Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
File: RUv1gRnP6Z8XSbzZvRJHArqctxM.mft (raw, json)
Hash identifier: AuXuLzf9EAC1sa9x/WOQh9d6M1qz6XXeRq7urWhThr8=
Subject key identifier: D0:6C:4C:08:2B:13:C7:6E:20:BE:72:70:11:43:1D:1B:7A:E9:93:F5
Authority key identifier: 45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
Certificate issuer: /CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Certificate serial: 019A51F57E7A45866DAF83666EAF4510A44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
Manifest number: 1196
Signing time: Wed 05 Nov 2025 03:00:34 +0000
Manifest this update: Wed 05 Nov 2025 03:00:34 +0000
Manifest next update: Thu 06 Nov 2025 03:00:34 +0000
Files and hashes: 1: 0MiQGDuP-2KHqgPkUVqX2ggP6Xw.roa (hash: NonlM+H8k9TxA6ceFqWkm9nyMbEovf9PE4ZCtGqStgk=)
2: L11MObU2nfX5tH-1x602KEbM5GM.roa (hash: HEVauMqoyVrcLnG8IoffxDGm/vSrfN8OpGRNiQEHWho=)
3: RUv1gRnP6Z8XSbzZvRJHArqctxM.crl (hash: +QkKlnBsq34heDP7F7+yW06zAI43Z0ACLSUgrzdPGGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:7e:7a:45:86:6d:af:83:66:6e:af:45:10:a4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Validity
Not Before: Nov 5 03:00:34 2025 GMT
Not After : Nov 6 03:00:34 2025 GMT
Subject: CN=d06c4c082b13c76e20be727011431d1b7ae993f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:3d:65:ad:a0:dd:6c:63:0d:89:62:61:d9:
d7:b0:f0:35:e7:72:3b:2e:01:d0:66:d0:0c:b1:ba:
c9:08:3a:de:b3:e2:b1:96:59:b7:d0:6c:26:32:4e:
3f:13:a7:92:27:c8:de:8a:bc:59:a6:b5:74:0a:57:
54:c8:b0:79:60:79:27:b6:07:4a:be:8b:c2:60:d1:
e7:53:c2:97:91:35:52:14:02:80:99:04:24:04:28:
0a:05:2e:c1:57:3c:63:50:12:fe:ad:8c:7e:83:13:
18:f2:c2:11:96:59:34:57:50:da:f6:4e:47:4c:84:
b8:6c:ab:5f:79:f9:d9:18:ba:3e:e2:cc:cc:9c:62:
5d:de:94:3d:57:9e:70:9d:e8:c0:64:dd:14:b4:79:
62:c0:87:99:3d:32:a2:6d:c3:0a:0b:9d:a5:2e:b8:
b8:60:da:1a:94:53:03:e3:a4:bd:92:b8:f1:b6:48:
d5:e2:5d:22:92:22:e9:c6:14:37:b6:c3:c6:b5:c8:
3d:cb:f5:d8:1c:91:80:36:65:f3:9c:a6:e6:5b:1d:
25:0a:f8:90:e8:3e:12:93:c5:29:d9:ba:c9:cf:9a:
e3:4d:00:80:6d:57:fc:53:2d:dc:d8:1a:dc:bd:86:
70:b5:f0:f2:7e:e3:4e:41:b8:4a:b7:1d:9a:44:97:
fd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6C:4C:08:2B:13:C7:6E:20:BE:72:70:11:43:1D:1B:7A:E9:93:F5
X509v3 Authority Key Identifier:
keyid:45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6e:c2:8c:e1:5d:03:b3:58:54:ea:26:e5:2a:f8:82:27:78:
aa:30:ab:35:b2:8a:5d:07:e6:65:2e:53:dd:2a:86:a6:3b:41:
c7:cf:fb:38:25:98:c0:80:b4:fe:92:59:83:f6:38:5c:3d:f5:
5e:a9:9c:cd:76:1d:d4:65:73:cb:88:7b:9d:94:16:8f:eb:50:
db:35:bf:d1:e0:9c:da:d8:b2:77:db:63:9f:a1:35:75:c4:33:
1b:d9:26:34:e7:81:ef:c6:0e:a0:a4:e8:36:35:0c:2e:a3:42:
60:fc:fb:28:18:13:4c:7f:c5:06:ce:b7:b4:f3:f9:5b:0e:40:
91:93:a5:3e:9b:22:a6:3d:5b:ee:4a:2a:ce:2a:f8:40:d9:6a:
34:d6:9c:1e:97:f4:19:0d:3d:e8:85:05:9d:64:1a:bf:5d:b4:
43:a2:5f:5f:a6:ba:d9:e4:da:ac:2c:7e:4b:74:ec:4f:40:25:
f9:cb:25:b3:04:1e:74:ba:ca:49:d0:89:e8:b0:b1:cc:d2:d8:
e6:97:f8:2b:77:c8:ad:81:7f:bb:7a:da:36:a4:ab:54:41:e3:
8f:1a:e9:22:3b:96:e7:99:e9:8a:74:10:f6:d1:12:c6:8b:c5:
6c:99:78:be:77:d3:78:b2:f0:93:af:71:9f:2b:50:91:94:82:
cf:76:af:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:59:36 2025 by rpki-client