Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
File: ru85tCEAXzAraRD5Y5P0tlR6j-w.mft (raw, json)
Hash identifier: RPDsuwI7voY4lsgkW5jUdJI5xeHfEjlR6+ZyNxal5qk=
Subject key identifier: A2:04:C5:B8:CC:EB:65:F0:3B:F2:66:58:46:71:40:6D:2B:2D:22:A3
Authority key identifier: AE:EF:39:B4:21:00:5F:30:2B:69:10:F9:63:93:F4:B6:54:7A:8F:EC
Certificate issuer: /CN=aeef39b421005f302b6910f96393f4b6547a8fec
Certificate serial: 019A72266A776191DD8FD10E0E996CF90BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
Manifest number: 01C0
Signing time: Tue 11 Nov 2025 09:01:51 +0000
Manifest this update: Tue 11 Nov 2025 09:01:51 +0000
Manifest next update: Wed 12 Nov 2025 09:01:51 +0000
Files and hashes: 1: ru85tCEAXzAraRD5Y5P0tlR6j-w.crl (hash: kBa+bY6pauSJkZj/Paqmp+VwcSBgmzM/4GD1SY6B6ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:6a:77:61:91:dd:8f:d1:0e:0e:99:6c:f9:0b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeef39b421005f302b6910f96393f4b6547a8fec
Validity
Not Before: Nov 11 09:01:51 2025 GMT
Not After : Nov 12 09:01:51 2025 GMT
Subject: CN=a204c5b8cceb65f03bf266584671406d2b2d22a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:9d:6e:df:b4:51:f2:75:26:6a:47:6c:76:
e0:e4:72:2f:31:74:62:75:0b:74:25:a0:9b:26:ac:
da:38:66:94:17:3d:b7:82:2e:20:01:b6:77:f8:cc:
3e:c7:c2:f2:41:17:cd:30:57:72:54:84:b0:e2:d6:
76:d6:0c:a2:d3:4a:ab:2f:26:93:a9:75:66:53:4b:
cd:04:10:f7:f6:d9:84:02:f6:7e:51:23:e5:8c:6d:
9a:0d:42:e4:6c:2c:dc:73:f5:01:80:4c:ab:89:3c:
26:31:dd:ce:37:4b:33:2e:53:7d:6a:df:31:7c:f3:
d1:05:d4:0b:8a:9e:82:a3:81:87:48:9c:a7:41:07:
98:ce:60:71:5d:a0:b9:3d:a1:c5:27:55:c3:62:b4:
ea:b7:2f:d7:75:59:4a:95:f6:4c:28:85:03:44:cd:
f1:c8:79:44:dd:e2:e3:26:2a:0c:94:df:9f:39:c4:
ca:8a:6c:11:c4:0c:da:fe:dc:15:8b:7a:34:d3:40:
c2:15:7f:be:f9:48:68:bc:00:f2:1a:35:25:bd:01:
b8:14:61:b9:96:1c:38:37:95:a9:99:4d:c5:48:ce:
b0:17:f3:db:cf:63:e8:a4:e5:19:9a:80:94:f6:50:
37:22:56:44:8e:e5:95:2a:24:6b:2f:17:44:fd:5a:
ce:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:04:C5:B8:CC:EB:65:F0:3B:F2:66:58:46:71:40:6D:2B:2D:22:A3
X509v3 Authority Key Identifier:
keyid:AE:EF:39:B4:21:00:5F:30:2B:69:10:F9:63:93:F4:B6:54:7A:8F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:d7:90:b1:3c:0b:70:5c:c5:bd:e8:da:03:79:24:2c:98:a0:
ef:25:83:08:49:a5:ca:52:f3:11:61:97:40:b0:e3:e9:7b:11:
d9:5c:23:67:fa:e5:a8:3c:f0:85:38:17:da:5b:79:b6:18:78:
42:2e:37:7b:27:f6:80:90:81:f7:be:69:92:04:b4:3a:48:06:
1c:57:ad:4d:61:97:e9:56:e5:39:4f:8c:e6:13:32:c6:16:bd:
4f:ae:97:4a:88:d2:bb:26:fe:1b:d3:60:69:4f:9b:cd:51:69:
27:23:bb:dd:d9:54:63:65:e7:ab:2e:41:fa:3a:54:2d:d4:04:
29:20:a1:f5:15:66:9b:fd:74:5b:b4:b7:7f:d0:57:13:5e:7d:
b6:b6:97:d7:a0:4e:e2:dd:78:a4:9b:64:38:5c:0c:94:c7:d6:
ff:b2:21:3c:fb:b3:17:c5:c5:1a:07:ba:ac:0c:a0:6a:e6:1e:
a0:75:32:b4:a9:9a:19:5d:94:17:9e:6a:77:c6:5c:f0:7c:5a:
d8:5a:25:4b:e8:bc:db:ac:e9:7a:22:76:d0:d9:db:ce:aa:50:
6c:82:3a:98:7b:cd:29:5e:a7:c0:e0:12:2a:b5:6b:c4:e7:0a:
17:fd:50:70:51:fe:62:42:57:bd:c4:db:4d:51:56:1d:80:31:
83:a6:52:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:07 2025 by rpki-client