Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
File: Ruvdrmp6zug6MioOdDpnWdhTZfI.mft (raw, json)
Hash identifier: ZJxKdwz2RciTUaCmj19xCdgx1OH+1cYJmRSQXMfJlPw=
Subject key identifier: 38:92:80:A3:50:E2:BE:00:CF:EC:D9:58:FB:89:7A:C5:1C:7B:5D:EB
Authority key identifier: 46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2
Certificate issuer: /CN=46ebddae6a7acee83a322a0e743a6759d85365f2
Certificate serial: 019A4E4F86D4A095DAB164BC052DD2A7BB36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 10:00:25 +0000
Manifest this update: Tue 04 Nov 2025 10:00:25 +0000
Manifest next update: Wed 05 Nov 2025 10:00:25 +0000
Files and hashes: 1: BKkYw6wCv0BCzIN9mNvcFYakNOY.roa (hash: JOy8URSCrbw8xxAKeoSqWbsMyce29owmtAkGhYDeHjY=)
2: H1WmesnGsPGxvhrpIvl23X68COY.roa (hash: NWrgkD59WkzlbvqU60CxucBVP2HdE5fZ9W7KVT7TpRE=)
3: Ruvdrmp6zug6MioOdDpnWdhTZfI.crl (hash: Rs/Sa0DqEJaQ+NJlYHVilmqbZjBCng8NpnEEwO16iNk=)
4: igy17iTeqaYCdBBLyoPaHClVJqQ.roa (hash: B+Liv7dvp/EsH5cWaQvjUo2qiny7+O+NyRrhBkq35hU=)
5: wcBe8u24JXjeTWcCpL97nHKl1AU.roa (hash: OcQcSR3oTfsUHozUBTzFplqG9Qb0tgWAtrlG+anwobY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:86:d4:a0:95:da:b1:64:bc:05:2d:d2:a7:bb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ebddae6a7acee83a322a0e743a6759d85365f2
Validity
Not Before: Nov 4 10:00:25 2025 GMT
Not After : Nov 5 10:00:25 2025 GMT
Subject: CN=389280a350e2be00cfecd958fb897ac51c7b5deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9d:01:6a:60:4f:8f:28:6c:bc:91:1e:a0:e2:
32:98:6e:d6:0a:a6:ee:ce:c1:f1:0c:86:85:db:f3:
76:13:03:3c:8d:56:d0:c1:c3:22:d6:68:68:1d:62:
71:f2:b2:95:cc:de:b3:c1:d9:dd:6a:a3:3f:d6:24:
d3:af:b7:71:09:70:5b:9a:a9:30:d7:6c:50:a1:44:
07:ad:42:f2:a9:3c:18:0d:a5:bc:a1:e8:83:66:32:
92:02:36:c4:1d:37:f4:83:b0:e1:0f:28:a0:d9:76:
77:4c:ae:1b:1c:73:81:0e:8e:67:cc:a1:43:59:d5:
3f:47:83:4b:03:33:81:a8:c4:65:b8:f9:b2:69:b9:
35:a5:1a:f8:cd:f2:58:f1:5b:53:ad:0c:34:fd:22:
2c:1e:55:a9:5c:ee:04:b8:6b:57:19:3f:a4:ef:c0:
39:d3:37:83:ec:93:43:fd:ed:ec:4c:3c:28:22:bb:
ea:bb:65:17:59:98:47:00:55:20:30:fc:72:69:ae:
4b:7c:94:aa:d5:15:fd:15:3c:b9:d5:17:42:6c:cc:
ff:7f:1a:21:4e:d9:5b:12:e4:77:88:66:6c:87:d8:
db:ca:30:26:64:63:57:7e:9b:f6:eb:78:d2:72:62:
e2:f3:3c:55:32:6c:7f:c7:44:e1:3b:d4:ac:ef:8e:
1f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:92:80:A3:50:E2:BE:00:CF:EC:D9:58:FB:89:7A:C5:1C:7B:5D:EB
X509v3 Authority Key Identifier:
keyid:46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f1:25:f0:19:02:73:20:59:b6:e6:84:2b:cf:bb:5f:2f:27:
7a:09:8e:11:80:05:bf:3f:06:cf:f6:5e:27:e6:cc:f6:46:89:
12:86:ac:93:fa:61:ae:82:8e:fa:5e:f5:6d:e3:93:42:37:16:
90:d8:90:5e:60:4f:91:36:bc:3a:7b:1a:f6:49:a9:cd:1a:62:
26:29:97:16:64:55:0b:0a:44:ce:a4:3e:f5:b0:71:10:e9:77:
d2:ee:a4:8c:00:75:d1:69:bc:d8:60:96:0e:40:d9:10:34:b4:
a4:39:3d:5b:52:75:a4:06:ec:62:c1:b6:4f:4c:a6:2f:53:87:
ae:14:4b:59:d9:57:82:9c:a1:17:eb:8b:b3:7f:7e:e8:69:8d:
72:93:73:a7:63:9c:95:c9:f5:15:ce:bd:33:f3:cf:1f:4a:23:
a4:3e:a0:10:27:3d:29:36:bd:d1:dc:9e:56:2a:89:71:ec:ae:
9a:02:ca:f0:25:96:4f:56:c5:66:88:35:a2:fd:b1:56:a0:cc:
13:50:10:3c:89:20:93:63:90:c7:11:23:79:0e:05:65:4c:c8:
4e:3d:a5:d6:da:86:62:07:d9:c1:4a:09:ec:2f:8e:4b:0c:fb:
3d:33:c5:c8:36:84:8c:51:35:8e:98:11:88:b6:99:43:57:c0:
5f:90:4a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:34 2025 by rpki-client