Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
File: AyudLeU3ELMVjkLyKIkQnixA9Ds.mft (raw, json)
Hash identifier: T7wnZe1zLJl+wJh4GYXUEstqoSxjK/6Tn1t8jZyJZDs=
Subject key identifier: F3:C1:36:0B:24:86:ED:FC:39:68:FD:85:99:83:41:0E:65:AB:82:3D
Authority key identifier: 03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B
Certificate issuer: /CN=032b9d2de53710b3158e42f22889109e2c40f43b
Certificate serial: 019938394AFB2B845B471BBB02B8606795FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
Manifest number: 0485
Signing time: Thu 11 Sep 2025 10:01:42 +0000
Manifest this update: Thu 11 Sep 2025 10:01:42 +0000
Manifest next update: Fri 12 Sep 2025 10:01:42 +0000
Files and hashes: 1: 6iLRNmhEkle6ivGQW1sZ5gcKS8Y.roa (hash: +zvQRhGc/V+HMxoGc8X8w2swmCXbOVN2JfxwGb1F+xI=)
2: AyudLeU3ELMVjkLyKIkQnixA9Ds.crl (hash: 3yS//4tI8a+mXb17UhIYajdCoNN3KUA1Ae3JVcjUeHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:39:4a:fb:2b:84:5b:47:1b:bb:02:b8:60:67:95:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032b9d2de53710b3158e42f22889109e2c40f43b
Validity
Not Before: Sep 11 10:01:42 2025 GMT
Not After : Sep 12 10:01:42 2025 GMT
Subject: CN=f3c1360b2486edfc3968fd859983410e65ab823d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:73:86:ee:37:c3:05:c9:df:8a:e8:1c:96:
1b:85:f6:01:06:51:59:23:c2:8e:63:d0:1d:2d:fd:
bb:8c:f2:fa:42:35:5f:8b:6e:04:23:0d:6e:06:52:
de:02:f0:82:05:21:af:fd:a9:d8:49:f2:da:a3:ae:
71:cd:6b:87:18:81:a4:fe:8e:07:29:e4:90:24:bf:
ca:f8:af:6a:51:3a:b0:f6:da:2e:50:c8:04:fd:e6:
24:c9:d5:0c:ba:63:34:a3:6a:78:ba:90:e4:05:8e:
38:54:51:5d:93:00:20:9b:1c:73:7b:44:06:4a:54:
6c:ec:02:6e:c7:dc:46:fb:1b:f0:6d:23:b3:78:fd:
82:7a:4b:16:ad:6d:97:e7:10:b7:fa:15:4a:f2:46:
ad:96:83:67:be:b2:79:62:2e:cf:05:66:a1:42:ca:
87:bc:83:74:de:9f:66:09:ac:52:06:1c:51:c7:d1:
77:58:1b:2f:d2:4f:4d:d6:4f:2a:67:6c:69:6e:b1:
41:09:79:12:ac:4a:c6:e8:02:40:0a:f6:0f:e5:b6:
d1:65:15:4c:38:5d:8e:18:db:f9:b7:de:d5:b4:3b:
4e:69:17:ef:50:62:fb:5a:e1:be:10:a7:b3:1a:ae:
9b:28:ee:36:6b:ce:17:a7:f8:ec:17:43:da:81:b4:
4f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C1:36:0B:24:86:ED:FC:39:68:FD:85:99:83:41:0E:65:AB:82:3D
X509v3 Authority Key Identifier:
keyid:03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ed:4d:af:cb:db:00:af:0f:b1:21:37:cd:ee:c8:26:25:f6:
ca:f6:da:6c:cd:86:79:90:5f:b0:cd:cf:b5:58:6a:b3:57:a6:
