Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
File: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft (raw, json)
Hash identifier: dU4Zg9aAB4HNT5zqbRoT9sYnfEyDE5TGaLc6IP5QS4U=
Subject key identifier: B9:70:FB:0D:EE:09:BC:5A:76:E7:E1:04:67:22:AF:43:51:E3:31:40
Authority key identifier: AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
Certificate issuer: /CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Certificate serial: 0198D54E8C47F457BA465E432594BF9FD860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
Manifest number: 153B
Signing time: Sat 23 Aug 2025 05:02:31 +0000
Manifest this update: Sat 23 Aug 2025 05:02:31 +0000
Manifest next update: Sun 24 Aug 2025 05:02:31 +0000
Files and hashes: 1: NasWHXHMUrneYOPi_YEJHup68SM.roa (hash: vL3Q2Q0+7pnxdL6gd2R9r+dXrTLQulaJB+4Rjiarvgs=)
2: mQMuKDoHnr1LeGkTlxHsfTZ3PWQ.roa (hash: zwJx6M98s8at6u4x9fLfaXSOW6xFzqNRxDzug5GEBAw=)
3: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl (hash: sYav1JXgNhYFZYynCcl3fQiswDxuOWcq1ku1glASwPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:8c:47:f4:57:ba:46:5e:43:25:94:bf:9f:d8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Validity
Not Before: Aug 23 05:02:31 2025 GMT
Not After : Aug 24 05:02:31 2025 GMT
Subject: CN=b970fb0dee09bc5a76e7e1046722af4351e33140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:28:34:14:6a:44:e5:3a:c2:94:f5:63:4f:64:
a0:10:aa:cc:7d:a9:9f:6f:38:a0:73:95:5b:e1:e3:
2c:95:03:46:6c:a1:eb:1f:70:c7:7e:f1:9a:aa:8c:
fe:66:7a:67:4b:f3:b1:bf:38:08:09:6f:b7:c1:31:
a4:ef:0a:8b:03:ce:92:62:d0:d0:d0:2c:34:da:dd:
54:bf:44:a7:31:d1:26:bc:87:be:4c:51:1b:94:c2:
50:6a:95:02:68:19:e6:9c:e0:8a:07:95:dd:57:a4:
59:cf:22:e4:67:61:5c:2c:34:64:e4:5a:66:f0:21:
b9:8d:a6:8f:e4:4e:2f:34:2b:c2:bd:08:3c:30:ae:
f7:08:65:1b:f5:4c:32:fc:bc:79:c3:a8:1f:bf:1b:
c8:d8:30:c8:b5:6c:2c:b9:a8:3c:b9:c8:c7:d9:22:
63:41:1a:fe:f1:a0:4a:a9:44:8b:de:c6:79:2c:f2:
05:9d:c5:bc:a6:3a:c3:64:8a:04:a5:b9:be:51:05:
ee:73:34:43:b5:14:74:bb:c0:dd:d4:33:6f:50:92:
a2:a2:33:b2:73:30:8a:86:1e:33:45:84:22:ee:b1:
59:5b:ae:51:02:fe:e1:45:a0:2d:6e:96:1f:d6:c4:
da:8c:f2:58:bb:6f:20:6a:5c:1e:fd:da:c7:c3:12:
a5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:70:FB:0D:EE:09:BC:5A:76:E7:E1:04:67:22:AF:43:51:E3:31:40
X509v3 Authority Key Identifier:
keyid:AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8f:06:b8:1d:26:f9:5d:08:94:a7:0e:ef:b7:ba:f9:6c:02:
51:5d:d0:73:28:c4:95:4c:6a:2d:dd:2e:70:b5:70:0d:9a:9e:
66:23:83:07:f5:b5:31:3a:f3:93:d3:0b:75:00:37:8e:fa:8e:
d7:99:4e:9b:99:7b:e4:96:86:38:e7:ab:ac:fa:4b:67:53:ec:
c0:25:f3:c7:f5:a2:b8:b5:53:34:75:14:0f:47:ee:f4:43:69:
0e:f9:f8:d6:40:2d:a9:ed:79:53:56:c7:a7:ea:a5:0a:78:58:
97:28:ad:63:9b:53:52:37:e9:8f:52:dd:60:66:59:54:17:63:
46:ff:f8:be:93:1e:09:44:bf:53:f8:74:27:88:62:51:21:63:
24:6e:bc:dc:6f:61:fe:05:2f:60:9a:04:98:e0:fb:8e:cc:3d:
0c:4d:d9:9c:36:5f:2e:f6:85:46:b6:83:2f:29:63:8d:58:14:
c9:f8:44:00:06:46:8e:07:67:f0:1f:5f:15:62:89:bd:67:34:
a3:82:ba:db:23:bf:9b:29:a5:3c:9e:fb:a5:29:e2:c8:55:48:
19:b9:20:b4:11:f7:bd:1d:23:22:9f:39:d6:9e:fb:39:31:80:
cc:dd:31:95:2b:67:ba:a9:f0:f0:b3:ed:24:c3:22:0c:7f:7c:
a4:e5:c6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:28:23 2025 by rpki-client