Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
File: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft (raw, json)
Hash identifier: UWOwIE6oG0u8+RE9zz7rJhGk/f7f3xoGl/DAMOvx3MI=
Subject key identifier: 5F:8C:FC:62:B9:C8:E0:35:13:F3:79:5C:8C:67:B6:6F:90:06:43:34
Authority key identifier: AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
Certificate issuer: /CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Certificate serial: 0199FAD85D0A32EC6595FC5B23DA4BF43E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
Manifest number: 15D3
Signing time: Sun 19 Oct 2025 05:01:47 +0000
Manifest this update: Sun 19 Oct 2025 05:01:47 +0000
Manifest next update: Mon 20 Oct 2025 05:01:47 +0000
Files and hashes: 1: NasWHXHMUrneYOPi_YEJHup68SM.roa (hash: vL3Q2Q0+7pnxdL6gd2R9r+dXrTLQulaJB+4Rjiarvgs=)
2: mQMuKDoHnr1LeGkTlxHsfTZ3PWQ.roa (hash: zwJx6M98s8at6u4x9fLfaXSOW6xFzqNRxDzug5GEBAw=)
3: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl (hash: Vo81u0El8S0qpMOxCgeNxxysvSm/OKZ9W87Pi2rwM0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:5d:0a:32:ec:65:95:fc:5b:23:da:4b:f4:3e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Validity
Not Before: Oct 19 05:01:47 2025 GMT
Not After : Oct 20 05:01:47 2025 GMT
Subject: CN=5f8cfc62b9c8e03513f3795c8c67b66f90064334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:13:0f:22:a5:65:7a:b4:f4:d7:a4:de:e7:e5:
11:f2:70:d2:22:69:1d:63:02:b3:0f:cf:95:b4:40:
97:db:5a:c7:02:15:c3:c5:34:2a:94:e7:91:d9:59:
aa:08:64:62:fb:bf:d1:cc:98:38:44:86:3e:41:4d:
b8:1e:b0:4f:42:6b:14:6a:b0:ee:c5:ee:e9:dd:7c:
ee:34:7b:77:4f:f9:20:66:fd:e1:33:b9:56:b3:e3:
03:89:05:bb:38:83:3a:95:60:2c:a8:73:a3:b6:9b:
ac:60:b0:93:73:38:ae:d4:bc:9d:1c:25:74:ca:e0:
f5:bc:2a:45:95:d1:2a:9a:31:c9:c4:ec:29:ae:1f:
ff:64:a1:58:fd:f4:42:49:e2:8f:33:f3:7f:06:cd:
d7:93:88:79:65:e1:cf:cc:94:8f:77:54:d5:da:30:
78:9a:09:e9:04:67:ee:fb:b2:64:96:ec:08:0e:21:
af:02:45:60:79:5f:00:f5:94:84:a5:48:3d:e8:73:
6d:52:fc:3b:d8:c6:7a:e5:6e:80:0c:7b:93:a3:ac:
ac:6b:5e:fd:42:cc:75:fa:6e:c9:94:40:2d:fd:68:
ff:10:66:39:47:92:4b:3d:54:4a:d0:46:03:08:0d:
58:48:f6:65:f8:9e:ba:73:a2:fc:97:86:b0:4a:a8:
5a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8C:FC:62:B9:C8:E0:35:13:F3:79:5C:8C:67:B6:6F:90:06:43:34
X509v3 Authority Key Identifier:
keyid:AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cb:72:d8:18:32:c6:5f:b3:4d:68:34:6e:23:19:71:57:97:
3a:1d:3c:9e:6a:9f:2a:ae:7a:a0:2d:fa:a2:a4:4b:fc:1b:ee:
7b:30:27:7f:1f:fd:82:7a:d1:3c:8d:1a:c9:4f:80:5f:85:1b:
50:60:2e:e7:8f:19:c7:b9:9b:28:65:c8:9d:8d:ec:e1:6d:a9:
fe:12:7f:78:cc:e9:43:47:e7:3c:49:b5:a5:57:7b:e3:fa:80:
8c:45:be:c4:75:f4:38:e6:96:20:0b:49:e7:25:f6:89:1a:3d:
d3:d3:83:ac:00:a2:77:9d:ba:b5:7a:ef:ac:8c:a5:79:eb:be:
b4:bf:48:52:8c:d6:13:9c:af:7d:69:6c:b6:4d:4c:aa:30:18:
92:aa:92:8d:76:ea:a4:e6:41:fb:f8:40:fb:41:c8:39:42:5b:
0c:b3:e3:23:3b:a4:c4:52:dc:8d:f7:72:01:a5:4e:82:5c:2a:
15:f1:e6:40:e2:4d:7b:88:eb:d5:df:1a:fd:f3:6f:1a:d8:9f:
8e:fc:49:fc:36:35:ce:d1:7b:b5:1c:5d:80:a0:a8:0b:61:26:
ce:a0:8a:6c:5f:a6:66:aa:e9:d8:ec:05:23:a2:f0:d7:ea:92:
a8:ac:ac:bc:b6:e9:e3:31:19:0d:2a:ad:db:6a:0b:2d:69:a8:
c0:cf:69:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:43 2025 by rpki-client