Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
File: RusRr5NV2porXfc-zdf9CWektYw.mft (raw, json)
Hash identifier: O9f5gopZOoXgDOUl7lNWYLxCaRXfuaGvP3UQN3vnL0E=
Subject key identifier: 51:42:01:82:CE:D5:64:AF:00:0D:08:48:67:8A:03:E0:E4:0C:C2:18
Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
Certificate issuer: /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Certificate serial: 01974DE9FA25CB5F9EF9841FF9C63027CCD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
Manifest number: 1584
Signing time: Sun 08 Jun 2025 05:01:08 +0000
Manifest this update: Sun 08 Jun 2025 05:01:08 +0000
Manifest next update: Mon 09 Jun 2025 05:01:08 +0000
Files and hashes: 1: GYTVmNtXsClBN2_m1uRr3vF4R2k.roa (hash: 5aAitfXDnMCmu3njYRXM+C5ciF1JourPlKjasRSY100=)
2: RusRr5NV2porXfc-zdf9CWektYw.crl (hash: uK/Sml55AyKqjs8WOImInZpw7ATfVSB7UoLW3GMUOzs=)
3: a7IWjlJ3-v5YN5JtWuXJERn1hs0.roa (hash: ubv2dUjgg/MjekVb1dt+BNRzcRiJnDJyWbeGdndwL9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:fa:25:cb:5f:9e:f9:84:1f:f9:c6:30:27:cc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Validity
Not Before: Jun 8 05:01:08 2025 GMT
Not After : Jun 9 05:01:08 2025 GMT
Subject: CN=51420182ced564af000d0848678a03e0e40cc218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:e0:2f:09:69:6a:68:29:c9:ee:08:bc:8f:
ff:d3:47:c6:f4:2e:96:15:f6:b4:15:d9:be:3a:cb:
bb:a9:cc:c3:bc:2e:2e:67:3d:6c:55:8b:4f:b9:65:
3c:3a:ff:59:8f:77:0d:25:fc:46:1c:a3:25:bc:7e:
c2:86:cb:e3:75:b3:56:ff:43:1f:8b:0f:7c:81:a6:
4e:3e:b3:11:ee:65:7b:31:5b:21:cb:9d:2b:05:be:
0c:01:a6:03:71:e9:cb:26:90:9a:3c:96:bc:79:88:
5f:2b:88:f2:54:2b:a3:e0:a1:be:74:44:1e:30:ef:
67:1d:3b:d7:05:15:7a:7c:a9:f7:6c:65:b4:7a:0e:
71:e8:32:c3:16:3d:d9:09:73:b2:c4:13:2f:ec:51:
e9:7d:69:a9:4e:85:ab:c5:c2:eb:35:3a:60:c7:d8:
9a:d7:bf:76:ba:ce:fd:e5:b7:21:bb:9f:af:a3:a5:
6a:4f:7c:28:bd:11:91:c5:81:7f:ab:8e:f6:a2:d0:
a7:87:d4:7e:5f:58:16:ac:57:78:b2:da:67:0e:c6:
e4:c2:b4:fe:ba:a3:f1:b3:7d:28:0d:a5:ed:94:62:
88:cb:17:04:59:66:e2:82:fe:e2:aa:ca:4f:4b:c9:
13:a3:0e:73:01:58:6a:e3:3c:91:2e:54:80:28:bc:
ec:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:42:01:82:CE:D5:64:AF:00:0D:08:48:67:8A:03:E0:E4:0C:C2:18
X509v3 Authority Key Identifier:
keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:eb:83:b1:3e:c7:dc:e3:ee:3e:86:09:be:fd:89:9e:5f:68:
ad:45:bf:40:c3:b0:31:60:fa:1d:e5:5c:9d:fe:ef:d0:19:f9:
dc:44:84:ba:b5:4c:57:42:0c:41:05:14:45:22:54:19:b2:f3:
e2:ba:80:69:82:a8:37:a0:ec:5b:37:29:05:55:07:f3:af:3c:
ec:ea:83:2d:0f:36:bc:11:0b:ea:de:77:58:d7:2f:8f:c0:9d:
58:7e:35:b1:41:bf:24:67:a7:5d:f8:81:cf:52:04:0c:e7:ca:
22:da:1a:47:6d:89:38:58:cd:77:1a:a7:91:e4:f3:5c:0c:07:
7f:39:21:7e:e7:6a:1e:c6:0b:84:0a:1b:01:ce:07:d4:89:62:
16:33:74:2a:58:49:51:cf:55:c0:b5:7c:e4:70:0a:51:55:8c:
b1:73:9c:b8:0a:e9:e1:aa:20:bb:dc:13:e5:56:48:d5:14:b4:
a4:ba:61:2b:29:fa:10:2f:ef:a1:a5:47:55:60:24:84:76:b5:
85:fe:57:08:80:2f:5a:8a:37:0d:aa:d6:2c:d1:c9:74:35:5f:
db:a2:4c:93:8f:4e:79:76:24:da:69:8b:e4:69:d8:f2:63:d5:
a0:f5:d0:09:b7:fd:0c:4f:91:54:20:01:66:04:58:3c:72:b8:
a8:2a:51:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:33:17 2025 by rpki-client