Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
File: RusRr5NV2porXfc-zdf9CWektYw.mft (raw, json)
Hash identifier: uO9ZsiF+jWCQoF3gbqVfbz6KLU5JJKksml41Iwt6T7w=
Subject key identifier: A7:92:6E:5D:D5:E1:34:C8:07:B0:5E:E6:78:6A:42:5A:31:95:B2:E7
Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
Certificate issuer: /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Certificate serial: 0199FB7D08A93791FFE82CD055774CCC6E9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 08:01:39 +0000
Manifest this update: Sun 19 Oct 2025 08:01:39 +0000
Manifest next update: Mon 20 Oct 2025 08:01:39 +0000
Files and hashes: 1: GYTVmNtXsClBN2_m1uRr3vF4R2k.roa (hash: 5aAitfXDnMCmu3njYRXM+C5ciF1JourPlKjasRSY100=)
2: RusRr5NV2porXfc-zdf9CWektYw.crl (hash: etbgVvoqz3aV48Evv+l9N0Px7tsEN7BEVy84VUMavJA=)
3: a7IWjlJ3-v5YN5JtWuXJERn1hs0.roa (hash: ubv2dUjgg/MjekVb1dt+BNRzcRiJnDJyWbeGdndwL9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7d:08:a9:37:91:ff:e8:2c:d0:55:77:4c:cc:6e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Validity
Not Before: Oct 19 08:01:39 2025 GMT
Not After : Oct 20 08:01:39 2025 GMT
Subject: CN=a7926e5dd5e134c807b05ee6786a425a3195b2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:60:fe:d8:99:67:99:52:6e:11:55:a8:ff:44:
57:73:d6:c4:d8:26:64:6c:e3:79:23:45:d9:80:f0:
90:60:c3:5d:74:ae:5d:19:62:8d:a8:ab:81:99:fe:
a4:05:20:df:87:1e:ef:11:e9:1d:ee:d4:22:3e:c6:
27:96:b7:07:13:66:85:40:51:3c:dd:94:c2:e0:d3:
d9:80:c1:2a:0d:a7:93:c2:0f:0d:f9:ba:25:69:7c:
e3:7c:10:57:a1:99:18:49:4b:40:86:38:38:0a:a4:
5c:81:c7:39:f4:8f:a1:5d:49:52:33:1e:14:6b:e3:
1b:2e:dd:c2:a0:34:1f:fd:32:f5:8c:0c:8b:8d:6f:
a8:b8:1a:a8:86:05:59:d3:77:7f:1b:b1:75:5f:fb:
9d:3a:72:00:1d:d4:57:8b:e3:a3:23:0a:10:b7:c1:
e1:98:06:bb:82:aa:9d:5b:69:47:93:c7:97:80:2b:
4e:29:1b:22:13:a0:64:67:2a:7a:4f:1c:df:92:fd:
d1:f9:b5:9f:86:68:8e:c1:71:ff:37:e1:b2:50:6b:
9c:4f:4c:72:35:a7:e4:d1:7d:8f:ee:43:d5:1c:73:
8c:d8:f8:53:fa:b5:15:ae:be:bb:a3:a7:04:73:00:
f5:ff:0b:76:75:8b:a9:ff:fe:b2:89:78:af:c1:3f:
a3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:92:6E:5D:D5:E1:34:C8:07:B0:5E:E6:78:6A:42:5A:31:95:B2:E7
X509v3 Authority Key Identifier:
keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a9:2e:15:82:cd:71:b0:17:ef:49:9e:47:17:8e:8f:c5:fe:
6d:35:54:e4:6c:da:a9:53:1a:e3:06:68:d8:5a:66:3b:05:9a:
60:a5:9c:16:fc:e4:12:90:de:e3:12:57:8e:77:fb:42:35:26:
6d:26:69:c9:4b:37:c7:f7:29:bc:47:c8:74:4a:6a:03:ce:be:
8b:fc:23:a5:9a:d4:6f:b9:79:36:37:4f:8d:b1:ec:b2:1f:2c:
e2:2f:b7:eb:e5:5a:b2:38:a6:9c:9e:e3:70:c0:e2:15:f0:dc:
f6:b7:9f:22:59:d3:99:85:c4:13:e1:b7:3e:52:45:13:22:35:
36:66:3d:4c:4d:25:d2:94:21:b4:41:d1:b9:96:ef:69:54:0e:
ba:0a:44:f3:a8:25:ee:17:04:ee:47:a4:54:23:82:2b:e8:c7:
d1:ab:3e:72:fb:e6:ff:85:c9:3f:de:1f:c3:3d:ce:1b:bd:5f:
81:df:1e:29:24:56:eb:82:8e:ad:b8:d7:9d:91:e8:cf:d4:13:
a9:09:65:fa:7c:0d:d2:b2:2c:96:b5:7a:3c:2b:e7:d0:44:d2:
af:37:b0:f1:36:af:a7:0c:b7:f8:3b:44:c8:d7:09:93:63:77:
38:7a:37:ee:7c:0c:ae:fe:83:f5:d9:64:12:00:38:86:04:bd:
eb:eb:b9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:18 2025 by rpki-client