
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
File: RUH1XBZZBCT7NMZeDi6sIogkcNs.mft (raw, json)
Hash identifier: ArHithyf1NS1VhD42UWgUX4+P7KPcTdwg6zu75KWaTk=
Subject key identifier: F8:AD:EE:7D:61:97:03:34:26:E5:A3:86:92:3D:30:84:8C:80:A7:DE
Authority key identifier: 45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
Certificate issuer: /CN=4541f55c16590424fb34c65e0e2eac22882470db
Certificate serial: 01974E57E6CAB3DAB5EE5AF0A5196CAE1F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
Manifest number: 05BF
Signing time: Sun 08 Jun 2025 07:01:12 +0000
Manifest this update: Sun 08 Jun 2025 07:01:12 +0000
Manifest next update: Mon 09 Jun 2025 07:01:12 +0000
Files and hashes: 1: RUH1XBZZBCT7NMZeDi6sIogkcNs.crl (hash: WLiJQ0XV2sRz0XEmAMrgrDNHMnkSI7Tn/2Ks6Of5Ens=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:e6:ca:b3:da:b5:ee:5a:f0:a5:19:6c:ae:1f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4541f55c16590424fb34c65e0e2eac22882470db
Validity
Not Before: Jun 8 07:01:12 2025 GMT
Not After : Jun 9 07:01:12 2025 GMT
Subject: CN=f8adee7d6197033426e5a386923d30848c80a7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:44:28:be:62:32:8d:fb:eb:a7:75:5d:8c:
96:24:7f:f1:7f:59:2f:97:b1:ec:41:b3:47:b1:eb:
93:22:0a:87:02:18:4b:0a:a3:c0:23:77:82:44:e9:
84:29:ac:a6:fd:79:4b:88:c4:ae:2c:9c:45:ef:9a:
c5:2d:b5:aa:b5:f9:24:d4:c4:07:24:37:77:54:9e:
a8:0a:33:20:3c:a7:23:f7:ad:3a:62:b3:81:55:b2:
e0:14:2f:92:20:9a:09:99:fe:fd:9f:83:f6:bd:23:
a0:f6:46:9e:ca:97:41:4e:9e:df:ad:43:43:26:f5:
e7:8e:5b:f0:ef:9d:0b:a0:97:89:7c:b6:ea:0f:e1:
d8:e2:1d:28:7a:80:78:d0:da:11:39:0a:ac:68:01:
df:38:ae:fe:02:1a:fd:29:24:8e:53:cc:47:ee:ca:
e4:3b:43:f8:f3:58:05:de:74:56:f0:b0:74:d5:bf:
e3:ad:1c:95:d5:9e:74:c7:5d:bf:24:00:35:10:91:
89:72:99:88:30:ec:b6:f9:e8:c1:d5:b0:af:a9:94:
f2:27:e0:f6:f3:4f:34:a5:b1:bd:2e:e2:64:66:8a:
4a:64:03:79:0e:de:15:ce:7e:dc:5f:a2:bb:48:22:
cf:9a:9b:8f:49:f4:f7:b5:25:bd:0d:d2:e8:cf:5a:
d7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AD:EE:7D:61:97:03:34:26:E5:A3:86:92:3D:30:84:8C:80:A7:DE
X509v3 Authority Key Identifier:
keyid:45:41:F5:5C:16:59:04:24:FB:34:C6:5E:0E:2E:AC:22:88:24:70:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUH1XBZZBCT7NMZeDi6sIogkcNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d3885c-6b74-43c4-8fdd-789d07c19808/1/RUH1XBZZBCT7NMZeDi6sIogkcNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:79:c0:3a:d0:d2:04:d8:e4:11:1c:00:f8:36:8e:df:18:a1:
ec:e2:6d:9d:73:8d:78:ad:89:81:66:90:b5:f7:60:d1:97:ef:
c3:bb:bf:2a:1f:12:0b:cd:d8:70:61:5d:8c:40:f3:8e:a1:cd:
f6:cd:ba:36:bb:99:69:7b:8b:f7:56:cf:63:04:89:ff:26:b6:
bd:31:44:c3:17:5a:10:42:cb:75:1a:9d:e5:79:20:62:77:d2:
23:ed:51:36:1a:28:e1:f5:a6:aa:c0:98:bf:2c:a3:35:3a:03:
44:ad:38:cc:03:2c:37:7d:e0:97:3c:8b:4f:1b:8d:6f:26:4d:
b2:8c:ef:a1:70:f1:b6:04:c9:a0:5c:23:a2:b1:ee:59:f5:cd:
d5:92:e4:32:07:13:52:87:ec:6e:63:c1:4e:84:3f:c6:76:95:
a5:e1:63:38:02:10:da:2e:67:68:14:0f:13:26:64:c6:86:36:
62:7c:f9:16:d9:ab:23:39:28:ca:e9:44:11:63:bb:42:3e:da:
ed:f7:41:f6:df:bf:a0:af:da:b2:51:b0:1d:e4:0c:41:6d:18:
70:95:05:90:4e:d5:ed:51:6d:12:7f:b5:45:2f:64:80:80:a6:
16:8c:fe:9f:81:4a:32:d7:a2:4a:3f:1b:2f:1b:cb:24:54:62:
c9:71:df:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:49:15 2025 by rpki-client