Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
File: AyudLeU3ELMVjkLyKIkQnixA9Ds.mft (raw, json)
Hash identifier: 3S9EzKadKraXxqfk5RTYy7WjbNIRjZkfxUvAIgDglbE=
Subject key identifier: AD:1B:B5:E9:0F:AE:D0:BC:D2:E3:70:5F:74:29:47:45:59:0F:AE:2E
Authority key identifier: 03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B
Certificate issuer: /CN=032b9d2de53710b3158e42f22889109e2c40f43b
Certificate serial: 019A25C1314DD9DA4398DAD08EF4CD2F2BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
Manifest number: 0500
Signing time: Mon 27 Oct 2025 13:00:09 +0000
Manifest this update: Mon 27 Oct 2025 13:00:09 +0000
Manifest next update: Tue 28 Oct 2025 13:00:09 +0000
Files and hashes: 1: 6iLRNmhEkle6ivGQW1sZ5gcKS8Y.roa (hash: +zvQRhGc/V+HMxoGc8X8w2swmCXbOVN2JfxwGb1F+xI=)
2: AyudLeU3ELMVjkLyKIkQnixA9Ds.crl (hash: wM26UEfriGl1XI00gO6ys05bClB+ok1PGYwX6OeSzOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 13:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:31:4d:d9:da:43:98:da:d0:8e:f4:cd:2f:2b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032b9d2de53710b3158e42f22889109e2c40f43b
Validity
Not Before: Oct 27 13:00:09 2025 GMT
Not After : Oct 28 13:00:09 2025 GMT
Subject: CN=ad1bb5e90faed0bcd2e3705f74294745590fae2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:db:37:d3:3d:ed:2d:cd:f3:ce:57:47:75:2f:
4c:5d:fe:98:7d:8a:2c:57:9d:32:25:94:84:1c:cd:
7d:e3:b0:d2:66:7d:33:48:82:e3:1a:29:ef:41:58:
8b:88:a0:7f:c0:47:68:70:64:99:e8:41:cd:2f:0b:
ea:ba:0d:5d:be:c1:52:b8:95:ec:2b:90:d0:f1:4f:
85:17:9a:96:c8:eb:b6:0b:52:2a:43:55:1d:9b:d1:
3e:e9:0d:42:99:bd:4c:c7:d3:67:b3:ce:44:c3:d7:
50:5b:3f:e9:6b:d3:02:bf:7c:36:01:7e:09:4e:20:
84:fb:0d:38:74:39:9f:64:14:16:05:83:45:c1:f4:
5f:94:3b:8f:45:46:8e:18:e2:61:68:9d:82:90:a4:
0c:d5:2d:14:49:29:b2:dd:81:39:c1:92:04:5e:48:
c7:61:86:31:d3:7f:3c:dd:38:57:bd:e1:fb:b2:c7:
77:19:ad:ae:63:b0:a0:00:b0:c3:87:ea:d7:7a:75:
5f:12:43:8e:1d:84:fc:b4:31:07:3c:df:1d:79:28:
29:23:c7:97:1b:12:51:c5:86:aa:1c:33:b6:8f:cf:
15:d9:05:80:40:0c:1f:ce:33:be:c6:6b:0f:98:14:
f3:f2:70:5d:d4:e1:6a:59:37:ce:47:77:71:3f:39:
94:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1B:B5:E9:0F:AE:D0:BC:D2:E3:70:5F:74:29:47:45:59:0F:AE:2E
X509v3 Authority Key Identifier:
keyid:03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:98:e5:f2:ea:6d:31:3c:94:5f:b4:0d:9e:5d:90:78:56:ad:
ad:10:0f:76:75:6e:50:8e:aa:e4:13:96:e3:b2:77:8f:25:6d:
cb:20:b9:1f:10:2b:d8:6e:5a:d6:f2:b7:de:5d:2b:57:da:b4:
ae:59:0a:5e:9c:cf:a6:1e:9f:1b:b1:f0:f4:c7:9f:e6:41:fa:
fd:8f:7b:fb:c5:4a:6e:e9:9f:e2:cc:00:c1:53:cf:5a:17:cb:
8a:f5:70:f2:6b:96:66:40:01:53:a8:9b:42:aa:ba:40:0d:ef:
31:b1:12:ba:80:b1:e3:ca:b1:14:fa:4e:db:a9:38:0c:4a:52:
18:f2:6b:cd:16:6f:43:b6:f0:4c:08:0f:47:dd:c0:78:c7:07:
05:ec:6e:75:80:01:3f:0c:ad:f5:dd:02:9b:8c:b3:75:43:a5:
56:0f:fe:dd:4d:50:57:c7:94:0e:27:37:bd:a0:1b:cf:f0:4f:
33:bc:2a:33:d4:34:41:5d:b9:be:1a:af:26:16:26:34:0f:d4:
72:ee:0d:ff:32:9c:01:cb:01:c5:69:4e:bb:73:53:fe:ca:2c:
c8:29:69:d9:d8:dd:1c:57:9b:63:1e:d4:cb:4c:b1:72:16:c1:
cc:97:98:67:26:9c:5a:a5:a5:0a:1b:90:b1:e1:a1:08:21:50:
36:b8:3e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 21:36:57 2025 by rpki-client