
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
File: ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft (raw, json)
Hash identifier: NUbtE8CPIQPp/sH+oT0FP768m4sJIiduvAb59FwPTAA=
Subject key identifier: A0:11:2D:F8:59:58:1F:D0:DA:2C:2E:DB:0E:9F:82:EF:71:D0:0F:EC
Authority key identifier: AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32
Certificate issuer: /CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132
Certificate serial: 019892FF1B424F72841CA17B38008395090D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
Manifest number: 0403
Signing time: Sun 10 Aug 2025 08:00:48 +0000
Manifest this update: Sun 10 Aug 2025 08:00:48 +0000
Manifest next update: Mon 11 Aug 2025 08:00:48 +0000
Files and hashes: 1: Y8bxmFfpWoR5ksX0Qq13ZOagVPo.roa (hash: C0DVCgE5f6/2s7WXTWOG0D5IiTtwmNwV6icT5/Rn4Qg=)
2: ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl (hash: 74s6GZQVw4BGE32H7jV6hKlNqvL6NnrDFCJfoXXxNos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:1b:42:4f:72:84:1c:a1:7b:38:00:83:95:09:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132
Validity
Not Before: Aug 10 08:00:48 2025 GMT
Not After : Aug 11 08:00:48 2025 GMT
Subject: CN=a0112df859581fd0da2c2edb0e9f82ef71d00fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:71:8c:a3:6a:d2:79:08:97:fa:bd:e8:28:
59:96:e1:94:7e:09:6d:0c:99:d3:cb:8a:e6:44:34:
0a:fa:0e:ba:23:56:36:1e:bf:de:b4:34:55:79:6d:
44:10:a4:aa:43:a1:c2:0a:f8:20:9b:01:2d:7b:fa:
3f:65:31:6c:70:2c:d4:f1:a7:74:3e:33:8f:1f:0a:
98:57:0a:e1:84:4a:90:a1:c5:52:cd:74:3d:02:06:
97:06:9e:b7:14:69:4a:20:bf:24:00:7b:9e:57:64:
ff:7b:4c:1e:ba:43:22:10:1c:71:53:1c:0d:9d:17:
65:39:ab:0c:2c:ac:42:55:74:0d:8d:35:08:75:2e:
84:89:ce:bb:7c:a2:fe:94:dc:20:0c:81:fd:3a:92:
53:30:94:26:65:1a:2d:49:13:60:70:3a:be:92:d0:
c5:22:6d:2a:40:e7:00:2e:f1:14:73:77:5a:35:d0:
ff:b1:8f:a9:d3:36:c4:c6:58:18:0c:f9:98:89:d0:
e4:11:2e:ef:6b:14:ba:b4:64:a7:00:ec:63:fe:e9:
fc:d0:c9:f3:f6:c9:c2:e7:f3:4d:4e:25:fb:43:5d:
4f:85:dd:89:1d:3e:c8:04:db:40:26:0e:ca:69:c9:
3a:89:00:17:21:ce:29:10:7e:66:4d:c5:f3:33:31:
1b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:11:2D:F8:59:58:1F:D0:DA:2C:2E:DB:0E:9F:82:EF:71:D0:0F:EC
X509v3 Authority Key Identifier:
keyid:AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:bc:6b:1c:ba:16:f8:62:91:b6:e7:51:78:7d:7b:2f:83:69:
4e:db:95:34:07:60:95:86:05:4f:7d:df:93:f7:4e:61:74:16:
00:1a:8e:ad:c7:df:69:79:d8:89:09:63:2e:64:d7:bf:57:e3:
0b:b2:fb:4e:59:69:1f:f6:01:d8:6d:13:13:bc:41:de:f9:d7:
d5:93:b1:a7:ac:6f:bf:ce:b1:14:3f:8f:a2:d3:a1:bc:fa:6f:
38:6d:98:e6:d6:3b:de:bb:16:f3:2a:23:e9:5e:a3:71:65:17:
d6:1b:50:2d:40:c1:73:54:aa:01:84:c7:23:47:50:c8:71:07:
dd:fb:46:8f:19:78:07:e9:4c:59:33:eb:c9:97:b5:c7:28:ed:
95:d7:06:49:49:cd:71:0f:af:cd:70:55:bf:eb:61:58:67:3c:
28:de:68:64:b4:62:a5:ab:67:da:59:18:f9:cc:af:7a:e4:2d:
95:00:7e:fb:2b:65:43:cc:1a:6c:e3:19:9d:dd:f0:47:b0:19:
6a:cf:a0:ef:f0:24:e5:56:4e:cf:82:2a:ff:49:07:d8:ab:b6:
69:62:41:4a:e4:15:9f:bb:66:91:e7:cc:1c:2d:a5:0f:ac:ea:
e2:1e:b2:6c:3c:16:e6:10:63:1b:8a:3b:ad:78:c0:aa:b6:7a:
cc:c4:4e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:56:06 2025 by rpki-client