Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
File: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft (raw, json)
Hash identifier: tXf7ep1rPRVPLh1HyJc4J+9a8NXqH0t72sUUuezwpVM=
Subject key identifier: 86:FB:85:36:62:69:EE:7B:0A:98:5D:57:82:C3:3C:5A:12:D1:B4:CD
Authority key identifier: AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
Certificate issuer: /CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Certificate serial: 019A7293B39C14957457ED785E25EBD741BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
Manifest number: 1611
Signing time: Tue 11 Nov 2025 11:01:13 +0000
Manifest this update: Tue 11 Nov 2025 11:01:13 +0000
Manifest next update: Wed 12 Nov 2025 11:01:13 +0000
Files and hashes: 1: NasWHXHMUrneYOPi_YEJHup68SM.roa (hash: vL3Q2Q0+7pnxdL6gd2R9r+dXrTLQulaJB+4Rjiarvgs=)
2: mQMuKDoHnr1LeGkTlxHsfTZ3PWQ.roa (hash: zwJx6M98s8at6u4x9fLfaXSOW6xFzqNRxDzug5GEBAw=)
3: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl (hash: RhjPEJcA/AlF3TTaR1CI/9kTsD7oU96ZYHUQHb89JI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:b3:9c:14:95:74:57:ed:78:5e:25:eb:d7:41:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Validity
Not Before: Nov 11 11:01:13 2025 GMT
Not After : Nov 12 11:01:13 2025 GMT
Subject: CN=86fb85366269ee7b0a985d5782c33c5a12d1b4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:33:bb:3f:9d:a8:c3:be:cf:15:fb:fd:83:e1:
05:39:a8:59:11:4e:8b:a0:c0:8a:00:57:fd:8d:57:
ea:fb:80:bb:97:71:58:a8:9d:f6:9e:99:d7:7a:d3:
2d:d1:04:eb:d3:fe:cc:7a:48:95:f5:51:e5:84:da:
81:0e:ae:fc:18:7f:6e:47:dc:22:ac:ac:ea:06:75:
9b:c2:1c:87:ef:46:7f:ac:74:2e:b1:a4:ad:7e:a5:
aa:bb:a8:7c:7f:bb:1c:0c:30:d7:44:d5:35:2f:12:
46:81:14:6c:ee:1d:eb:0d:88:f5:8f:9f:50:bd:4e:
78:f3:56:eb:95:e6:f6:5f:20:3d:77:fb:73:4a:d8:
d1:af:47:4f:fc:dc:96:bf:b4:aa:4d:84:30:2f:fa:
d0:0e:8e:98:0c:92:f9:85:fb:0b:37:4c:49:df:f8:
2d:4e:83:9a:23:4e:6f:88:1a:7c:3c:7b:22:a4:40:
38:90:ea:fb:60:09:cf:63:34:6d:8d:fd:b8:aa:fd:
0d:ec:db:14:21:ad:44:47:6f:10:5d:88:af:d4:5b:
1b:c0:d7:0e:28:55:b4:52:b0:cc:00:d2:94:e7:cb:
b4:4f:87:82:fd:e8:ac:97:e7:a7:c7:96:dd:70:4a:
5c:03:54:ba:72:2c:11:33:f7:2b:99:55:ed:c5:1e:
c9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FB:85:36:62:69:EE:7B:0A:98:5D:57:82:C3:3C:5A:12:D1:B4:CD
X509v3 Authority Key Identifier:
keyid:AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d1:5c:44:db:65:1c:bf:54:ba:c1:c3:e1:3e:58:b7:bc:7c:
b3:73:81:8d:86:8e:9e:81:d4:f5:fd:c6:55:62:4c:b1:62:a6:
f4:0f:6a:56:66:b4:25:29:c0:31:bd:82:36:d0:45:f8:dd:f9:
a8:bd:05:7c:05:0d:2a:82:b3:77:8e:30:76:6c:35:00:06:bf:
09:20:84:6f:78:d7:8f:f3:06:19:13:cd:70:56:26:ac:74:f1:
f0:14:fc:b9:c0:52:ca:3a:19:3f:ed:5c:7d:33:15:bf:a1:e1:
36:38:b2:d8:3b:5f:c5:45:3f:25:a4:f4:91:92:ac:cc:fa:5f:
c9:3b:bb:87:a1:36:cc:18:ae:6e:ef:03:1b:2b:69:35:9f:b9:
a8:65:a3:eb:b1:2d:67:c5:45:47:3f:e1:82:8e:c2:0a:6f:84:
be:10:f8:e0:bf:f2:4a:c3:e9:32:fc:4c:2f:06:d2:41:e1:19:
78:ba:ba:d5:f9:51:44:e4:4b:19:56:c1:86:d1:02:83:5f:7d:
de:3a:b9:bb:9c:da:54:39:71:1e:7c:7e:92:67:f2:97:13:55:
52:14:03:39:01:6a:e6:78:f5:90:43:33:6b:ef:67:27:bd:4d:
65:81:9f:21:ad:95:06:04:a0:a7:5f:b2:5d:94:64:d8:6a:47:
b2:9d:02:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:10 2025 by rpki-client