Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
File: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft (raw, json)
Hash identifier: n8+aiyOOJ7JfPuntZgqhDaqHYRFsM+5L0YTJAqk/Lzs=
Subject key identifier: 36:C3:52:D7:48:33:73:F3:19:52:91:CA:F7:13:A7:21:62:F1:61:FD
Authority key identifier: AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
Certificate issuer: /CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Certificate serial: 0197C501AAB873D8F76674CA0EA509532697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
Manifest number: 14AE
Signing time: Tue 01 Jul 2025 08:01:50 +0000
Manifest this update: Tue 01 Jul 2025 08:01:50 +0000
Manifest next update: Wed 02 Jul 2025 08:01:50 +0000
Files and hashes: 1: NasWHXHMUrneYOPi_YEJHup68SM.roa (hash: vL3Q2Q0+7pnxdL6gd2R9r+dXrTLQulaJB+4Rjiarvgs=)
2: mQMuKDoHnr1LeGkTlxHsfTZ3PWQ.roa (hash: zwJx6M98s8at6u4x9fLfaXSOW6xFzqNRxDzug5GEBAw=)
3: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl (hash: /M6R1pI8XZXqYZ/vc9KKSmREKtWO18W+P2C5T2sdfy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:01:aa:b8:73:d8:f7:66:74:ca:0e:a5:09:53:26:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Validity
Not Before: Jul 1 08:01:50 2025 GMT
Not After : Jul 2 08:01:50 2025 GMT
Subject: CN=36c352d7483373f3195291caf713a72162f161fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:29:1c:19:56:60:08:23:19:7b:9a:16:fe:
7e:69:0b:bf:00:f2:b9:ca:4e:00:0d:9e:b9:f2:29:
58:22:dc:3d:c5:f8:69:33:42:3e:65:4e:f3:e4:3a:
53:cc:74:b4:8c:63:b7:06:05:21:86:a8:e8:4d:c9:
0e:2d:36:a8:62:84:45:26:65:3c:88:ba:3c:b0:ca:
85:19:e4:f9:e0:4d:f6:ef:b2:74:78:6e:ad:5a:7a:
34:f4:66:76:3d:0f:01:06:09:2a:af:5e:3a:86:42:
a2:3f:85:97:90:4c:7e:7e:8e:84:12:87:65:4b:20:
70:3d:9f:b6:27:70:e8:d2:74:92:3b:12:a8:28:a2:
99:5e:d9:be:0d:f9:a6:4f:3a:62:21:72:df:be:56:
73:2e:e0:0a:26:e6:27:ed:a7:86:54:54:13:6b:40:
a8:bc:7c:68:57:0f:5c:3c:5d:8b:b7:a0:bc:50:d1:
84:68:85:40:4d:cc:12:14:a9:bd:97:00:1f:a7:65:
d5:6f:68:9a:7e:c1:93:05:af:2a:03:a7:13:24:6e:
09:6f:dc:72:ef:4a:92:a4:58:f8:6c:23:23:80:79:
fe:57:d9:e6:fa:ce:a8:17:db:cd:72:12:5d:25:50:
2e:42:50:4f:5e:4f:36:53:da:2f:d2:9c:67:d3:37:
0b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C3:52:D7:48:33:73:F3:19:52:91:CA:F7:13:A7:21:62:F1:61:FD
X509v3 Authority Key Identifier:
keyid:AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:27:9a:48:10:52:52:e0:88:2b:42:fb:8d:b9:bd:fc:fa:d4:
19:52:c7:5b:cc:b3:96:6a:15:47:25:51:86:4a:f7:e4:42:f0:
c6:43:33:64:f0:44:10:3c:b1:c4:92:e0:64:e3:dc:aa:bd:d5:
90:6d:5b:56:b0:fe:b2:6d:a9:60:dd:2d:53:c9:da:94:85:4d:
f5:05:02:8a:ed:9b:b9:56:c5:a2:ed:2e:a6:04:b8:2d:d1:ed:
8d:73:01:75:de:1e:cf:65:85:72:d8:dc:d2:5e:01:bd:8e:34:
1d:af:12:ff:09:29:b9:be:af:56:34:4b:bb:10:ce:95:ab:df:
6f:c5:22:8e:1e:b1:a1:b3:42:74:a6:c7:c9:65:5a:50:89:ff:
74:f2:a4:70:4b:56:47:3f:bb:43:9a:1c:b4:0d:b4:45:15:f2:
cf:12:52:4a:9c:48:06:20:5e:07:f7:45:b3:48:6d:09:a7:23:
04:de:20:2c:73:66:51:85:3c:e3:c7:3e:79:12:ff:c0:44:d8:
a6:48:3f:2b:6b:56:97:60:07:2e:f3:24:a0:f3:0c:0b:d8:cb:
da:09:ea:41:ec:af:af:54:8a:8b:e5:94:e4:b0:c9:47:5c:41:
17:54:0d:f3:7b:c2:72:28:cd:c1:90:0a:41:51:48:ad:ba:37:
57:72:ab:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:06:30 2025 by rpki-client