Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
File: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft (raw, json)
Hash identifier: Z4Acw9TzJNDqTwPN/dgiyqIYa6slxuTeeBcSjvV030c=
Subject key identifier: 40:BC:D8:E9:A6:75:82:F2:63:26:5A:6A:83:94:35:22:55:64:84:BF
Authority key identifier: D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
Certificate issuer: /CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Certificate serial: 0198D54E46EC3CDEB3129DE80C2EAA543784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
Manifest number: 0C70
Signing time: Sat 23 Aug 2025 05:02:13 +0000
Manifest this update: Sat 23 Aug 2025 05:02:13 +0000
Manifest next update: Sun 24 Aug 2025 05:02:13 +0000
Files and hashes: 1: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl (hash: qxUVA2ljrFvkgXPbIvuwLTlybUNCeOS8g3GNvnG9i0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:46:ec:3c:de:b3:12:9d:e8:0c:2e:aa:54:37:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Validity
Not Before: Aug 23 05:02:13 2025 GMT
Not After : Aug 24 05:02:13 2025 GMT
Subject: CN=40bcd8e9a67582f263265a6a83943522556484bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:54:67:68:a9:b0:37:dd:59:bb:2d:c8:66:
c0:49:21:d9:f3:8c:9c:b7:c7:93:20:ad:c5:b2:ef:
dc:01:10:bd:0b:c2:ad:11:1e:6e:e2:6f:9e:32:92:
86:0b:f6:1b:1a:9a:fe:ca:53:de:c0:98:d0:d8:81:
65:de:4e:5f:6a:15:9a:c5:38:2a:e2:72:ee:df:89:
89:ed:45:0c:60:71:33:9b:84:5b:e2:33:3c:5f:5f:
c8:1b:53:12:ac:ed:f3:d9:b7:b9:36:b4:b3:df:a8:
da:29:7d:9f:87:ef:ee:fb:05:b5:d6:b8:04:7f:54:
21:22:7c:a3:c8:93:89:c7:42:c7:f1:11:d6:1a:c3:
f1:b6:fd:01:61:a6:4e:c5:bd:1b:99:06:5f:95:47:
96:b6:e4:61:3d:9e:47:26:cc:47:3d:9e:1e:ec:90:
b8:03:bd:ce:cc:13:d5:d7:11:3d:8c:1d:28:17:0f:
30:a7:81:b5:77:b7:6e:a9:de:3a:1f:a1:34:ad:2d:
08:73:28:90:06:3f:81:61:a6:32:a9:b6:0c:c1:2c:
16:dd:c6:07:eb:bc:11:d9:34:da:6e:64:72:1f:12:
21:be:19:ff:df:d8:1f:9c:47:c4:0a:2d:f0:58:f5:
82:e6:33:c7:63:07:fd:98:f9:03:13:02:d1:f4:6b:
23:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BC:D8:E9:A6:75:82:F2:63:26:5A:6A:83:94:35:22:55:64:84:BF
X509v3 Authority Key Identifier:
keyid:D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:49:65:93:d4:35:d1:59:8c:a8:7a:47:04:41:ae:19:58:e7:
ef:86:e2:5f:54:30:11:72:40:f7:bb:a9:e2:2d:a5:1a:8a:4f:
4e:52:67:40:31:3b:39:8a:f2:ed:f6:61:98:ac:85:60:95:18:
7d:f3:89:d2:ed:84:bf:8c:d2:99:04:5f:b6:ea:22:4d:b9:6d:
b0:c1:24:4b:c3:ce:dc:57:0e:45:c1:dc:83:d7:7d:3b:98:9f:
dc:85:13:d3:0d:dc:6d:9b:94:a3:10:30:77:df:a2:cd:e0:e7:
e9:76:96:67:6c:72:da:a6:7e:ac:10:26:89:4a:9b:99:10:21:
21:fd:b7:bc:42:9c:a5:fb:04:2e:75:dc:51:e4:85:46:7d:b8:
68:9e:c3:fc:0c:09:43:d6:c8:02:04:4b:d9:02:1d:16:46:f7:
ad:ba:3c:dc:10:6f:44:4f:2c:db:23:46:1e:36:3f:12:10:ac:
1f:a3:c6:42:d8:92:f5:51:50:5e:70:f9:96:13:a9:3c:9b:e4:
c9:a4:88:d1:72:d9:00:ab:bf:2d:13:f9:a4:c7:e3:3f:92:c8:
4d:25:dc:17:fd:58:6b:a5:6f:6b:09:76:80:34:41:3f:71:6c:
97:c6:c0:cf:58:fd:ee:a9:50:0a:18:4b:97:e6:a6:b6:19:0d:
52:e8:4e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:47 2025 by rpki-client