Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
File: tRu6i9P6566CScnEYWi6kAI9sZQ.mft (raw, json)
Hash identifier: eI09aHp8+Ns0HvyQ9+0l8Btiqn7zoJl2ClNC4sCr9bw=
Subject key identifier: 29:CE:51:6B:C8:DD:E8:AB:AC:39:C7:B0:56:A4:2B:6B:2A:8C:57:72
Authority key identifier: B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
Certificate issuer: /CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Certificate serial: 0198D4E0926F1991D217B6A9BC67D0C89FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
Manifest number: 1644
Signing time: Sat 23 Aug 2025 03:02:23 +0000
Manifest this update: Sat 23 Aug 2025 03:02:23 +0000
Manifest next update: Sun 24 Aug 2025 03:02:23 +0000
Files and hashes: 1: tRu6i9P6566CScnEYWi6kAI9sZQ.crl (hash: ybms0fYJDioHKl3AcginG/JS6mcB3KDBgoXM8gQZWnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:92:6f:19:91:d2:17:b6:a9:bc:67:d0:c8:9f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51bba8bd3fae7ae8249c9c46168ba90023db194
Validity
Not Before: Aug 23 03:02:23 2025 GMT
Not After : Aug 24 03:02:23 2025 GMT
Subject: CN=29ce516bc8dde8abac39c7b056a42b6b2a8c5772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:0e:d9:d4:d8:f7:73:d1:51:65:fc:0f:f4:
1c:9f:5f:e6:d0:c2:85:64:15:ee:c2:ba:3e:ff:66:
d2:fb:47:82:6a:91:d7:a2:ed:d2:c9:4f:63:91:f6:
2c:57:28:ef:da:b1:22:20:75:3c:25:8e:10:92:d3:
e0:93:df:69:8b:a7:ba:27:45:9e:b0:e9:be:c5:c4:
34:eb:a0:8e:62:0b:aa:61:f8:d8:b1:dd:c2:dc:83:
8e:29:d6:25:64:e5:0e:18:af:39:b8:9b:31:f7:8e:
1b:85:79:78:04:39:97:06:8c:f1:1d:c1:4e:42:07:
0d:15:70:9a:3c:7f:80:9b:59:17:93:43:97:5a:ea:
b6:7c:17:9c:54:78:24:17:33:cb:85:bd:14:55:c6:
1e:33:72:da:08:bc:05:00:cc:89:f6:d8:18:f1:f7:
3f:88:8c:4f:af:91:d9:c3:b1:8e:df:cd:39:e1:26:
5d:e5:65:c3:2d:c8:9d:83:58:de:2d:3e:67:53:e8:
7f:b2:89:3a:d4:2a:ae:fc:52:24:46:95:55:c2:5e:
fa:f9:f3:46:25:fd:4e:e7:f0:83:a4:a1:13:86:5d:
2f:7c:df:cc:d7:cc:01:3c:8a:cc:29:13:6d:65:c9:
e4:67:e2:09:e3:4d:aa:3f:a2:9d:53:23:dc:ab:16:
f0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CE:51:6B:C8:DD:E8:AB:AC:39:C7:B0:56:A4:2B:6B:2A:8C:57:72
X509v3 Authority Key Identifier:
keyid:B5:1B:BA:8B:D3:FA:E7:AE:82:49:C9:C4:61:68:BA:90:02:3D:B1:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRu6i9P6566CScnEYWi6kAI9sZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a5a740-2bce-4338-99d7-782310e6662d/1/tRu6i9P6566CScnEYWi6kAI9sZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:48:23:bf:49:ed:be:d7:4c:b0:72:13:19:f0:c2:29:2a:fd:
9a:f5:92:06:53:ff:0c:ed:1a:9b:b5:d9:97:55:31:7c:6f:47:
bd:04:b6:6a:df:58:76:22:fa:69:99:6e:c9:08:55:75:49:b6:
42:48:c0:84:7e:b9:6e:35:39:c0:88:ac:88:34:a4:8d:4a:69:
e2:09:dd:e4:5c:a3:6d:07:5a:59:bf:1a:3a:91:64:7b:1a:16:
46:40:1c:2f:cf:be:34:34:5b:93:5d:65:f1:ae:5e:18:dd:b5:
4a:1a:09:74:35:76:67:44:53:7f:ee:c9:0d:2b:52:6a:2e:75:
90:00:a7:bd:b8:be:61:a3:d4:2a:7a:b9:e4:9a:cb:24:8c:2f:
cd:2d:c8:9e:14:09:ce:5f:f9:ed:cc:b0:0c:48:63:64:10:14:
01:78:e3:b8:d1:9a:0f:92:f0:e6:50:c2:a7:1f:a3:16:44:74:
9a:82:04:6a:86:cf:92:42:3c:aa:22:8f:ff:a9:9d:27:18:53:
04:65:89:c4:54:fa:a8:50:f6:bb:b6:22:d4:08:83:3e:b4:94:
6f:d4:26:26:e3:ec:70:01:f8:84:cf:5f:7d:e1:46:c1:fb:36:
41:56:94:7f:21:4f:bd:d7:b0:bc:36:aa:40:0c:af:d1:f1:75:
a3:48:fc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:47 2025 by rpki-client