Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
File: RUDapMJFpHJfOAQUAra__e0V6ng.mft (raw, json)
Hash identifier: 2/e8F/ntJobbI/H/4GTAwK/DyGSs0IalN9RLw/OOdSA=
Subject key identifier: 45:B9:C4:B9:87:E8:7C:64:03:29:15:A8:73:45:A5:24:FF:2E:ED:D8
Authority key identifier: 45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78
Certificate issuer: /CN=4540daa4c245a4725f38041402b6bffded15ea78
Certificate serial: 019A4E18F7D229F150B453112DDA7EFBB2A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 09:00:50 +0000
Manifest this update: Tue 04 Nov 2025 09:00:50 +0000
Manifest next update: Wed 05 Nov 2025 09:00:50 +0000
Files and hashes: 1: IzvcnFv9kw0TqyCe74ubve86Q-E.roa (hash: 78DgscXfEbwSYX7qdA0JtGlNdmCzdWY7H1HTizuXeoc=)
2: RUDapMJFpHJfOAQUAra__e0V6ng.crl (hash: YHPQD/0XwpndYPWjDItj7qIHH7nqUWgkukES6sQanlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:f7:d2:29:f1:50:b4:53:11:2d:da:7e:fb:b2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4540daa4c245a4725f38041402b6bffded15ea78
Validity
Not Before: Nov 4 09:00:50 2025 GMT
Not After : Nov 5 09:00:50 2025 GMT
Subject: CN=45b9c4b987e87c64032915a87345a524ff2eedd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ee:36:bd:55:3d:a0:0e:6a:55:37:35:c3:78:
4f:71:48:ac:f4:ab:3d:8c:88:cf:b3:bf:d1:e0:06:
25:35:75:81:a3:9a:fc:f1:be:df:dd:9e:d3:87:5e:
d4:53:97:66:b2:6a:9d:0e:7e:2b:4d:55:f2:27:d1:
02:87:0f:c3:bb:b7:d2:28:89:03:a8:97:a6:e6:16:
d4:ec:c2:99:99:0a:e0:6c:7d:03:8f:a5:e9:86:50:
47:21:35:4b:a8:ae:17:d4:be:c4:e4:22:30:5c:b8:
f6:e2:cc:49:ea:74:1d:45:05:00:e1:b1:2b:07:29:
e5:0f:6c:18:7e:bd:c3:9b:7e:45:6e:72:91:8a:bc:
3e:7e:b2:1a:05:c2:0c:94:73:19:e4:80:21:7f:68:
65:88:7e:1b:e5:99:9a:03:00:02:ec:f1:1f:1b:e1:
fa:2b:04:97:ea:8c:c6:73:37:46:50:30:3d:29:2b:
02:c7:e3:2a:ab:c6:af:1c:b7:5d:03:76:75:ec:a5:
8a:47:f5:c3:b8:41:b5:74:35:ea:bf:14:e2:91:69:
3f:23:4f:8e:0d:13:2b:77:b2:a2:bf:4d:f5:21:de:
e5:3b:1c:99:84:2e:df:a3:85:08:0b:34:ed:fb:64:
e9:10:de:ad:f8:e5:8a:e3:9d:9f:b4:58:e5:04:b4:
a8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B9:C4:B9:87:E8:7C:64:03:29:15:A8:73:45:A5:24:FF:2E:ED:D8
X509v3 Authority Key Identifier:
keyid:45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:af:5e:53:a8:f8:13:60:e5:62:67:ba:ca:45:58:10:61:29:
a4:7a:d5:a7:fa:9d:87:00:4b:1f:c3:37:09:7d:b7:47:36:b0:
