Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
File: ruxDT4IchrfuYxZpHXHMYcQMNGw.mft (raw, json)
Hash identifier: aC5Oz5ixesp75oJYxbKZNsaK/NA9poJoR5STslf6LQw=
Subject key identifier: D1:E0:90:9F:BF:D5:B3:9C:EC:CD:13:A6:20:E1:5E:27:66:57:D4:56
Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Certificate serial: 01974779F9A2F4D6E517C74121E3F8E6366C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
Manifest number: 0AAA
Signing time: Fri 06 Jun 2025 23:01:05 +0000
Manifest this update: Fri 06 Jun 2025 23:01:05 +0000
Manifest next update: Sat 07 Jun 2025 23:01:05 +0000
Files and hashes: 1: 5O89Acll2BSQwsAU1cu5uSGZnA4.roa (hash: bQuSQoXZ0EYJdYaZW1OMXS0ZVjJxuMon+vONAFdoiT0=)
2: ruxDT4IchrfuYxZpHXHMYcQMNGw.crl (hash: Qu7LlKel/AKgs9dq0x5LFnZ2GJzkFE/p1bVgXxaBbIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:f9:a2:f4:d6:e5:17:c7:41:21:e3:f8:e6:36:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Validity
Not Before: Jun 6 23:01:05 2025 GMT
Not After : Jun 7 23:01:05 2025 GMT
Subject: CN=d1e0909fbfd5b39ceccd13a620e15e276657d456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:4b:1e:e4:34:06:b7:58:cc:36:bb:05:d7:
ba:36:32:a6:96:25:0f:d8:e1:b1:97:55:97:04:85:
db:5e:b2:5a:43:36:0d:0a:6d:bd:9d:ab:9e:62:cb:
ed:d5:84:15:93:eb:44:29:2b:a5:42:73:c0:0a:3d:
aa:4d:cc:bd:d5:c6:6f:13:af:fd:87:bb:bf:61:27:
e4:2d:91:95:e9:b8:8f:d3:12:cf:3c:18:64:32:6b:
06:79:51:50:63:f4:b0:c8:82:c4:68:ce:2e:b8:84:
f8:13:d5:c2:00:e4:c5:90:3c:53:29:cd:1a:86:4e:
7c:e3:0b:e4:26:89:6b:66:5b:69:7c:88:80:8d:b2:
f3:7a:12:59:0a:bc:70:39:4f:e1:f5:f5:42:8d:2d:
13:f8:2d:9a:30:28:b3:1c:cf:a6:48:4d:a1:c0:55:
fa:4f:70:40:74:34:62:95:54:32:f3:7f:17:1b:1d:
29:af:69:d1:e2:9e:90:71:61:65:83:74:ec:e3:87:
a6:37:c1:3e:ce:49:36:c4:93:42:78:d6:53:2b:05:
df:20:6e:e6:05:52:f7:3e:c1:fe:64:7a:62:10:5a:
2f:ca:f3:92:21:03:23:66:68:91:8c:15:df:12:05:
25:06:9a:59:57:58:92:3e:ae:4e:b5:82:67:52:f7:
95:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E0:90:9F:BF:D5:B3:9C:EC:CD:13:A6:20:E1:5E:27:66:57:D4:56
X509v3 Authority Key Identifier:
keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d8:1a:02:fb:9a:b6:4a:15:c1:b2:ad:82:39:fd:6e:76:d7:
53:62:f5:c5:e8:6c:5e:a0:a3:73:15:b5:b2:57:a6:03:e4:31:
76:8c:1b:4c:fa:72:41:dc:c2:71:95:87:cd:29:52:9c:ce:eb:
9b:69:5e:c4:87:10:0a:da:88:a0:3a:95:dd:cd:67:15:ed:7c:
4a:69:db:6d:47:a1:4b:36:a4:70:82:b8:97:26:67:ef:61:9d:
e8:e1:84:62:a3:ca:11:c0:ac:6a:99:21:03:bd:fb:39:33:61:
52:0e:69:c3:71:c8:ad:b7:50:5a:88:e0:bc:40:db:26:1c:8c:
9a:5d:34:3a:03:e0:f2:55:be:46:a1:c6:51:a8:73:a9:19:66:
c7:86:bd:b9:71:09:df:db:5b:ed:c3:72:c2:bf:ce:40:6c:89:
12:a2:ab:fd:d8:aa:63:46:53:41:65:c7:57:0c:ab:0e:57:0d:
72:3b:77:73:ff:91:d2:8d:1b:f4:dc:3e:8e:20:23:86:c6:b7:
6a:cc:af:51:93:8e:84:86:91:45:27:9f:a0:8b:db:f9:b4:39:
4f:9a:9a:cf:29:d0:56:15:4d:6a:3b:ce:da:29:1e:ac:72:cf:
41:24:1b:b3:82:2d:10:ce:48:5f:be:c3:52:89:5e:36:7b:a5:
65:c9:3d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:31:26 2025 by rpki-client