Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
File: ruCNkzby5s0WXrcwKX_m0gyDw5o.mft (raw, json)
Hash identifier: Mb7jARFzg+Aqq1ucMPzLU/maLZVSvMiGKBGNTyOLyL4=
Subject key identifier: 3E:4A:ED:BF:C8:0C:33:85:48:BE:E2:C8:BF:88:08:AA:82:E8:6B:09
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Certificate issuer: /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial: 019855DEC5CEB023B02C2A82DB65F28041D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
Manifest number: 1352
Signing time: Tue 29 Jul 2025 11:08:39 +0000
Manifest this update: Tue 29 Jul 2025 11:08:39 +0000
Manifest next update: Wed 30 Jul 2025 11:08:39 +0000
Files and hashes: 1: BS_uFjltIa2QdarHmlrjr-N1lfU.roa (hash: In6YLEFgpwciZfoYuJdlvQqiCYVNTfn1vSODPqF0a14=)
2: KyGy1yiZWdO5Baarc34FhluuX6o.roa (hash: PluDSAEvqHUwzzXaYjhHiEYtCeH5Nq3YEFQLeyKhxg0=)
3: MTuQql9Rh88BHIoSEfi0N5xULhQ.roa (hash: c4KaJbDb+YQM6dcx+R5wyGu53GnRsEWM+y0F8Wui/6Q=)
4: aPIQbORfDqMdRus3FUsayPmmxSc.roa (hash: Bjwo2XfxvG4dmeK0piMxmJc9w9b8pe3Sc6uuX95IjTw=)
5: aTlzb3K-mNhSWkbEKv29Xc3ITT0.roa (hash: Y8Xw4D+ihA3z60B6zW48nfEFoOcri17+Bm+/jPd3INc=)
6: kL_2gvtUAFUX3-zbMD5AfdbkkFc.roa (hash: i5sBmgPlAzgh1HcdG7lTgrd/mdbOcJciFVKfQ5U2fAw=)
7: ruCNkzby5s0WXrcwKX_m0gyDw5o.crl (hash: tl73pw85Tm+1csJy5Tz4/jx7473XwUyiKF/5H2HxYAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:de:c5:ce:b0:23:b0:2c:2a:82:db:65:f2:80:41:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Validity
Not Before: Jul 29 11:08:39 2025 GMT
Not After : Jul 30 11:08:39 2025 GMT
Subject: CN=3e4aedbfc80c338548bee2c8bf8808aa82e86b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:28:27:aa:3a:fe:f9:75:21:d2:21:7f:69:
0a:d7:27:ff:30:93:dc:ef:f1:bd:b1:db:60:8c:3e:
d3:f5:22:a7:e9:85:93:64:4b:5b:10:68:04:4e:7b:
4c:02:ab:f0:33:ac:0c:47:8e:63:d7:32:56:3d:87:
a2:49:5c:2d:63:2a:ee:15:04:26:3a:57:33:dd:94:
5b:2b:30:3e:48:3c:83:e6:e5:57:7e:4f:31:3e:5b:
eb:49:8e:cc:95:bc:14:c4:62:b0:b3:a9:c9:72:8f:
01:49:9b:a9:20:94:e8:1e:30:2c:4b:d3:37:a1:fe:
50:6e:8c:2a:d8:58:e0:c1:96:d3:82:78:a4:f7:1c:
e5:11:c5:ed:ac:00:9b:4c:ae:49:3d:51:72:91:aa:
a7:51:5a:ea:fa:da:0c:55:86:60:ac:d5:2a:f5:d5:
f3:26:54:b2:4f:2e:63:ae:0d:3e:f3:33:3a:30:0d:
7a:6e:f0:4b:f5:b9:ad:92:eb:e5:af:55:0c:68:0d:
0a:d1:e4:ed:53:48:cd:25:00:0a:12:cf:41:d2:22:
84:22:7f:20:31:fb:25:dd:1c:a5:a0:3a:d2:bc:eb:
fe:69:c2:d7:0b:65:90:5a:cd:09:fe:9e:9a:66:3f:
31:67:77:64:6b:4b:cb:9e:ff:ff:27:d7:7e:33:fa:
93:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4A:ED:BF:C8:0C:33:85:48:BE:E2:C8:BF:88:08:AA:82:E8:6B:09
X509v3 Authority Key Identifier:
keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:90:17:ea:97:03:e5:07:d2:19:7b:cb:58:dc:4b:24:44:21:
fa:0c:37:6c:c5:ca:7c:1c:75:d4:71:3b:1c:0c:29:76:cc:9d:
75:aa:36:80:64:13:9f:77:6e:3d:30:d6:b6:76:5f:77:fb:54:
8b:85:b2:78:f7:78:1f:42:fb:57:8e:e2:e5:a6:95:0d:c6:bf:
60:8f:32:a1:34:e5:53:ba:b8:cb:e4:3b:11:33:26:e7:73:94:
69:29:55:9c:7e:06:a5:97:ba:9e:86:f3:e7:d5:c4:49:8c:be:
ef:02:9f:ce:09:1c:29:af:35:eb:06:75:45:42:f2:77:07:08:
b3:c7:4b:f8:34:9e:d7:04:5c:80:10:fb:26:35:c8:c2:69:44:
5a:d2:cb:90:ed:5e:7c:14:16:2b:c5:d9:42:de:cf:22:cc:24:
c1:a7:f0:f8:bb:e8:94:81:d6:40:7a:9c:7b:d0:44:3c:c0:10:
5d:c9:75:5e:84:d8:81:ee:1f:9a:bb:71:2a:99:04:4a:b2:a5:
c0:21:fd:c8:b2:2f:e2:4a:3d:83:e2:7e:1c:6f:58:c5:33:56:
6c:9f:c9:b3:58:76:a0:a5:25:68:2b:a0:2d:c4:21:70:ba:67:
0e:73:80:1a:76:f7:0e:fb:a3:8c:63:94:7a:ea:fc:ee:f1:73:
4a:94:68:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:53:09 2025 by rpki-client