Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
File: ruqgluuzdlfk060hdmQRctbiArw.mft (raw, json)
Hash identifier: IonYE/RHy/dIne7aOcwveTg1QQknd3vUTgp99BOhWjo=
Subject key identifier: F0:F1:D9:82:28:19:CC:61:27:F5:5D:6D:7D:61:E9:F8:0C:F5:F5:6B
Authority key identifier: AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
Certificate issuer: /CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Certificate serial: 0198936D2509AAB905493656990A12B62E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
Manifest number: 0ABF
Signing time: Sun 10 Aug 2025 10:01:00 +0000
Manifest this update: Sun 10 Aug 2025 10:01:00 +0000
Manifest next update: Mon 11 Aug 2025 10:01:00 +0000
Files and hashes: 1: ruqgluuzdlfk060hdmQRctbiArw.crl (hash: O4M2p9bK2SnGpEO8Ssy/Kt+UsY9kfq35yquhDiGTTsc=)
2: skCVKxk18u8iDsYso8A72bgiHug.roa (hash: nn/x2nXxtAw5Z/QReAqKvy2u4x4tQ9QyKaEVK0rkZpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6d:25:09:aa:b9:05:49:36:56:99:0a:12:b6:2e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Validity
Not Before: Aug 10 10:01:00 2025 GMT
Not After : Aug 11 10:01:00 2025 GMT
Subject: CN=f0f1d9822819cc6127f55d6d7d61e9f80cf5f56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d0:90:d4:01:3e:32:22:35:82:8c:fe:ee:86:
bb:49:af:b4:86:c1:5f:0d:d7:ce:59:55:56:90:c6:
39:79:67:1c:e7:09:2f:9f:69:f7:9b:13:dd:0c:a2:
93:76:6f:d5:4e:a3:23:ee:ed:39:37:1b:34:94:19:
b6:2a:96:82:c2:4c:73:61:80:37:22:4f:e5:7e:7c:
57:7f:e2:be:4c:97:d7:d9:75:8b:fe:24:18:9e:bd:
19:60:65:ba:3b:04:ed:f7:57:10:73:6c:1b:ed:14:
e1:a2:e2:61:cb:4c:ea:cf:e6:6a:8e:56:68:46:88:
ae:73:be:d0:1a:7f:24:b0:f3:85:7f:77:0e:6f:4c:
40:77:ff:7b:4a:14:bf:05:6a:5d:da:be:37:6d:06:
d7:bc:13:79:b6:6f:28:cf:1c:9a:65:d9:24:b7:44:
c8:d1:0c:74:04:d8:58:9d:c1:e2:91:fc:ef:a2:53:
db:a1:58:28:65:05:73:71:b5:41:12:25:7a:96:ce:
ac:c4:ac:73:97:c7:c7:ca:b4:a5:ed:17:a0:02:c5:
7d:b2:fc:54:3d:3f:ad:d2:93:4d:61:56:d3:9f:85:
c7:c1:54:99:ef:42:70:22:72:e5:62:b0:5c:f5:eb:
41:07:31:a0:fd:2b:1a:1e:84:21:c3:54:d1:e8:f5:
92:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F1:D9:82:28:19:CC:61:27:F5:5D:6D:7D:61:E9:F8:0C:F5:F5:6B
X509v3 Authority Key Identifier:
keyid:AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:98:35:8b:4d:36:93:b3:f7:27:01:7a:a6:d1:c1:90:85:ed:
34:02:21:42:e1:e3:1b:4c:fa:02:24:72:8f:70:9e:d1:1b:e9:
