Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
File: RusRr5NV2porXfc-zdf9CWektYw.mft (raw, json)
Hash identifier: gjFGRKAHwhGXSRiEtNh17Yd2SHmbTb6Gkx5mkAUjrmQ=
Subject key identifier: E3:62:35:DC:CF:4F:C3:84:CA:78:CC:D7:28:F3:F9:15:60:30:0E:DF
Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
Certificate issuer: /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Certificate serial: 019848F7426155C2EFA40D75BCEC7507D485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
Manifest number: 1606
Signing time: Sat 26 Jul 2025 23:00:20 +0000
Manifest this update: Sat 26 Jul 2025 23:00:20 +0000
Manifest next update: Sun 27 Jul 2025 23:00:20 +0000
Files and hashes: 1: GYTVmNtXsClBN2_m1uRr3vF4R2k.roa (hash: 5aAitfXDnMCmu3njYRXM+C5ciF1JourPlKjasRSY100=)
2: RusRr5NV2porXfc-zdf9CWektYw.crl (hash: 0phVTgSyUJL8cbW0eVc/kttrpui0aprIvuQpSIZ/7Vw=)
3: a7IWjlJ3-v5YN5JtWuXJERn1hs0.roa (hash: ubv2dUjgg/MjekVb1dt+BNRzcRiJnDJyWbeGdndwL9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:42:61:55:c2:ef:a4:0d:75:bc:ec:75:07:d4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Validity
Not Before: Jul 26 23:00:20 2025 GMT
Not After : Jul 27 23:00:20 2025 GMT
Subject: CN=e36235dccf4fc384ca78ccd728f3f91560300edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:a8:c6:db:e1:48:ed:70:b9:78:af:4a:bd:
8d:5a:42:7c:92:fc:45:a1:50:96:e2:9d:ac:7c:b3:
ba:15:e5:f3:f7:69:de:ae:03:63:39:9e:59:90:9e:
bf:af:a8:f4:7c:1d:c2:28:17:d5:4e:fe:ad:6a:91:
19:f7:97:d2:0b:4b:e5:cb:0b:40:8d:e7:d1:94:be:
b2:f5:80:e0:0b:e0:a6:0c:fb:c3:32:d8:49:fd:2a:
ae:1f:f5:27:26:e7:3f:a8:6e:ed:5a:75:8a:49:dc:
97:d5:29:34:08:4c:77:d8:5f:a2:24:fb:97:f4:14:
79:fe:0b:ee:45:bf:2a:08:4b:06:90:73:62:60:8e:
09:7b:b3:e5:16:f7:3f:69:06:ab:61:80:28:22:19:
f8:cf:c8:1e:84:37:dd:81:0c:81:bf:1c:09:ca:dd:
40:09:ad:59:09:35:5c:c4:38:5b:18:6f:42:dd:9b:
8f:1f:cd:83:27:ef:d2:ae:13:70:65:2c:42:c3:2b:
88:4b:74:dd:1d:4e:77:9e:16:ea:b8:4f:d0:0f:70:
2d:ea:5e:cf:39:6e:bc:1a:7c:3b:24:e9:91:7c:c7:
3d:48:26:e0:e1:d1:12:6b:42:d0:ef:fd:ca:d5:5a:
47:be:fd:ad:2f:0d:c3:2d:b0:12:30:b1:c8:8c:89:
9d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:62:35:DC:CF:4F:C3:84:CA:78:CC:D7:28:F3:F9:15:60:30:0E:DF
X509v3 Authority Key Identifier:
keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b8:b6:19:b1:cd:51:90:ab:3d:c8:bf:73:ae:dc:77:7b:37:
fb:b8:f8:ad:db:4b:08:62:f3:8c:17:d8:72:f3:6d:8d:34:99:
20:18:e1:c9:68:df:07:f6:e3:db:a1:09:0f:58:e8:29:84:56:
7e:ca:d8:ab:9f:ab:62:9a:18:4d:8a:c6:32:5d:d5:d2:df:2c:
53:29:68:eb:a2:14:08:25:4b:53:cc:66:c6:c7:24:a2:89:8d:
cf:0d:66:0d:60:a2:c9:e1:31:7d:7e:4a:0e:47:a6:54:d8:56:
6d:bd:81:3c:ff:cb:b4:f4:32:ca:2b:5c:c3:6c:91:5a:18:2f:
55:ba:a3:b8:5b:f7:4d:51:37:de:56:ff:6a:3a:fd:99:ed:c5:
61:c0:e6:eb:fe:70:b2:99:53:06:18:80:b3:84:07:4d:23:d7:
03:16:7b:51:fa:69:d9:8f:8d:25:d4:f8:f6:c1:43:7f:e5:f8:
fb:c1:9a:46:46:90:83:a5:ba:27:86:3f:5d:db:e5:f5:4c:ee:
0c:55:75:d0:f8:46:05:be:bd:c7:64:6a:11:b6:5f:24:c2:65:
19:1d:9e:af:1e:e9:a1:99:a4:89:39:8b:33:7c:0f:f1:ae:5e:
14:1c:54:b0:fb:d7:24:2c:ff:a0:37:9a:1c:99:34:1c:b5:ff:
bf:88:ec:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:50:59 2025 by rpki-client