Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
File: RUDapMJFpHJfOAQUAra__e0V6ng.mft (raw, json)
Hash identifier: iXCIppvsSx3QDBDk88tKWEMsg5yxiwZEFYCAzwePFMk=
Subject key identifier: 69:9B:3A:81:70:E3:A1:4F:8E:1D:41:9E:DB:30:75:B7:82:57:18:F6
Authority key identifier: 45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78
Certificate issuer: /CN=4540daa4c245a4725f38041402b6bffded15ea78
Certificate serial: 019A2D44018731D316AEB039B6A4C99076F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
Manifest number: 1703
Signing time: Wed 29 Oct 2025 00:00:22 +0000
Manifest this update: Wed 29 Oct 2025 00:00:22 +0000
Manifest next update: Thu 30 Oct 2025 00:00:22 +0000
Files and hashes: 1: IzvcnFv9kw0TqyCe74ubve86Q-E.roa (hash: 78DgscXfEbwSYX7qdA0JtGlNdmCzdWY7H1HTizuXeoc=)
2: RUDapMJFpHJfOAQUAra__e0V6ng.crl (hash: crbP6BgertPnGRhztln7YkLX8N3YvPPXmOnqHD7Oj2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:44:01:87:31:d3:16:ae:b0:39:b6:a4:c9:90:76:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4540daa4c245a4725f38041402b6bffded15ea78
Validity
Not Before: Oct 29 00:00:22 2025 GMT
Not After : Oct 30 00:00:22 2025 GMT
Subject: CN=699b3a8170e3a14f8e1d419edb3075b7825718f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6b:25:23:25:e7:46:2b:d2:ce:ce:93:93:24:
b5:4d:ec:39:3e:1f:8f:8c:71:5b:ec:0d:b8:00:13:
c8:bc:5e:c8:ae:62:5b:68:63:20:de:10:39:f3:6b:
a2:f8:be:9b:19:b6:1e:50:3c:10:e4:c1:a6:26:12:
2d:c8:e8:e4:e2:99:47:4a:75:5b:0b:c6:3b:c7:e3:
20:fa:62:16:a3:da:09:1c:fe:f6:1b:08:23:30:d2:
cd:80:f8:a4:86:a5:6f:18:44:96:46:f3:cf:a3:9b:
66:df:50:f0:e8:14:57:78:af:6a:d2:e5:8b:fe:ba:
4b:ef:f5:53:9a:84:69:d7:44:b2:39:44:19:09:e6:
a3:bd:64:62:89:35:d3:00:7c:f4:56:e8:7d:69:2d:
0b:ac:f7:4f:80:21:52:96:d5:34:57:84:58:96:68:
14:5d:54:7e:25:31:64:c3:2d:01:41:7b:d2:10:31:
82:e8:92:7b:95:22:de:c4:28:80:a3:09:82:bd:5f:
24:be:8d:ca:7e:19:64:b7:ee:10:5f:e0:c6:73:84:
e7:09:d6:e9:2a:29:18:78:c8:f9:79:1b:49:8d:1a:
cc:64:7f:40:4e:ef:44:66:30:51:2e:6a:49:ca:ab:
35:d6:b2:4b:c3:bb:c2:f6:dd:76:84:e6:b9:4a:49:
32:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9B:3A:81:70:E3:A1:4F:8E:1D:41:9E:DB:30:75:B7:82:57:18:F6
X509v3 Authority Key Identifier:
keyid:45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:8e:22:13:3a:47:29:8e:96:a7:3f:ed:8e:48:53:90:78:8b:
e1:a2:6a:18:11:2c:d1:48:ca:c0:a1:09:9d:97:6e:3f:71:41:
