Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
File: RusRr5NV2porXfc-zdf9CWektYw.mft (raw, json)
Hash identifier: XHf8/FWvOGG5ff6VLP3ES3zQZMfBur+/b15zvOwZwC8=
Subject key identifier: B3:16:45:AC:89:96:33:B9:3A:5B:86:06:E7:AA:7D:46:F5:5D:F4:44
Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
Certificate issuer: /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Certificate serial: 019A526367CAA5DD4FC8C4C0029CBBD651FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
Manifest number: 1714
Signing time: Wed 05 Nov 2025 05:00:37 +0000
Manifest this update: Wed 05 Nov 2025 05:00:37 +0000
Manifest next update: Thu 06 Nov 2025 05:00:37 +0000
Files and hashes: 1: GYTVmNtXsClBN2_m1uRr3vF4R2k.roa (hash: 5aAitfXDnMCmu3njYRXM+C5ciF1JourPlKjasRSY100=)
2: RusRr5NV2porXfc-zdf9CWektYw.crl (hash: Phn8AskUMdL5TnJqhtlSRWX+rzfnSEuYSS4k5GcftYI=)
3: a7IWjlJ3-v5YN5JtWuXJERn1hs0.roa (hash: ubv2dUjgg/MjekVb1dt+BNRzcRiJnDJyWbeGdndwL9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:67:ca:a5:dd:4f:c8:c4:c0:02:9c:bb:d6:51:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Validity
Not Before: Nov 5 05:00:37 2025 GMT
Not After : Nov 6 05:00:37 2025 GMT
Subject: CN=b31645ac899633b93a5b8606e7aa7d46f55df444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4a:4e:82:5d:c9:52:e0:e1:c8:8f:85:24:b6:
9a:3e:09:27:bc:04:ea:70:6e:8d:3f:fe:98:d6:9b:
8f:d1:29:30:17:d7:aa:a0:79:fa:7b:f1:c0:a2:65:
26:95:fc:c6:75:2d:9b:46:f4:bc:7a:37:3e:0b:dd:
f4:08:fc:fd:f7:4b:fb:61:41:aa:e7:ee:d7:a7:df:
8e:36:d0:92:4c:40:7e:b5:a2:a4:13:67:76:c3:10:
1e:93:7c:ac:8b:3a:29:8f:2f:7c:ca:a6:2b:98:4d:
9e:cb:f1:99:1a:c0:3c:f1:ec:02:8a:37:36:5e:e5:
6d:3e:bc:60:31:a1:a3:76:51:88:f0:ef:75:ab:e4:
4b:c7:20:23:b9:85:4a:42:8a:76:31:54:66:86:c2:
e6:db:88:01:e7:12:1a:ea:03:f6:d2:81:80:eb:c8:
61:7c:6b:41:10:34:31:ac:b7:06:79:3d:fe:a8:35:
9e:52:3c:ea:4a:17:17:f0:37:13:7a:5e:1d:5a:1c:
02:6d:8e:57:7c:0b:af:c8:f8:7e:77:42:22:a1:5d:
40:01:9d:5d:ba:de:35:d1:e1:df:b9:01:f3:94:6f:
1a:58:75:40:7c:80:24:18:70:01:e2:36:f6:63:21:
b3:c5:ca:8a:1d:af:30:68:5f:78:0c:38:86:e5:a9:
9a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:16:45:AC:89:96:33:B9:3A:5B:86:06:E7:AA:7D:46:F5:5D:F4:44
X509v3 Authority Key Identifier:
keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:1e:d1:bc:f6:64:2d:96:77:26:6e:d4:f5:66:23:f0:a5:7f:
2b:88:31:a4:62:a3:df:dc:29:c2:22:1b:7c:32:dd:b5:ef:e2:
d6:39:d5:ff:45:e4:48:b6:c5:dc:e5:11:9e:67:90:bd:ad:ba:
0a:b6:a0:37:03:db:a9:a7:bf:11:e4:6b:af:ff:d2:a0:a4:e5:
0f:6d:69:4a:ba:7c:cf:d3:4d:51:eb:49:67:49:1a:7b:2f:22:
af:81:17:fc:f4:32:1b:18:72:10:d7:d3:76:c5:f0:a0:50:ee:
79:45:e7:86:3a:e5:52:da:c3:a9:d5:45:16:06:3c:ad:8e:f6:
f5:99:2e:2d:b4:30:42:ff:cb:8f:f9:73:12:c8:cb:7f:24:d4:
a7:85:70:0d:fe:70:bf:40:57:8d:f1:0a:7b:49:24:d1:45:00:
be:91:fb:02:5a:f4:0d:bf:4a:52:85:85:92:41:86:cb:ce:28:
93:0d:19:bb:ba:bc:f9:51:13:39:57:bd:d5:62:7d:10:ba:c5:
be:dd:64:0f:08:48:02:1b:44:a5:33:81:85:13:d3:a8:62:5c:
5e:ab:83:53:ad:7e:83:45:2a:04:cc:54:75:16:53:25:5d:3c:
da:bc:5a:87:da:29:38:98:ce:b4:10:77:42:13:ca:4f:fd:24:
a1:33:c6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:15:00 2025 by rpki-client