Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
File: ruCNkzby5s0WXrcwKX_m0gyDw5o.mft (raw, json)
Hash identifier: v+huFzUDqu96klFM9yxtS/bJdIrC4ogrUAHj3dhkD00=
Subject key identifier: 35:96:2B:72:4A:97:AD:7A:85:04:A4:9E:8A:6C:99:B7:FE:13:2E:08
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Certificate issuer: /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial: 019A0A4A30A8BC9216E2CE24B3F83A3C6373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
Manifest number: 1434
Signing time: Wed 22 Oct 2025 05:00:25 +0000
Manifest this update: Wed 22 Oct 2025 05:00:25 +0000
Manifest next update: Thu 23 Oct 2025 05:00:25 +0000
Files and hashes: 1: BS_uFjltIa2QdarHmlrjr-N1lfU.roa (hash: In6YLEFgpwciZfoYuJdlvQqiCYVNTfn1vSODPqF0a14=)
2: KyGy1yiZWdO5Baarc34FhluuX6o.roa (hash: PluDSAEvqHUwzzXaYjhHiEYtCeH5Nq3YEFQLeyKhxg0=)
3: MTuQql9Rh88BHIoSEfi0N5xULhQ.roa (hash: c4KaJbDb+YQM6dcx+R5wyGu53GnRsEWM+y0F8Wui/6Q=)
4: aPIQbORfDqMdRus3FUsayPmmxSc.roa (hash: Bjwo2XfxvG4dmeK0piMxmJc9w9b8pe3Sc6uuX95IjTw=)
5: aTlzb3K-mNhSWkbEKv29Xc3ITT0.roa (hash: Y8Xw4D+ihA3z60B6zW48nfEFoOcri17+Bm+/jPd3INc=)
6: kL_2gvtUAFUX3-zbMD5AfdbkkFc.roa (hash: i5sBmgPlAzgh1HcdG7lTgrd/mdbOcJciFVKfQ5U2fAw=)
7: ruCNkzby5s0WXrcwKX_m0gyDw5o.crl (hash: Z4Po6YetCuCcCWrJQNE2nwlqI5OxYSucbnMiAf2Z0Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:4a:30:a8:bc:92:16:e2:ce:24:b3:f8:3a:3c:63:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Validity
Not Before: Oct 22 05:00:25 2025 GMT
Not After : Oct 23 05:00:25 2025 GMT
Subject: CN=35962b724a97ad7a8504a49e8a6c99b7fe132e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ff:aa:e8:f8:5e:11:cc:b1:f8:12:17:9b:ea:
f2:d3:67:2c:1b:0c:70:3b:57:f6:01:4a:d7:18:cc:
4a:d2:d8:f7:e1:78:05:0c:3a:f8:7a:7d:77:30:2a:
f5:54:48:6d:3f:92:7d:ca:a8:c5:95:74:1c:61:bd:
dc:f6:1c:2f:09:cd:6d:7e:43:ec:4a:d9:bc:9c:5d:
11:77:a5:ae:14:60:f1:fb:60:6d:a1:52:7f:84:cb:
fc:bc:22:00:f3:21:03:56:a8:9f:1d:dc:e6:a1:eb:
fa:70:e4:3d:f9:e2:d2:22:01:92:a9:e2:41:29:4a:
f2:12:84:3e:3f:32:60:09:b0:ac:43:38:00:80:34:
14:5a:dc:f9:e8:62:d1:38:29:3d:e7:28:9d:8f:89:
42:97:ee:48:3d:e0:34:8f:34:34:0a:85:29:5f:38:
9a:ae:3b:e6:6a:af:2b:9f:5a:59:39:c8:37:02:7e:
ad:e7:d7:b3:48:72:75:1f:34:9a:20:44:d1:bf:18:
46:bd:3c:6b:d4:c3:22:aa:f3:29:ea:92:3b:a7:b3:
7d:28:b3:f5:93:ec:7c:85:2c:dc:7b:96:26:60:a7:
98:9c:c4:cc:ef:77:47:06:ac:ca:43:cb:7b:a8:00:
57:4d:89:43:c3:f0:12:96:02:9c:3b:6f:a2:75:d1:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:96:2B:72:4A:97:AD:7A:85:04:A4:9E:8A:6C:99:B7:FE:13:2E:08
X509v3 Authority Key Identifier:
keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3b:69:16:47:02:fe:c8:6f:05:a6:5e:c3:5e:a0:33:52:18:
ae:6c:44:32:09:48:21:d0:94:29:04:03:36:e7:b7:10:e6:7c:
e1:b9:63:2b:ff:06:bf:be:ab:5f:b7:3d:c1:c4:6b:29:4e:5f:
97:d9:6e:ee:31:38:e6:94:7b:07:aa:e2:a7:9f:6b:69:7c:75:
14:d1:8c:ef:24:7e:80:64:ae:00:f2:cf:f8:e9:f4:d3:f2:57:
6d:e1:7d:f5:bf:3f:54:f5:21:f7:f5:1b:93:61:f7:fa:3e:c9:
85:36:49:60:df:e0:e9:04:03:37:88:f9:b5:f1:f9:08:b1:72:
fd:62:d1:73:64:d1:17:f1:c2:56:da:e4:c8:cb:83:6c:5e:7e:
44:bc:b5:a8:92:6a:61:55:5f:cf:d2:00:66:7d:1d:2e:bf:13:
5b:e0:d2:9a:73:58:9a:36:07:c9:7a:df:08:96:ca:fb:c6:9a:
e4:7f:cd:71:a8:db:43:e6:d3:06:78:c9:5d:32:5c:9e:e6:c0:
95:d6:ab:52:01:3b:ad:3d:db:07:49:62:e6:27:2c:1a:f5:d5:
97:23:ed:94:a4:ce:ad:b7:cb:ec:6b:08:9e:27:6f:12:a4:30:
d9:ca:2d:d7:13:c1:fa:a4:fc:fa:cc:62:82:f2:a1:62:9c:35:
12:7e:2d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:38:25 2025 by rpki-client