Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
File: ruqgluuzdlfk060hdmQRctbiArw.mft (raw, json)
Hash identifier: N2hXGIfp44IbAyLstQjAEJfR6mhj4MkLGtrra6cmZFI=
Subject key identifier: B3:4E:A5:10:49:53:09:19:28:6C:7C:C1:AA:37:F2:4D:43:2F:D8:31
Authority key identifier: AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
Certificate issuer: /CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Certificate serial: 019922559D2A629933A24565D34451ABC1E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
Manifest number: 0B09
Signing time: Sun 07 Sep 2025 04:01:00 +0000
Manifest this update: Sun 07 Sep 2025 04:01:00 +0000
Manifest next update: Mon 08 Sep 2025 04:01:00 +0000
Files and hashes: 1: ruqgluuzdlfk060hdmQRctbiArw.crl (hash: WFzuPlfU8y6Zebk6Y/MWMesjgEMkoVk6g8xJXXiaCh4=)
2: skCVKxk18u8iDsYso8A72bgiHug.roa (hash: nn/x2nXxtAw5Z/QReAqKvy2u4x4tQ9QyKaEVK0rkZpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:9d:2a:62:99:33:a2:45:65:d3:44:51:ab:c1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Validity
Not Before: Sep 7 04:01:00 2025 GMT
Not After : Sep 8 04:01:00 2025 GMT
Subject: CN=b34ea51049530919286c7cc1aa37f24d432fd831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f4:7f:8b:42:71:05:a0:2d:18:73:63:d0:a0:
eb:ae:b0:33:21:0c:25:03:ac:b5:be:cc:81:7b:8f:
ca:de:00:12:eb:c0:25:f5:cf:59:d3:d8:ad:26:a1:
2a:b5:5e:ed:6e:a6:18:8a:ff:e7:f8:d3:ca:93:fe:
91:cd:0a:b9:01:4d:b0:86:d3:26:9e:6f:ea:77:e4:
ce:a9:23:98:59:c5:6d:19:5d:ce:60:a1:bc:65:b7:
47:5a:f3:f1:57:64:8e:5d:a7:1f:7e:33:1f:fa:fd:
8b:00:ee:1b:40:b1:d8:eb:1f:d3:b8:f6:b5:55:18:
1b:fa:e2:6c:2e:56:a2:60:92:44:4c:ac:8e:b9:f3:
ad:71:97:29:ec:83:cc:38:13:51:24:74:01:95:7e:
26:3d:e7:81:cd:a9:a4:2d:33:db:47:af:0e:88:0c:
11:6f:3f:60:3c:ea:34:00:fc:e6:4c:28:a9:55:dd:
c2:93:d3:bf:89:54:bb:a4:1f:cf:ab:ff:ce:54:92:
c6:62:0c:29:90:f9:c2:17:7f:01:fb:f4:39:a8:da:
d7:4e:d3:e8:bf:15:0d:94:2a:6d:fb:55:10:ee:9e:
75:96:1c:32:f7:97:53:66:ea:0a:b9:64:3a:b2:20:
82:03:85:6a:8a:fe:41:a7:78:44:99:15:f9:70:a9:
d1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4E:A5:10:49:53:09:19:28:6C:7C:C1:AA:37:F2:4D:43:2F:D8:31
X509v3 Authority Key Identifier:
keyid:AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3b:a3:89:a3:35:f0:50:d1:b4:5c:b1:75:6d:10:0b:9c:3f:
f8:f2:bf:cb:8e:22:65:20:6f:82:e6:1f:5a:c7:ba:f9:db:73:
54:1a:5b:4a:70:38:b6:2d:4d:e1:8a:34:1a:8a:fc:f9:87:39:
a0:cf:e5:19:57:86:0c:06:bc:aa:60:57:ff:47:97:c9:2f:08:
4f:7f:e1:79:b5:96:f8:0c:7e:e5:dd:70:05:42:0c:11:65:f9:
e6:c8:db:7c:18:4f:fc:ff:76:ff:20:93:53:7a:3e:c5:f1:d3:
57:ce:de:fe:25:5b:a5:e2:13:83:fc:b8:b0:86:94:e8:79:e5:
a5:59:97:8d:12:77:70:e2:3d:8a:40:f9:3a:44:53:f7:ae:41:
05:de:ef:1e:a8:32:ac:93:65:a5:e0:3e:04:dd:35:59:af:f5:
d7:78:2a:ef:eb:0f:28:eb:1a:5b:5c:d4:ec:2c:63:8e:b4:12:
30:10:f3:55:c9:11:ad:11:60:35:08:0a:59:68:af:59:e2:72:
cb:6e:a0:5c:4d:f9:85:e8:61:7f:33:63:76:ae:b2:bd:fb:c9:
75:1f:5b:d4:55:9d:78:45:c5:5b:96:ab:35:d8:36:e2:76:9b:
48:95:70:81:28:6a:1b:ae:7e:25:15:ab:bc:ce:3d:3b:a2:69:
6f:2f:be:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:14 2025 by rpki-client