Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
File: ru85tCEAXzAraRD5Y5P0tlR6j-w.mft (raw, json)
Hash identifier: /uvsMvdpC/EIVpa1COsdhcRtvaJCoiNBg2pBx3S1UDg=
Subject key identifier: CF:B6:75:4D:0F:35:5F:FD:BB:D9:FC:D9:16:E6:D1:D0:D1:F5:1D:DD
Authority key identifier: AE:EF:39:B4:21:00:5F:30:2B:69:10:F9:63:93:F4:B6:54:7A:8F:EC
Certificate issuer: /CN=aeef39b421005f302b6910f96393f4b6547a8fec
Certificate serial: 0197B8FD1919004C7C90E4BE3003CA19389B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
Manifest number: 57
Signing time: Sun 29 Jun 2025 00:01:24 +0000
Manifest this update: Sun 29 Jun 2025 00:01:24 +0000
Manifest next update: Mon 30 Jun 2025 00:01:24 +0000
Files and hashes: 1: ru85tCEAXzAraRD5Y5P0tlR6j-w.crl (hash: uUSmwDLAXXC6QZdteLW7WjWIpxxY1NRxuWOlgSxs5ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:19:19:00:4c:7c:90:e4:be:30:03:ca:19:38:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeef39b421005f302b6910f96393f4b6547a8fec
Validity
Not Before: Jun 29 00:01:24 2025 GMT
Not After : Jun 30 00:01:24 2025 GMT
Subject: CN=cfb6754d0f355ffdbbd9fcd916e6d1d0d1f51ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2b:51:ff:09:02:e8:69:25:1c:b5:97:1e:75:
be:0f:2a:1c:6c:5b:c2:a8:f9:09:76:0a:73:33:08:
53:7a:d3:1c:e9:c0:f3:75:89:af:6d:e0:b7:c7:f2:
75:b6:3c:74:24:36:f2:72:2f:d6:3c:82:a5:ee:20:
ac:d6:60:7a:d8:4d:58:84:1b:9d:7c:db:56:b4:fd:
21:36:a8:af:17:b2:1f:d9:a6:b6:59:5f:3a:93:a7:
30:bf:a3:ce:b3:eb:d4:6d:c4:c7:54:a1:b1:da:a0:
9e:6b:83:8e:a3:66:a7:4e:79:54:c5:75:a9:fd:8c:
4e:67:eb:25:88:4a:27:73:9b:b2:e1:31:b9:f5:50:
a0:27:d4:ed:33:89:38:cd:a4:09:81:5e:df:cc:45:
f0:8d:0a:29:74:b5:39:54:55:e2:3e:64:ac:bb:dd:
fd:b6:c9:c8:1f:a6:cd:42:77:c4:a9:ff:2d:85:b8:
59:cc:27:d1:7a:ed:7a:a8:b3:8f:6e:d0:07:2e:f8:
dd:12:fe:74:4d:d0:f4:b5:53:38:e0:e8:9d:d9:a7:
5e:44:da:a0:f6:e3:59:b2:ae:b1:87:6b:6b:ff:50:
ef:5a:23:69:8d:53:14:78:27:7e:df:e4:08:85:2a:
53:73:8d:08:c5:dd:12:fb:8b:b3:06:aa:3f:e8:3c:
82:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B6:75:4D:0F:35:5F:FD:BB:D9:FC:D9:16:E6:D1:D0:D1:F5:1D:DD
X509v3 Authority Key Identifier:
keyid:AE:EF:39:B4:21:00:5F:30:2B:69:10:F9:63:93:F4:B6:54:7A:8F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:3d:eb:89:71:1d:15:5f:b8:d1:86:f3:83:e4:e3:d2:a6:7b:
3e:01:cb:20:51:d7:ff:3b:9e:3d:00:e8:5c:1d:6c:dc:38:75:
64:f7:65:63:51:ec:7d:db:62:6b:e8:c3:5b:b5:b9:ee:23:09:
3f:26:7f:fe:d5:7f:01:c4:31:a1:5f:20:48:c5:da:70:77:b0:
57:0e:2c:e6:e3:bf:ff:6c:35:34:58:5c:d1:2e:17:30:08:d5:
e2:be:8b:ec:8c:60:c5:87:09:72:5b:42:b5:79:6b:3a:91:1e:
da:3f:14:4a:21:f5:d0:63:a1:98:79:7a:eb:ff:01:e5:48:59:
03:f2:4a:77:6c:f7:6d:50:49:b1:41:5c:45:06:53:28:5c:c5:
46:79:23:ad:d7:12:2c:a8:19:32:af:3a:09:96:ee:d0:1b:80:
13:f9:89:33:9f:63:cd:1d:2c:9e:48:4d:bb:d2:24:29:94:6a:
38:e6:52:f0:fa:8e:dd:8a:7c:ee:59:f2:49:22:8c:21:99:6c:
c4:2f:63:98:25:a8:54:9b:cc:59:57:91:e9:b8:d8:71:12:f2:
ec:ce:4b:61:8c:c2:1a:0e:52:08:82:40:bd:f6:1f:85:7a:ba:
9b:c0:46:ee:6e:e6:e6:bb:d4:d7:97:36:ce:8a:ef:f3:50:43:
41:a6:6b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:24:26 2025 by rpki-client