Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
File: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft (raw, json)
Hash identifier: 4l/xmfAhDCXFwYysLl5qLDnG+u7M8EUARLFX/SIoEjs=
Subject key identifier: CD:81:C6:17:8E:92:E7:53:39:05:CC:D4:B7:F4:7C:40:79:C9:44:A5
Authority key identifier: AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
Certificate issuer: /CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Certificate serial: 019A4DE21607C4AA454E23A8B77AC1E7085F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
Manifest number: 15FE
Signing time: Tue 04 Nov 2025 08:00:53 +0000
Manifest this update: Tue 04 Nov 2025 08:00:53 +0000
Manifest next update: Wed 05 Nov 2025 08:00:53 +0000
Files and hashes: 1: NasWHXHMUrneYOPi_YEJHup68SM.roa (hash: vL3Q2Q0+7pnxdL6gd2R9r+dXrTLQulaJB+4Rjiarvgs=)
2: mQMuKDoHnr1LeGkTlxHsfTZ3PWQ.roa (hash: zwJx6M98s8at6u4x9fLfaXSOW6xFzqNRxDzug5GEBAw=)
3: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl (hash: 3ZjOm3zMfOaH4BJmYqeceNLW7hiuDaRKVRuP6n0KMrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:16:07:c4:aa:45:4e:23:a8:b7:7a:c1:e7:08:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Validity
Not Before: Nov 4 08:00:53 2025 GMT
Not After : Nov 5 08:00:53 2025 GMT
Subject: CN=cd81c6178e92e7533905ccd4b7f47c4079c944a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:27:43:68:b5:84:ff:ae:46:d4:a8:d8:ff:
3e:98:3f:38:45:a5:8c:58:f4:c6:24:ee:8d:84:d6:
61:c8:0c:55:7f:d8:89:3d:c4:e9:1d:52:7d:18:9d:
a3:bd:66:2d:2c:13:8c:21:9a:0a:f4:66:99:80:39:
90:27:c0:a3:2a:a4:ce:49:1a:05:b8:0c:ef:81:0f:
4b:93:bf:d7:88:0c:80:d9:d2:47:c0:e8:90:05:15:
97:84:d3:af:81:b6:21:60:bf:44:f9:28:41:ff:ce:
f1:43:be:b3:b6:7a:a2:51:ce:44:38:9c:8d:af:cb:
d3:79:a2:12:5a:f9:35:7e:7e:9b:12:cf:cf:3d:fe:
78:22:89:6a:ad:28:1f:28:46:d7:a6:d6:d7:e6:22:
00:d8:41:d3:0e:1c:de:a4:00:8f:8b:3a:d9:92:43:
17:a3:d0:d5:84:a8:b9:d2:db:7f:42:67:69:17:32:
3b:87:1e:dd:92:d1:1e:cf:c2:be:52:72:66:bb:3c:
d3:d0:6e:7f:ab:03:8b:c1:4f:fd:9a:7a:61:43:04:
36:ae:b8:34:04:2c:28:e8:0a:cd:8c:75:9b:70:d5:
3e:55:13:bb:20:69:9c:a1:b1:b6:bb:81:aa:0b:52:
e0:74:76:1d:63:c8:c2:23:2c:bc:43:c4:0d:51:7b:
3a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:81:C6:17:8E:92:E7:53:39:05:CC:D4:B7:F4:7C:40:79:C9:44:A5
X509v3 Authority Key Identifier:
keyid:AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:95:5e:42:51:28:12:c6:20:e3:e5:5d:29:3a:ee:49:46:20:
e2:71:c6:19:98:83:3a:c7:7b:59:90:6d:b0:ee:8b:56:c9:de:
dd:aa:a1:14:7f:6f:75:a1:80:1c:e6:7a:76:62:d7:e9:45:dd:
d5:b6:13:a0:93:34:a9:ab:dc:45:39:61:3d:89:9b:30:96:a7:
37:1d:b3:fb:b3:96:a3:ba:76:12:79:03:76:09:fd:42:77:37:
0e:ba:1e:d5:77:a7:9a:70:55:2e:fe:eb:29:06:2f:e6:4d:b0:
f7:4a:a0:78:4b:b1:ec:28:78:8c:f7:50:16:22:4f:2e:52:fd:
4a:9f:44:0e:66:fb:79:c2:b0:1a:5e:46:9d:1e:a8:dc:f3:d9:
e9:f7:ce:9b:05:34:4c:b9:80:75:b6:e8:59:c8:91:72:18:a8:
d8:44:02:85:0a:b3:85:a2:b4:b3:27:4b:a2:ba:ad:20:e0:13:
1f:5d:c9:71:10:2e:96:fb:77:89:97:dd:09:ff:ca:36:ed:8d:
06:b1:70:be:c2:88:4f:30:79:a6:ee:44:5a:73:82:dd:bb:43:
f1:4a:d1:c0:04:bf:71:12:55:be:83:47:1e:4b:95:61:c9:f1:
59:de:78:03:49:f2:5f:fe:fc:19:be:a8:9a:4d:e3:2d:2c:0f:
f4:47:5d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:52 2025 by rpki-client