Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
File: RUv1gRnP6Z8XSbzZvRJHArqctxM.mft (raw, json)
Hash identifier: pnybmNDGrksBicmtECl7twABEQeC8vUmU7flKm5d8Gc=
Subject key identifier: 44:68:0F:2A:4D:D3:B5:56:20:00:E9:29:11:AE:47:72:BD:3C:DA:8F
Authority key identifier: 45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
Certificate issuer: /CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Certificate serial: 019A0A8162074E5A34650ADB1CB55BCAAC45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
Manifest number: 1171
Signing time: Wed 22 Oct 2025 06:00:42 +0000
Manifest this update: Wed 22 Oct 2025 06:00:42 +0000
Manifest next update: Thu 23 Oct 2025 06:00:42 +0000
Files and hashes: 1: 0MiQGDuP-2KHqgPkUVqX2ggP6Xw.roa (hash: NonlM+H8k9TxA6ceFqWkm9nyMbEovf9PE4ZCtGqStgk=)
2: L11MObU2nfX5tH-1x602KEbM5GM.roa (hash: HEVauMqoyVrcLnG8IoffxDGm/vSrfN8OpGRNiQEHWho=)
3: RUv1gRnP6Z8XSbzZvRJHArqctxM.crl (hash: I0ktVU9MniKHOThVNGsEi/K4BPjgchkZFtPL0tXqJoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:81:62:07:4e:5a:34:65:0a:db:1c:b5:5b:ca:ac:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Validity
Not Before: Oct 22 06:00:42 2025 GMT
Not After : Oct 23 06:00:42 2025 GMT
Subject: CN=44680f2a4dd3b5562000e92911ae4772bd3cda8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a4:f2:b8:e7:8b:6b:e3:5a:9c:c5:53:b9:98:
0f:f3:61:5f:ab:3a:6b:fb:bd:32:a2:2f:0d:9f:a8:
eb:1e:9f:5d:be:75:16:70:95:a0:9f:28:67:79:21:
1a:7b:a4:23:c6:36:cc:c8:dd:0f:e8:5d:d0:3b:96:
92:27:61:db:d4:30:d3:d4:fc:1f:f5:ac:d1:9f:62:
36:06:64:77:0f:e9:d7:cd:a2:56:dd:f3:34:1a:5f:
56:90:56:53:25:19:c1:6e:a5:90:b0:c0:2c:66:56:
c2:6a:e6:80:9e:9b:a5:36:2d:77:db:5e:da:13:17:
58:f0:c4:87:d7:83:b3:3a:55:e1:b5:7a:b7:40:34:
df:f1:a4:6d:22:da:b3:dc:d7:d7:80:00:b1:03:30:
b5:05:fd:dd:a2:5a:ea:9a:7a:ef:ef:87:71:c5:c5:
80:32:35:72:bc:a1:a9:87:6a:92:ed:72:72:c4:cf:
00:50:96:2c:04:f3:50:da:94:38:ee:04:78:c3:59:
23:f2:b9:4e:6d:82:fe:fe:37:d2:67:33:18:ce:ab:
5b:87:fa:1a:ba:a8:a7:e3:bf:7e:c3:79:10:a5:f5:
2f:57:ab:84:d9:ca:8e:7e:03:07:aa:a7:1a:65:0c:
03:01:30:8e:d4:b3:6d:ce:0f:24:44:87:a5:51:a5:
50:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:68:0F:2A:4D:D3:B5:56:20:00:E9:29:11:AE:47:72:BD:3C:DA:8F
X509v3 Authority Key Identifier:
keyid:45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ce:dd:c2:1c:9f:f6:c8:e1:87:83:1f:2b:e8:bd:45:4a:fa:
db:a7:13:41:ae:ee:a6:f2:54:f8:d2:ec:d4:96:d6:cc:bf:38:
b0:35:2f:87:1f:2c:15:8e:92:6c:34:6d:1c:3a:51:96:99:87:
93:cf:16:cf:b8:d3:64:d2:0e:1f:09:65:a0:eb:25:70:94:46:
93:30:ef:37:56:62:0c:b4:5c:99:5e:45:79:6c:2c:6f:c9:c5:
22:4d:ef:65:12:ac:ac:9d:27:46:3c:9e:6a:a4:a9:16:0b:8d:
c5:c3:78:30:9c:02:36:64:53:b1:b2:1d:f6:e5:99:a6:31:dd:
df:fd:7b:36:c9:0b:dd:54:e9:a2:29:38:f7:3e:c3:eb:8d:5e:
63:87:be:1f:c9:d7:a6:c8:57:ae:2c:98:5b:44:32:4d:97:63:
0e:17:43:dc:c7:68:8d:da:6a:2b:b2:37:66:6d:22:8e:37:20:
f4:37:28:b6:7a:11:d4:94:6c:d9:27:d1:58:27:26:fa:f4:78:
18:65:1e:f0:d6:ed:a2:76:bf:b2:dd:ea:74:60:f4:55:4f:de:
46:7b:70:c6:8b:1a:f3:90:d9:9d:76:54:91:14:b2:42:fa:e4:
4f:dd:97:1f:12:6e:a7:64:be:ad:74:95:d2:56:16:18:74:40:
5d:f0:02:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 14:34:57 2025 by rpki-client