61:d4:64:51:41:18:d9:1b:17:65:57:ea:c9:c5:f8:ec:84:32:
aa:4b:cf:32:83:73:1c:87:b2:b8:f2:15:28:26:1f:3e:80:27:
5b:97:e3:cd:54:06:5b:56:37:f2:d7:8e:13:5c:82:98:a8:45:
5b:52:0a:37:ce:7b:40:f1:0d:6a:bb:f9:12:ed:f7:b5:84:d0:
49:3e:50:a7:3b:8a:59:b6:49:b8:6a:e7:5b:aa:d8:ce:bb:bd:
02:e8:dd:21:c0:08:61:3c:cb:17:90:a6:7b:0d:cf:e0:86:93:
b0:9f:aa:93:97:23:7d:99:1f:a7:95:5a:b5:1c:ec:94:2a:26:
4f:56:65:0e:ab:fd:be:0e:19:29:78:cb:24:d8:fc:2f:fc:20:
15:f1:21:a7:87:f1:73:da:ea:28:ef:04:b7:8b:99:e3:77:47:
ab:9f:cf:e6:88:f8:95:3c:17:fe:05:e2:24:43:16:bb:49:ff:
42:14:c2:4d:ee:41:8d:74:97:96:e8:33:e7:8f:8e:14:19:4c:
ce:f4:81:53:2e:dd:0e:a9:eb:75:81:78:66:41:ef:d1:37:59:
4e:a7:86:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZotRAGHMdMWrrA5tqTJkHbxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NDBkYWE0YzI0NWE0NzI1ZjM4MDQxNDAyYjZiZmZkZWQx
NWVhNzgwHhcNMjUxMDI5MDAwMDIyWhcNMjUxMDMwMDAwMDIyWjAzMTEwLwYDVQQD
Eyg2OTliM2E4MTcwZTNhMTRmOGUxZDQxOWVkYjMwNzViNzgyNTcxOGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32slIyXnRivSzs6TkyS1Tew5Ph+P
jHFb7A24ABPIvF7IrmJbaGMg3hA582ui+L6bGbYeUDwQ5MGmJhItyOjk4plHSnVb
C8Y7x+Mg+mIWo9oJHP72GwgjMNLNgPikhqVvGESWRvPPo5tm31Dw6BRXeK9q0uWL
/rpL7/VTmoRp10SyOUQZCeajvWRiiTXTAHz0Vuh9aS0LrPdPgCFSltU0V4RYlmgU
XVR+JTFkwy0BQXvSEDGC6JJ7lSLexCiAowmCvV8kvo3Kfhlkt+4QX+DGc4TnCdbp
KikYeMj5eRtJjRrMZH9ATu9EZjBRLmpJyqs11rJLw7vC9t12hOa5Skky1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmbOoFw46FPjh1BntswdbeCVxj2MB8GA1UdIwQY
MBaAFEVA2qTCRaRyXzgEFAK2v/3tFep4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlVEYXBNSkZwSEpmT0FRVUFyYV9fZTBWNm5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jMGJhNmYtZGY2Zi00MTQ4LThmY2Et
ZDI1YWFhODA0MTQ1LzEvUlVEYXBNSkZwSEpmT0FRVUFyYV9fZTBWNm5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9jMGJhNmYtZGY2Zi00MTQ4LThmY2EtZDI1YWFhODA0MTQ1
LzEvUlVEYXBNSkZwSEpmT0FRVUFyYV9fZTBWNm5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABI4iEzpH
KY6Wpz/tjkhTkHiL4aJqGBEs0UjKwKEJnZduP3FBYdRkUUEY2RsXZVfqycX47IQy
qkvPMoNzHIeyuPIVKCYfPoAnW5fjzVQGW1Y38teOE1yCmKhFW1IKN857QPENarv5
Eu33tYTQST5QpzuKWbZJuGrnW6rYzru9AujdIcAIYTzLF5Cmew3P4IaTsJ+qk5cj
fZkfp5VatRzslComT1ZlDqv9vg4ZKXjLJNj8L/wgFfEhp4fxc9rqKO8Et4uZ43dH
q5/P5oj4lTwX/gXiJEMWu0n/QhTCTe5BjXSXlugz54+OFBlMzvSBUy7dDqnrdYF4
ZkHv0TdZTqeG8A==
-----END CERTIFICATE-----
Generated at Wed Oct 29 09:10:58 2025 by rpki-client