4f:d5:b0:a1:31:42:20:b6:c9:cf:84:5c:d9:96:83:a9:92:26:
db:83:ce:4d:c6:b4:de:f2:f2:71:7d:69:6d:a3:e2:9e:27:43:
e1:b5:31:cf:c6:2f:61:8b:3d:05:08:d8:76:45:7c:eb:05:8f:
be:ec:ae:c6:76:c8:ad:5b:92:34:37:04:ae:4d:8e:7c:b6:d1:
b0:75:31:01:08:49:6d:19:4b:5d:bd:94:2d:de:86:66:e4:ac:
0a:56:76:61:c8:92:4f:d1:b2:8d:76:75:93:4a:d6:97:01:e5:
b5:24:c2:07:aa:ce:10:b3:00:98:86:4d:e1:3f:02:b5:d1:38:
75:7c:ab:c5:3d:ed:fe:0d:31:6d:15:ac:23:b9:2e:c4:20:71:
05:f2:2e:5a:a6:01:0f:87:c1:4c:e4:bb:30:5f:47:96:9e:36:
5a:2e:21:ad:d1:a2:55:cc:40:a8:9b:ae:0f:1e:b9:7e:c5:e5:
49:1b:65:11:fa:34:38:ba:34:6b:4d:24:af:59:18:fe:6a:e3:
9d:6b:2c:51:3b:28:31:d4:36:de:a4:03:39:4f:b2:fb:4e:98:
eb:4e:ef:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk4OUr7K4RbRxu7ArhgZ5X8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMmI5ZDJkZTUzNzEwYjMxNThlNDJmMjI4ODkxMDllMmM0
MGY0M2IwHhcNMjUwOTExMTAwMTQyWhcNMjUwOTEyMTAwMTQyWjAzMTEwLwYDVQQD
EyhmM2MxMzYwYjI0ODZlZGZjMzk2OGZkODU5OTgzNDEwZTY1YWI4MjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBpzhu43wwXJ34roHJYbhfYBBlFZ
I8KOY9AdLf27jPL6QjVfi24EIw1uBlLeAvCCBSGv/anYSfLao65xzWuHGIGk/o4H
KeSQJL/K+K9qUTqw9touUMgE/eYkydUMumM0o2p4upDkBY44VFFdkwAgmxxze0QG
SlRs7AJux9xG+xvwbSOzeP2CeksWrW2X5xC3+hVK8katloNnvrJ5Yi7PBWahQsqH
vIN03p9mCaxSBhxRx9F3WBsv0k9N1k8qZ2xpbrFBCXkSrErG6AJACvYP5bbRZRVM
OF2OGNv5t97VtDtOaRfvUGL7WuG+EKezGq6bKO42a84Xp/jsF0PagbRPfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPBNgskhu38OWj9hZmDQQ5lq4I9MB8GA1UdIwQY
MBaAFAMrnS3lNxCzFY5C8iiJEJ4sQPQ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXl1ZExlVTNFTE1WamtMeUtJa1FuaXhBOURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9kNmRjOWQtZWIzMy00Y2E0LWFhODIt
NGQxOWE4ZGUwYWJhLzEvQXl1ZExlVTNFTE1WamtMeUtJa1FuaXhBOURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9kNmRjOWQtZWIzMy00Y2E0LWFhODItNGQxOWE4ZGUwYWJh
LzEvQXl1ZExlVTNFTE1WamtMeUtJa1FuaXhBOURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqe1Nr8vb
AK8PsSE3ze7IJiX2yvbabM2GeZBfsM3PtVhqs1emT9WwoTFCILbJz4Rc2ZaDqZIm
24POTca03vLycX1pbaPinidD4bUxz8YvYYs9BQjYdkV86wWPvuyuxnbIrVuSNDcE
rk2OfLbRsHUxAQhJbRlLXb2ULd6GZuSsClZ2YciST9GyjXZ1k0rWlwHltSTCB6rO
ELMAmIZN4T8CtdE4dXyrxT3t/g0xbRWsI7kuxCBxBfIuWqYBD4fBTOS7MF9Hlp42
Wi4hrdGiVcxAqJuuDx65fsXlSRtlEfo0OLo0a00kr1kY/mrjnWssUTsoMdQ23qQD
OU+y+06Y607vYw==
-----END CERTIFICATE-----
Generated at Thu Sep 11 11:42:14 2025 by rpki-client