fb:5c:08:09:31:93:5f:ce:ac:bb:e3:a6:b8:74:83:e8:5e:7c:
45:60:2c:ad:5f:0c:a3:d0:93:e7:8a:c5:99:c2:f6:3e:08:e3:
2c:6f:2c:f3:26:b4:3b:3c:2b:dd:94:00:6f:b3:1d:57:4d:92:
97:4a:10:75:c2:f8:02:58:cd:66:f7:9e:b9:bc:ba:53:b2:4c:
de:0f:5d:30:07:fa:6d:f3:06:65:22:1b:ee:3a:6f:6d:3e:aa:
67:f3:b3:08:f6:94:e3:cc:9e:91:43:ec:90:18:71:37:e0:79:
22:dc:23:d0:1e:dd:b4:f2:0b:d8:6f:62:51:0f:fa:a7:ff:54:
0e:fa:84:49:a7:4e:06:5a:7b:8c:ab:eb:1c:ac:8f:76:c3:98:
40:d3:6c:4c:2e:45:b5:08:49:a6:4a:ff:25:0d:fc:17:7b:c4:
0d:14:3a:f5:fd:34:9b:8f:ef:10:52:1f:bd:8a:e3:fc:31:79:
7f:98:70:b6:5c:4b:36:d1:01:0c:90:5b:a5:88:b9:98:80:97:
f2:ca:7d:e7:68:53:9a:2f:54:58:e7:ee:29:11:25:cf:3c:ad:
8d:0d:9f:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTbSUJqrkFSTZWmQoSti5XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZWFhMDk2ZWJiMzc2NTdlNGQzYWQyMTc2NjQxMTcyZDZl
MjAyYmMwHhcNMjUwODEwMTAwMTAwWhcNMjUwODExMTAwMTAwWjAzMTEwLwYDVQQD
EyhmMGYxZDk4MjI4MTljYzYxMjdmNTVkNmQ3ZDYxZTlmODBjZjVmNTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndCQ1AE+MiI1goz+7oa7Sa+0hsFf
DdfOWVVWkMY5eWcc5wkvn2n3mxPdDKKTdm/VTqMj7u05Nxs0lBm2KpaCwkxzYYA3
Ik/lfnxXf+K+TJfX2XWL/iQYnr0ZYGW6OwTt91cQc2wb7RThouJhy0zqz+ZqjlZo
Roiuc77QGn8ksPOFf3cOb0xAd/97ShS/BWpd2r43bQbXvBN5tm8ozxyaZdkkt0TI
0Qx0BNhYncHikfzvolPboVgoZQVzcbVBEiV6ls6sxKxzl8fHyrSl7RegAsV9svxU
PT+t0pNNYVbTn4XHwVSZ70JwInLlYrBc9etBBzGg/SsaHoQhw1TR6PWSTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDx2YIoGcxhJ/VdbX1h6fgM9fVrMB8GA1UdIwQY
MBaAFK7qoJbrs3ZX5NOtIXZkEXLW4gK8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnVxZ2x1dXpkbGZrMDYwaGRtUVJjdGJpQXJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iZWNmNDgtMDM1YS00NDcxLWJkZjMt
ZmZkNWJmNTk2OWRmLzEvcnVxZ2x1dXpkbGZrMDYwaGRtUVJjdGJpQXJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iZWNmNDgtMDM1YS00NDcxLWJkZjMtZmZkNWJmNTk2OWRm
LzEvcnVxZ2x1dXpkbGZrMDYwaGRtUVJjdGJpQXJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZg1i002
k7P3JwF6ptHBkIXtNAIhQuHjG0z6AiRyj3Ce0Rvp+1wICTGTX86su+OmuHSD6F58
RWAsrV8Mo9CT54rFmcL2PgjjLG8s8ya0Ozwr3ZQAb7MdV02Sl0oQdcL4AljNZvee
uby6U7JM3g9dMAf6bfMGZSIb7jpvbT6qZ/OzCPaU48yekUPskBhxN+B5Itwj0B7d
tPIL2G9iUQ/6p/9UDvqESadOBlp7jKvrHKyPdsOYQNNsTC5FtQhJpkr/JQ38F3vE
DRQ69f00m4/vEFIfvYrj/DF5f5hwtlxLNtEBDJBbpYi5mICX8sp952hTmi9UWOfu
KRElzzytjQ2fww==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:17:07 2025 by rpki-client