Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft
File: RuUyMK589oaKpoO2JLWagRiI8Lo.mft (raw, json)
Hash identifier: tFesdu4WaIhdm5Ax9fA1XFJ+JwRbNeak+83hF1f4iXg=
Subject key identifier: A9:44:F9:DD:FB:D1:CA:90:2F:28:41:84:10:CF:20:DB:86:F4:96:02
Authority key identifier: 46:E5:32:30:AE:7C:F6:86:8A:A6:83:B6:24:B5:9A:81:18:88:F0:BA
Certificate issuer: /CN=46e53230ae7cf6868aa683b624b59a811888f0ba
Certificate serial: 019A7338463737FD6442FE75DA45B954BCE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft
Manifest number: 03A0
Signing time: Tue 11 Nov 2025 14:00:59 +0000
Manifest this update: Tue 11 Nov 2025 14:00:59 +0000
Manifest next update: Wed 12 Nov 2025 14:00:59 +0000
Files and hashes: 1: 2yUVHb7bKQBM4p7hGq3iiZimEbc.roa (hash: a9OMpn99so26tcAAD5Nx55fldNYwi9TBv8dYukEeMlU=)
2: RuUyMK589oaKpoO2JLWagRiI8Lo.crl (hash: lEJbLhrgTVlx4Am0rRg0BWtlkl0Ut4nh1SsdWfWSVUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:46:37:37:fd:64:42:fe:75:da:45:b9:54:bc:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46e53230ae7cf6868aa683b624b59a811888f0ba
Validity
Not Before: Nov 11 14:00:59 2025 GMT
Not After : Nov 12 14:00:59 2025 GMT
Subject: CN=a944f9ddfbd1ca902f28418410cf20db86f49602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:87:a0:21:36:94:1d:27:3a:8c:91:7a:05:de:
8d:7c:fc:ba:93:d1:55:4b:ec:c2:1d:34:01:f1:0e:
49:db:ad:b7:61:d7:17:4b:4f:48:81:76:0e:7d:38:
bd:94:74:77:90:ef:ab:16:b1:9b:2e:aa:1d:04:1f:
d6:1f:98:69:1b:af:c5:b9:1a:03:23:47:bf:42:89:
b0:98:06:cd:e6:61:7a:d1:b2:84:e4:bf:e4:2d:26:
f5:e4:ce:c1:ac:3f:b5:7b:a7:5d:ac:59:2c:a3:6d:
84:87:2a:53:f9:d2:02:9d:f0:fe:3a:a6:51:b7:28:
c9:b2:c0:41:e9:fb:82:d2:4b:89:17:4b:0f:e8:b2:
72:b6:ec:07:13:59:95:67:7d:95:ba:a2:4b:64:2a:
eb:84:e4:99:b9:8f:34:a3:91:2b:5c:7a:fd:93:2d:
8e:6d:68:2e:66:56:fa:be:82:1d:86:d1:bf:80:40:
8e:ac:16:61:ca:96:a1:8a:8d:c7:e1:1f:4d:9d:c3:
ba:46:28:8b:a4:6c:16:7f:20:40:02:52:0e:99:b9:
fd:5d:ca:dd:1e:87:55:2c:87:69:26:36:34:69:bc:
b9:9a:bb:0b:ed:fa:61:e8:8a:d8:3b:2e:28:c7:00:
32:75:98:95:60:64:be:cb:88:9e:56:07:bf:83:ba:
05:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:44:F9:DD:FB:D1:CA:90:2F:28:41:84:10:CF:20:DB:86:F4:96:02
X509v3 Authority Key Identifier:
keyid:46:E5:32:30:AE:7C:F6:86:8A:A6:83:B6:24:B5:9A:81:18:88:F0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:55:ee:0c:51:1a:c4:8d:d7:8f:fd:5b:76:55:d6:c6:92:be:
4e:eb:1d:2a:c6:78:38:ef:16:40:15:18:96:0f:4c:62:10:bb:
03:a7:3f:26:10:09:75:b1:1a:c8:12:57:76:b7:71:07:f1:92:
40:9b:15:df:ba:3b:7b:f3:aa:8f:6d:7c:dd:3b:47:a5:6c:92:
7c:32:fb:5e:0d:dc:6d:f1:0c:d5:61:a5:b1:72:0e:70:1c:46:
c6:74:c1:7e:b5:6b:82:b6:1c:ec:1c:49:2d:97:70:2b:93:52:
e8:a7:a2:a7:2b:95:3b:d5:b6:4e:b2:91:e9:79:b3:0c:1e:18:
5f:59:fb:63:6b:44:0c:ed:4c:e8:9c:06:a2:63:fe:4f:50:38:
b0:dc:a4:34:e3:f1:59:d7:33:53:be:ac:66:00:1a:4c:fd:a7:
d4:ff:58:a7:93:a7:1d:1b:2d:bf:97:54:88:f9:f4:7c:f9:98:
70:b1:69:7c:e9:e3:4f:f6:f6:2d:5a:dd:bd:be:db:bc:c3:11:
83:2d:be:9a:a0:c1:ff:1c:21:d7:21:bd:fd:a4:4b:b3:25:41:
96:9c:6b:52:4f:b2:c9:e4:fb:75:86:88:3d:23:5c:7c:ae:11:
0f:b8:43:c4:a9:c4:d0:d3:0f:3a:27:15:a2:0b:fd:f4:15:07:
ec:99:43:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:27 2025 by rpki-client