Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
File: tRu6i9P6566CScnEYWi6kAI9sZQ.mft (raw, json)
Hash identifier: DX/og1YvEXPgmXrfch1bbkxySlQq7ahqQmNgT/ezsRk=
Subject key identifier: DD:F9:FF:16:98:96:EA:65:3B:93:9E:F1:91:4C:B9:81:1A:C0:5C:E0
Authority key identifier: B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
Certificate issuer: /CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Certificate serial: 0197C8705AF3792DC71A44D683B888EFE6E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
Manifest number: 15B9
Signing time: Wed 02 Jul 2025 00:01:35 +0000
Manifest this update: Wed 02 Jul 2025 00:01:35 +0000
Manifest next update: Thu 03 Jul 2025 00:01:35 +0000
Files and hashes: 1: tRu6i9P6566CScnEYWi6kAI9sZQ.crl (hash: at7vdd53gjOJdFbk+lP7SzZlR/8K4HeyQORuGIBl0G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 00:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:70:5a:f3:79:2d:c7:1a:44:d6:83:b8:88:ef:e6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Validity
Not Before: Jul 2 00:01:35 2025 GMT
Not After : Jul 3 00:01:35 2025 GMT
Subject: CN=ddf9ff169896ea653b939ef1914cb9811ac05ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:9a:8e:a2:26:a8:a2:5d:e8:7a:d8:d4:2a:
6b:ff:b0:6e:25:da:c6:d0:9f:b2:1b:4a:5d:f2:2a:
b3:e3:8c:25:a5:11:84:6a:61:34:51:61:ba:c0:65:
27:46:ae:7d:a8:0d:66:96:fd:5d:1a:ed:33:78:d8:
41:a5:ed:e3:89:f6:e3:e6:49:ad:ca:90:de:43:5e:
31:62:44:e3:a2:7d:49:e1:fc:8f:11:eb:35:44:16:
da:d2:e1:e6:50:23:9c:b1:09:da:fc:c3:97:b0:1c:
d1:87:2e:ab:d1:56:8f:52:2d:03:50:65:5b:18:a9:
9b:0d:ae:d4:59:0f:1c:ea:66:c7:d8:8e:da:ac:5b:
ff:73:c6:c4:78:38:ae:54:b8:f9:c6:30:2f:fc:06:
d3:9d:95:36:2f:bd:4b:af:19:fe:4b:d0:2e:ab:67:
f5:c1:9e:8a:f9:ca:0c:61:9c:0b:95:7e:a7:52:1f:
3d:de:77:80:92:c7:c6:b9:8b:15:0b:4c:60:2c:ce:
76:5b:2b:2f:91:a3:53:dd:78:0b:f2:48:79:7e:5c:
92:eb:dc:b0:3d:d2:f1:18:4b:81:ee:30:6c:8e:d2:
03:fb:e8:a8:ae:51:bd:33:f4:2e:96:fe:34:6f:1b:
82:61:15:e9:91:0c:e9:a4:b7:e7:c4:d2:33:e4:8d:
86:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F9:FF:16:98:96:EA:65:3B:93:9E:F1:91:4C:B9:81:1A:C0:5C:E0
X509v3 Authority Key Identifier:
keyid:B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:56:aa:46:5a:30:80:55:c6:a8:99:54:2a:e4:38:52:ab:cd:
ad:92:87:0c:20:46:19:8a:5f:0d:02:21:13:46:09:dd:60:f0:
cf:9a:2d:f4:f8:78:9b:89:62:ee:16:95:ae:fa:66:f6:10:d9:
34:ff:7d:c9:5f:2f:81:09:06:de:86:e0:b3:94:63:c8:03:b2:
df:48:88:1e:28:5a:a1:23:f1:9e:b6:32:d8:6c:83:1d:29:9d:
cd:b6:33:07:8a:0c:e1:8e:48:ef:3e:df:de:14:07:55:18:f2:
e8:e0:1f:f7:27:90:ec:e2:ff:75:f7:b4:7a:23:12:1a:b6:4f:
a2:33:e0:d5:95:ee:30:ae:b6:2a:09:aa:79:04:76:93:01:ea:
8b:19:ae:97:63:66:e0:e6:23:93:c3:17:76:b1:ea:a2:e2:c1:
f5:e8:0d:59:21:e6:8e:d4:08:92:8d:21:e2:3d:a9:50:cd:ad:
b8:34:81:83:ef:93:ba:76:09:bf:68:cb:63:37:c2:ab:5c:6c:
2e:e6:5f:66:7f:5a:af:21:5a:f8:38:04:13:af:1d:4b:c8:91:
78:55:8e:c7:23:22:06:98:17:57:73:52:78:95:4c:34:2a:d5:
fc:4b:a3:53:61:d1:27:cc:db:0f:b7:c0:bc:e9:a6:b4:6f:22:
8a:7f:8b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:40:30 2025 by rpki-client