e6:3b:89:c2:1b:09:a3:84:fb:2a:c0:45:a5:9d:80:4a:75:69:
e8:b8:81:fb:85:a7:0f:cd:34:41:29:e4:a4:27:bf:fa:91:f1:
a7:91:a1:83:01:b3:af:36:5c:30:da:e7:31:68:d8:d3:1e:b2:
3f:32:be:01:99:c4:f5:37:84:4a:ca:58:50:41:e7:a6:29:72:
6e:6f:68:a5:99:64:7d:1c:ae:61:71:6f:1b:8d:6d:80:f7:78:
e2:ed:32:c5:05:6e:2b:28:b8:5a:2f:16:71:3a:f9:a3:78:aa:
24:5e:8f:f4:0b:22:28:14:d1:41:3b:b0:9a:61:ab:0f:8c:fb:
6e:99:fc:9c:96:1a:42:81:6b:a1:9d:b2:4e:f1:2d:0d:33:7c:
73:4f:2a:2b:cc:05:d2:8f:4a:c5:84:8f:05:e8:95:3b:35:30:
53:04:16:e1:e4:41:5b:4a:3b:e6:75:46:10:b7:14:b7:ff:b8:
e9:dc:47:f8:c0:6b:88:21:1b:d6:2e:60:ed:9e:8b:6b:db:49:
0f:0a:93:23:c8:45:b7:2f:e7:02:cc:18:60:4c:82:44:10:0f:
81:6a:e9:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGPfSKfFQtFMRLdp++7KlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NDBkYWE0YzI0NWE0NzI1ZjM4MDQxNDAyYjZiZmZkZWQx
NWVhNzgwHhcNMjUxMTA0MDkwMDUwWhcNMjUxMTA1MDkwMDUwWjAzMTEwLwYDVQQD
Eyg0NWI5YzRiOTg3ZTg3YzY0MDMyOTE1YTg3MzQ1YTUyNGZmMmVlZGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4u42vVU9oA5qVTc1w3hPcUis9Ks9
jIjPs7/R4AYlNXWBo5r88b7f3Z7Th17UU5dmsmqdDn4rTVXyJ9EChw/Du7fSKIkD
qJem5hbU7MKZmQrgbH0Dj6XphlBHITVLqK4X1L7E5CIwXLj24sxJ6nQdRQUA4bEr
BynlD2wYfr3Dm35FbnKRirw+frIaBcIMlHMZ5IAhf2hliH4b5ZmaAwAC7PEfG+H6
KwSX6ozGczdGUDA9KSsCx+Mqq8avHLddA3Z17KWKR/XDuEG1dDXqvxTikWk/I0+O
DRMrd7Kiv031Id7lOxyZhC7fo4UICzTt+2TpEN6t+OWK452ftFjlBLSo1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEW5xLmH6HxkAykVqHNFpST/Lu3YMB8GA1UdIwQY
MBaAFEVA2qTCRaRyXzgEFAK2v/3tFep4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlVEYXBNSkZwSEpmT0FRVUFyYV9fZTBWNm5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jMGJhNmYtZGY2Zi00MTQ4LThmY2Et
ZDI1YWFhODA0MTQ1LzEvUlVEYXBNSkZwSEpmT0FRVUFyYV9fZTBWNm5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9jMGJhNmYtZGY2Zi00MTQ4LThmY2EtZDI1YWFhODA0MTQ1
LzEvUlVEYXBNSkZwSEpmT0FRVUFyYV9fZTBWNm5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdq9eU6j4
E2DlYme6ykVYEGEppHrVp/qdhwBLH8M3CX23Rzaw5juJwhsJo4T7KsBFpZ2ASnVp
6LiB+4WnD800QSnkpCe/+pHxp5GhgwGzrzZcMNrnMWjY0x6yPzK+AZnE9TeESspY
UEHnpilybm9opZlkfRyuYXFvG41tgPd44u0yxQVuKyi4Wi8WcTr5o3iqJF6P9Asi
KBTRQTuwmmGrD4z7bpn8nJYaQoFroZ2yTvEtDTN8c08qK8wF0o9KxYSPBeiVOzUw
UwQW4eRBW0o75nVGELcUt/+46dxH+MBriCEb1i5g7Z6La9tJDwqTI8hFty/nAswY
YEyCRBAPgWrpcA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:15 2025 by rpki-client