Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
File: RusRr5NV2porXfc-zdf9CWektYw.mft (raw, json)
Hash identifier: yOM8BhQ6sw0Y2t6kaEHr2IlyNsoWme5Q57AA7wI24A0=
Subject key identifier: 31:77:24:36:EF:65:1E:CF:89:B2:AF:E5:E7:BA:49:E2:A7:DA:B1:51
Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
Certificate issuer: /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Certificate serial: 019A25F878588A35AFCD48BB71CD26A4633C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
Manifest number: 16FD
Signing time: Mon 27 Oct 2025 14:00:31 +0000
Manifest this update: Mon 27 Oct 2025 14:00:31 +0000
Manifest next update: Tue 28 Oct 2025 14:00:31 +0000
Files and hashes: 1: GYTVmNtXsClBN2_m1uRr3vF4R2k.roa (hash: 5aAitfXDnMCmu3njYRXM+C5ciF1JourPlKjasRSY100=)
2: RusRr5NV2porXfc-zdf9CWektYw.crl (hash: nH6SHnHnviofbrnzIQKYp4Our/O3gAO/KYvrrTcBK0g=)
3: a7IWjlJ3-v5YN5JtWuXJERn1hs0.roa (hash: ubv2dUjgg/MjekVb1dt+BNRzcRiJnDJyWbeGdndwL9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:78:58:8a:35:af:cd:48:bb:71:cd:26:a4:63:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Validity
Not Before: Oct 27 14:00:31 2025 GMT
Not After : Oct 28 14:00:31 2025 GMT
Subject: CN=31772436ef651ecf89b2afe5e7ba49e2a7dab151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bc:45:a8:f2:ab:aa:9e:6b:d3:35:8e:3b:26:
01:da:0b:34:c7:fd:c4:b0:ae:9c:ac:ef:42:55:99:
d8:b2:82:e1:37:e5:ae:f2:c3:e3:64:e2:89:a4:14:
49:db:77:b1:74:20:d0:37:0c:7d:19:ae:f1:4a:db:
85:b8:35:a3:cc:17:63:ef:d3:95:4a:0d:62:b6:71:
e6:43:d7:39:c7:90:75:dc:e3:17:d7:21:70:dc:52:
ed:51:eb:4d:11:a2:32:35:d9:92:a9:f5:34:c4:e8:
4e:ec:59:67:d2:ce:a4:d2:07:14:ac:0d:7d:9e:e8:
d5:7e:e2:7a:c0:4d:9f:d0:4d:a5:43:b5:26:60:45:
a3:14:d7:f9:53:3e:4c:1d:d7:48:4f:bc:7c:f9:a8:
3e:3d:ec:34:2a:ec:ac:aa:bd:e4:b9:16:92:15:cb:
ce:d9:a8:7c:76:cf:8a:6a:d7:45:ea:d3:8e:73:5a:
12:36:22:dd:af:a7:2e:dd:16:4c:a7:82:b6:62:f7:
04:c5:2a:a0:23:58:2b:7b:e8:f5:a6:29:9f:0f:c3:
74:48:0c:ab:80:8c:d2:4c:6f:41:be:8e:12:c0:e3:
d2:35:2c:a8:56:6f:8e:50:8b:5c:91:81:21:3a:c7:
69:cc:02:c5:ba:9b:d3:53:17:a1:23:21:19:21:00:
6d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:77:24:36:EF:65:1E:CF:89:B2:AF:E5:E7:BA:49:E2:A7:DA:B1:51
X509v3 Authority Key Identifier:
keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:6a:b0:18:8b:46:b4:0f:fd:c7:c4:4c:fe:38:0c:b6:d2:de:
b2:77:ad:e2:6d:7a:81:df:ea:f1:da:2e:d8:50:69:bb:f7:84:
7f:1b:23:6d:c0:20:99:c0:e3:49:ab:79:cf:4d:f8:3e:ff:6b:
cb:5f:c9:d7:33:fd:cf:58:4c:c8:01:84:80:b8:d2:ea:19:b4:
dd:a3:b6:31:49:95:2d:0b:82:71:20:d8:5c:2e:1b:f1:3f:b4:
73:65:75:c6:cc:e2:c8:1a:63:6a:5e:21:c9:8b:66:f3:4d:8b:
4a:fb:6e:48:27:6b:60:26:94:93:18:63:0e:03:60:58:9d:43:
43:25:d5:87:fc:10:b7:6d:ee:70:01:71:1d:bc:31:92:89:92:
b8:fa:f0:fb:85:be:85:63:56:9a:e6:19:14:ac:12:0b:30:70:
a8:1b:31:79:64:24:b8:f5:75:d1:d8:0b:6b:e4:b4:3a:39:c8:
c9:6c:de:c9:a3:a3:6e:25:a9:cd:6c:68:8e:c9:e4:29:8f:1b:
cc:84:4f:e8:76:67:cc:ce:7d:5a:63:c9:09:b5:4f:cb:e1:7a:
ad:cc:37:55:f1:71:0b:e2:c8:42:de:7a:1e:71:03:2e:85:dc:
7d:95:cd:83:d1:18:7a:56:0f:88:8d:00:fa:5f:76:a9:b4:78:
27:39:d6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:51:07 2025 by rpki-client