:d7:b1:07:98:a2:
3d:12:8f:00:8b:53:59:c2:bc:f2:de:d0:71:eb:ee:
55:f6:90:4f:d7:e1:c8:12:a2:03:4e:6c:e7:37:22:
55:a0:74:b2:40:23:73:45:c7:cb:66:41:61:3c:6a:
4c:39:05:78:fb:2a:1a:12:25:72:37:37:8e:1f:fd:
a9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:02:25:3F:45:A7:AE:92:30:5D:A8:CB:45:43:19:81:7E:EB:60:70
X509v3 Authority Key Identifier:
keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a0:61:fa:ef:82:26:40:88:e7:a0:91:4c:04:16:84:77:2a:
66:7e:21:3b:04:b0:9e:83:d1:2a:41:ad:10:b3:00:49:17:a6:
3d:31:b1:a5:62:d2:c2:85:1e:77:9c:1f:72:fc:9a:c0:61:6d:
e2:91:e9:04:70:0f:3e:0f:14:fe:d0:25:79:d0:f5:8c:fa:fb:
8c:f5:85:96:44:69:94:d6:59:80:c6:de:90:7f:1b:16:0d:0d:
c9:9a:83:c6:4f:0d:3a:1f:39:ac:11:a2:c4:a1:27:c4:d3:7d:
7b:f0:03:c4:39:9a:46:dd:2b:78:36:9d:78:fd:3b:6e:34:c0:
c6:aa:8f:19:23:97:37:7e:88:4b:68:08:db:6b:6c:82:f7:04:
33:cd:b1:6c:27:7f:1b:a7:ef:74:fd:42:f7:d2:77:f7:3d:1d:
7f:7c:f4:13:c3:18:40:06:9b:79:26:99:a1:83:38:ec:6a:7b:
a7:ef:99:67:0a:a2:5a:6d:ac:df:23:f5:26:d1:82:ac:60:d3:
4d:9a:07:c3:63:54:5d:62:4f:c8:02:d5:ee:d0:30:d9:39:79:
0e:a0:4a:9d:bc:f8:87:78:4d:84:56:6e:4a:60:8f:b6:4e:41:
a7:74:1d:cc:23:53:1c:4d:74:30:fc:ee:5b:0d:44:4f:39:61:
fe:0b:be:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:14:28 2025 by rpki-client