
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
File: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft (raw, json)
Hash identifier: JHjTpuL/ZuHrdKp00pDJVx+lwTKFMr/TEAj+ON13+0Q=
Subject key identifier: C9:0E:EE:9C:6C:E9:13:AB:D8:16:1F:E3:03:9E:03:84:2A:6A:CA:8F
Authority key identifier: AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
Certificate issuer: /CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Certificate serial: 01988BEA5FE9DA6C82664A97E5BFFDF4B778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
Manifest number: 1515
Signing time: Fri 08 Aug 2025 23:00:49 +0000
Manifest this update: Fri 08 Aug 2025 23:00:49 +0000
Manifest next update: Sat 09 Aug 2025 23:00:49 +0000
Files and hashes: 1: NasWHXHMUrneYOPi_YEJHup68SM.roa (hash: vL3Q2Q0+7pnxdL6gd2R9r+dXrTLQulaJB+4Rjiarvgs=)
2: mQMuKDoHnr1LeGkTlxHsfTZ3PWQ.roa (hash: zwJx6M98s8at6u4x9fLfaXSOW6xFzqNRxDzug5GEBAw=)
3: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl (hash: CIqZz7FDi1If2XetgZPlOBO4jMNyuO2QRlvlyUUZA2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:5f:e9:da:6c:82:66:4a:97:e5:bf:fd:f4:b7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Validity
Not Before: Aug 8 23:00:49 2025 GMT
Not After : Aug 9 23:00:49 2025 GMT
Subject: CN=c90eee9c6ce913abd8161fe3039e03842a6aca8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4c:87:db:81:a5:60:63:1d:a5:8c:f8:12:c2:
01:3a:76:6a:2f:ce:a8:8a:dc:89:ac:8e:f6:24:b5:
e8:b8:20:71:a5:0a:c8:b2:e4:95:40:14:97:2a:c6:
d0:c5:93:f1:b3:23:f8:a0:84:68:1d:9a:82:cc:4f:
9d:d7:bc:f8:75:7c:d0:ad:49:dc:5b:87:00:c9:3d:
1b:23:70:41:3d:56:a8:fc:ae:76:7a:0a:0a:f6:59:
66:50:0e:ca:c4:4a:5e:e7:e5:08:25:48:60:26:2b:
5d:2c:28:f5:28:fd:65:61:ef:de:8f:24:44:92:b7:
4b:ac:cd:fd:bd:e0:d3:b0:e4:23:5e:91:77:55:43:
95:87:8b:72:28:22:b1:4d:10:49:e7:49:b0:b2:c5:
d8:45:16:18:12:f8:ed:2e:c8:38:69:ac:53:3e:d3:
be:b8:4e:11:42:9b:ba:39:66:8b:a2:58:91:76:04:
59:c2:18:26:ca:f7:46:5e:d0:47:16:79:b5:c9:12:
db:11:41:29:d6:23:e7:07:89:14:a9:82:fe:96:2a:
4b:5e:78:ae:4c:6a:ef:95:04:02:a3:b4:08:eb:3d:
ff:ed:75:ed:27:d1:4b:e7:d7:c7:55:67:fa:66:34:
6f:12:3f:42:1b:33:3e:f9:48:f5:2d:c4:03:77:b2:
db:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0E:EE:9C:6C:E9:13:AB:D8:16:1F:E3:03:9E:03:84:2A:6A:CA:8F
X509v3 Authority Key Identifier:
keyid:AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:11:e4:6c:99:3f:2e:cf:af:ec:33:4b:2d:7b:43:36:a7:83:
56:e8:cf:cb:9c:c0:8c:47:ce:af:b7:cb:87:35:18:45:09:9f:
61:a6:11:1e:3b:eb:af:94:c7:7f:7f:85:ee:2a:a6:f2:c5:bc:
4c:a2:7e:51:45:57:a3:bd:73:9d:01:66:96:ca:6e:f5:83:90:
5e:d8:a8:01:f0:31:f1:15:7a:5e:a1:16:31:23:b3:ed:c0:ae:
a7:aa:16:98:e5:60:d9:ca:5f:9e:bb:f5:0c:30:3a:a7:d0:b5:
ed:5d:08:88:fa:c2:7b:67:bf:33:f1:09:ae:9a:d8:f1:36:74:
1c:c9:03:cf:3d:44:9b:2a:38:4a:2c:b7:31:74:99:5e:b4:51:
9c:c8:8e:cd:7f:a1:3e:19:d7:43:95:ac:24:d1:74:9d:80:6b:
28:d6:f4:fd:a9:87:ce:02:d4:ef:43:95:f4:b8:3a:12:60:d1:
e1:62:2c:b0:5b:24:d1:40:23:b3:eb:99:3a:d3:89:50:6f:1c:
8d:36:f4:03:d0:c1:24:38:bf:48:47:47:3b:88:2f:05:1e:c4:
c4:30:9b:80:cc:27:0a:fb:0f:56:7a:a9:bf:bf:c7:40:36:4d:
79:b1:9d:99:25:00:44:9e:be:59:c3:84:b4:84:0b:87:22:5f:
b2:ed:62:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:24 2025 by rpki-client