Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
File: RUH1XBZZBCT7NMZeDi6sIogkcNs.mft (raw, json)
Hash identifier: BaTHLGx1L7PhEmUQj95d6ZZYaKsCzf5GAnOTIdP6a8o=
Subject key identifier: E2:CB:6B:07:07:C8:CE:65:F7:4C:3F:17:B7:4E:17:C8:AD:54:59:07
Authority key identifier: 45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
Certificate issuer: /CN=4541f55c16590424fb34c65e0e2eac22882470db
Certificate serial: 0198530EF0949E6F8FEB5D84E79D82F8EB45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
Manifest number: 0646
Signing time: Mon 28 Jul 2025 22:02:24 +0000
Manifest this update: Mon 28 Jul 2025 22:02:24 +0000
Manifest next update: Tue 29 Jul 2025 22:02:24 +0000
Files and hashes: 1: RUH1XBZZBCT7NMZeDi6sIogkcNs.crl (hash: GvT0fAHsxP+4YOo8l3CgwQGIw1nw3eLS0pnGaBdZFlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:f0:94:9e:6f:8f:eb:5d:84:e7:9d:82:f8:eb:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4541f55c16590424fb34c65e0e2eac22882470db
Validity
Not Before: Jul 28 22:02:24 2025 GMT
Not After : Jul 29 22:02:24 2025 GMT
Subject: CN=e2cb6b0707c8ce65f74c3f17b74e17c8ad545907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:5a:bb:82:33:f0:a0:b4:fe:ee:bc:fb:a8:
b3:cb:dd:45:17:9a:76:7b:67:7b:93:23:a2:d7:b0:
4c:d3:9f:7a:5f:11:1f:f5:08:fb:1a:7b:14:bc:3e:
d3:a9:9a:b6:76:51:a7:7a:57:b3:6f:94:9e:75:68:
8d:c5:d1:7d:11:04:0e:00:3a:06:15:34:0e:45:bf:
9b:0d:1e:c6:9d:f4:61:d1:cf:39:a1:b0:39:1b:76:
c6:e7:83:f5:29:57:74:c0:93:a3:fb:d1:f7:b9:8a:
80:2b:3c:c5:ff:e5:d7:8d:4b:b5:bf:7c:05:67:45:
a3:ab:e3:8b:e0:5b:f1:4c:07:ad:a8:26:31:fc:f0:
de:68:95:6b:fa:a6:a0:14:0f:35:55:50:fb:ad:28:
7b:c8:f7:57:ef:e1:4a:86:36:60:a7:c6:00:51:5d:
30:69:b9:31:27:d4:4a:d8:eb:ab:e6:51:f3:13:11:
73:ce:16:42:79:4b:86:c7:69:39:db:89:a8:98:fc:
3c:26:71:29:bc:c5:ba:d9:7b:6f:17:78:3a:e0:41:
21:5f:80:87:b6:10:aa:12:85:56:ac:e7:93:63:3c:
43:07:e3:c0:18:2d:73:d1:a8:ab:0c:cd:b5:52:77:
61:89:bb:f3:c1:5f:c6:6c:f6:27:89:b0:37:ea:73:
08:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CB:6B:07:07:C8:CE:65:F7:4C:3F:17:B7:4E:17:C8:AD:54:59:07
X509v3 Authority Key Identifier:
keyid:45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f4:03:91:fe:bf:c6:f9:cb:c8:4f:75:76:ee:6d:75:5c:3a:
bd:7e:9f:b3:88:4a:33:7f:3e:cd:fe:7d:e3:a9:3e:f7:b1:23:
cc:22:58:80:e1:fe:58:04:1b:90:7d:1d:a3:51:2d:43:c6:ea:
12:41:cb:e4:86:d9:6b:37:02:1c:c7:b9:f2:78:e7:48:11:68:
10:e9:d0:0a:b3:4a:40:6f:00:85:26:56:a1:8c:29:c8:e4:c0:
12:97:62:0c:2f:8f:cf:cc:54:5a:80:f0:52:b5:30:97:79:aa:
9c:e6:c5:0d:84:83:c1:b0:c8:97:e8:7d:1f:06:70:cf:ca:9d:
a5:7c:ea:3b:46:59:ca:54:1b:66:d0:1d:2e:85:de:c3:51:e3:
61:d5:40:2d:1d:d7:61:6c:7f:e3:7f:d6:cb:07:ed:f1:1e:3b:
b4:37:e5:ca:92:be:33:2d:41:ea:1e:b6:b9:28:79:80:44:ee:
8a:97:5d:c7:af:a9:c2:70:86:ed:dc:ce:19:4b:c0:0c:45:86:
3a:a5:b2:40:a8:0f:ed:b1:61:6e:05:81:fd:fb:07:27:53:cb:
fd:8d:c9:b8:ce:6c:bd:03:b5:a3:01:09:bd:05:78:61:14:db:
25:6c:8a:1b:0a:33:33:e0:a8:8c:16:96:73:49:e8:70:b3:2c:
3e:3d:da:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:18:28 2025 by rpki-client