Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
File: rTaQk6MtG34Ou-MkRRxY10iuzUI.mft (raw, json)
Hash identifier: fnCRmJkOkUhIxxMpjvzqgaJG5xtp3VgyjCuQd6MIkho=
Subject key identifier: 38:DE:CD:29:DB:46:C5:BD:C0:61:5E:61:BC:D1:45:B1:06:98:0B:FA
Authority key identifier: AD:36:90:93:A3:2D:1B:7E:0E:BB:E3:24:45:1C:58:D7:48:AE:CD:42
Certificate issuer: /CN=ad369093a32d1b7e0ebbe324451c58d748aecd42
Certificate serial: 0198D54E25045D1D6BE674A338A9092C53A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
Manifest number: 055F
Signing time: Sat 23 Aug 2025 05:02:04 +0000
Manifest this update: Sat 23 Aug 2025 05:02:04 +0000
Manifest next update: Sun 24 Aug 2025 05:02:04 +0000
Files and hashes: 1: rTaQk6MtG34Ou-MkRRxY10iuzUI.crl (hash: u/wYe+CQ8mQ9ARaYGjA8GH1QBadVnmP24OvJ03AWOLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:25:04:5d:1d:6b:e6:74:a3:38:a9:09:2c:53:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad369093a32d1b7e0ebbe324451c58d748aecd42
Validity
Not Before: Aug 23 05:02:04 2025 GMT
Not After : Aug 24 05:02:04 2025 GMT
Subject: CN=38decd29db46c5bdc0615e61bcd145b106980bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4c:bb:42:63:e9:ef:61:3a:d2:b4:b8:19:f5:
c7:c9:09:54:47:87:cd:3d:ed:73:cd:59:1f:6e:47:
80:0d:35:4e:ae:15:2e:37:4d:a6:31:fb:25:57:08:
3e:cc:1b:eb:5d:80:cd:c9:d3:d2:53:48:87:30:17:
e6:71:93:e0:cd:03:fb:f0:18:12:00:6b:5f:88:0d:
80:61:79:f7:08:b0:7d:a8:34:e5:ff:3f:c5:b1:fd:
39:5c:a2:17:29:62:23:23:ac:4a:33:e7:9b:50:39:
76:ef:e8:10:f0:84:a7:1f:41:f8:72:b2:bd:32:82:
e7:fe:e8:16:bd:cc:e2:d1:f7:b6:41:b1:f1:02:cc:
d8:12:54:24:c1:fb:9f:55:25:c6:8b:ba:8d:2e:ad:
aa:bf:87:4f:91:15:e8:d2:47:14:e1:9b:49:ed:39:
bf:ea:c1:c5:90:2a:c8:6b:af:ac:62:de:ad:a4:14:
9e:c7:34:ff:59:4e:99:2c:0a:d7:80:4d:ec:54:2f:
a6:c7:02:a5:22:0b:c9:43:8a:d3:22:6d:d7:d5:ac:
20:d4:f6:0c:86:0c:79:d3:29:8a:a5:35:f6:75:90:
7d:81:f8:90:60:e5:2c:e4:0d:a4:00:b8:f7:ad:e2:
c7:ce:e8:b1:e5:35:35:b1:57:b5:de:0a:24:a5:4a:
cd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DE:CD:29:DB:46:C5:BD:C0:61:5E:61:BC:D1:45:B1:06:98:0B:FA
X509v3 Authority Key Identifier:
keyid:AD:36:90:93:A3:2D:1B:7E:0E:BB:E3:24:45:1C:58:D7:48:AE:CD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5a:3b:19:6e:ef:bf:95:e3:20:3a:6e:75:0c:8d:f9:2b:fa:
ac:7b:c4:63:0b:6e:83:bc:df:4d:ca:50:b9:b2:ca:8a:88:2b:
93:7a:07:f0:17:97:26:13:8b:a3:f8:5c:7e:43:83:2e:bb:dc:
b9:a1:2c:c9:5d:f5:13:6d:b9:04:67:d5:8b:96:e6:ec:72:f3:
9d:2c:31:20:1a:20:52:e4:41:b1:d3:30:c2:1c:db:af:f1:6b:
90:06:df:05:2b:67:7e:82:70:16:41:9a:78:1c:2f:32:24:5d:
2d:d5:4f:73:cb:58:7f:f2:70:88:dc:d2:03:c4:e8:0e:bd:5a:
64:1f:50:2c:6b:87:a7:d2:e2:b2:73:2a:be:8b:e0:30:4d:12:
66:57:ff:f4:99:fb:67:64:07:f4:77:ee:43:d7:4b:95:d3:dd:
dd:3c:81:eb:2f:b8:3f:27:f8:ca:7f:60:2b:e3:81:a6:5f:ea:
8c:6e:58:7a:38:69:e9:b6:38:f0:b6:bb:f5:eb:1d:aa:92:12:
08:fe:97:46:ec:d3:c6:aa:f3:e3:94:2e:1a:45:c5:4a:7e:1d:
49:11:2a:61:a3:b9:d5:b4:e8:23:b3:17:69:2b:04:98:8e:f8:
e8:a2:49:f4:a0:56:f9:89:81:47:6d:8f:34:ac:20:44:1e:56:
1f:3a:4a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:53 2025 by rpki-client