Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
File: iAsPesuH0TTDhZ1y0NGmHkdRusA.mft (raw, json)
Hash identifier: CcZLSkmoQsoSJu+oq67t+TjdwNsOicEvgBMzjfmW9XM=
Subject key identifier: 91:C6:51:8B:5E:78:CE:CC:98:C4:35:24:2E:1B:F4:CB:EA:51:74:22
Authority key identifier: 88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
Certificate issuer: /CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Certificate serial: 0197CCBAF08E6B68B41B04392667829DD43A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
Manifest number: 0C6B
Signing time: Wed 02 Jul 2025 20:01:32 +0000
Manifest this update: Wed 02 Jul 2025 20:01:32 +0000
Manifest next update: Thu 03 Jul 2025 20:01:32 +0000
Files and hashes: 1: UubezK0uH4JLqxbhgPEY0N-6nSw.roa (hash: Oagl7z5x1jSe2CWCzxXuth3kqDf2dweMIxQL2+jadVg=)
2: iAsPesuH0TTDhZ1y0NGmHkdRusA.crl (hash: Tuju7K+r/Lg1DsxkhPLeuW9dW8MRyMq4jnuUlx9xo8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:ba:f0:8e:6b:68:b4:1b:04:39:26:67:82:9d:d4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0
Validity
Not Before: Jul 2 20:01:32 2025 GMT
Not After : Jul 3 20:01:32 2025 GMT
Subject: CN=91c6518b5e78cecc98c435242e1bf4cbea517422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:22:51:98:7f:a9:dd:1b:e5:5b:b7:e2:b4:
06:f3:54:2c:1b:03:bc:90:35:b9:01:db:81:d3:26:
40:74:35:04:cc:8e:d6:16:c8:4d:a3:50:6a:8e:f7:
28:88:a0:3f:80:b7:e0:48:c9:f1:42:36:4d:4f:bc:
53:7d:df:34:f2:5d:ff:8a:ac:5a:fc:36:c2:2f:40:
d9:6c:47:d9:d4:be:02:20:af:f2:7e:6d:01:f6:16:
6b:36:5c:05:44:e1:ff:26:b9:bc:27:d4:8e:cc:b3:
01:03:5f:57:57:d8:8e:fb:b6:28:24:05:10:d3:1c:
90:08:d4:0c:32:97:0b:a5:31:bc:ee:dd:ff:ec:39:
0d:96:6b:49:9c:03:ae:fc:fe:9c:a7:c7:1e:3a:3e:
33:af:bf:ea:ca:97:af:17:5c:61:dd:4a:d6:43:c0:
08:39:6b:6c:bf:56:97:7b:2d:d1:2c:c3:8a:1a:29:
92:33:10:db:d2:d8:9a:55:76:b5:fb:8b:fa:ef:e9:
c1:d2:d4:c3:18:9a:82:ca:63:cf:b6:60:58:12:55:
48:fc:ba:5c:e8:cb:c6:f6:8b:02:77:92:34:10:2a:
4e:6e:02:72:27:9a:ea:d1:34:9a:df:23:c3:d4:82:
8f:48:88:67:e5:44:e5:d6:40:09:22:e1:56:38:d5:
8f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C6:51:8B:5E:78:CE:CC:98:C4:35:24:2E:1B:F4:CB:EA:51:74:22
X509v3 Authority Key Identifier:
keyid:88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:86:13:7a:39:79:bd:c6:0d:0b:6c:86:8e:d4:81:f2:cf:0b:
ff:d9:f7:e3:cb:51:84:dc:70:0b:34:85:8a:76:c6:43:5f:ed:
8e:0e:78:4f:22:9f:b7:35:27:f3:11:d0:f1:bd:23:2d:50:81:
f4:22:50:de:04:3e:f8:58:4a:86:a7:7e:e7:5c:7d:19:90:aa:
59:5f:d2:5e:73:6d:0b:0b:74:bb:dd:cc:81:61:8a:aa:82:74:
e4:25:5b:ff:91:73:75:c9:2d:5a:ae:c1:89:46:16:09:26:32:
9a:21:72:f3:d0:b7:f2:dc:78:4c:0a:27:4a:52:87:1a:ad:b3:
ab:e9:31:0a:5d:f8:2b:19:e4:90:23:48:84:35:20:99:30:15:
9e:a6:d3:68:f4:09:f5:dc:1d:27:45:56:e8:47:27:ff:37:4d:
68:00:84:6a:fb:32:e5:75:00:da:d4:ec:1f:e1:9e:44:15:41:
e2:85:35:ff:1f:61:16:78:c6:e3:16:38:18:32:73:eb:88:0a:
02:6d:6a:c6:29:7e:0d:50:93:75:ba:ba:34:61:2d:fc:39:5e:
8f:0b:d6:13:40:07:ed:c3:af:df:8c:8c:f2:a3:4d:bc:b1:3c:
58:89:55:cb:75:3e:7a:8d:7b:40:9e:e8:48:32:92:09:d6:dc:
44:af:f1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:09:08 2025 by rpki-client