Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
File: ruxDT4IchrfuYxZpHXHMYcQMNGw.mft (raw, json)
Hash identifier: zxerNXKNSQxaVnTmO0YXH3dUIkSYK8Kcswie1BgxfSQ=
Subject key identifier: FF:65:57:C7:BB:78:F5:69:92:F6:FD:85:34:8F:52:38:8F:F7:09:F6
Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Certificate serial: 019937CA89EC5649025FD68C52119D03D5A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
Manifest number: 0BAB
Signing time: Thu 11 Sep 2025 08:00:44 +0000
Manifest this update: Thu 11 Sep 2025 08:00:44 +0000
Manifest next update: Fri 12 Sep 2025 08:00:44 +0000
Files and hashes: 1: 5O89Acll2BSQwsAU1cu5uSGZnA4.roa (hash: bQuSQoXZ0EYJdYaZW1OMXS0ZVjJxuMon+vONAFdoiT0=)
2: ruxDT4IchrfuYxZpHXHMYcQMNGw.crl (hash: wZqmv/2tp37sgMYzeVvU8CsXFxFz/ay1e9Gw2CDqa8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:ca:89:ec:56:49:02:5f:d6:8c:52:11:9d:03:d5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Validity
Not Before: Sep 11 08:00:44 2025 GMT
Not After : Sep 12 08:00:44 2025 GMT
Subject: CN=ff6557c7bb78f56992f6fd85348f52388ff709f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:dc:35:39:22:41:d0:2b:a5:bf:36:87:f0:
ca:58:d9:07:43:a5:58:db:a9:d4:22:75:c7:7e:87:
55:c3:c7:30:94:f4:d8:d9:80:b2:f5:4a:62:ca:1c:
5a:1d:ee:f4:db:fb:f4:11:cf:dc:d2:d0:16:56:4b:
b1:a5:6b:ba:71:98:97:38:9c:9a:51:fd:59:05:ea:
8d:15:55:f7:52:83:e6:87:d7:42:84:47:4f:42:6b:
7e:a0:ce:94:07:71:9e:59:1f:00:6d:32:e4:57:54:
a7:12:d4:22:27:e9:73:e7:a0:0b:30:99:99:f4:6b:
b8:96:58:5c:c4:68:c8:e3:d1:e2:d1:d8:40:81:ed:
bf:3f:1f:fc:07:a9:67:b7:c3:ef:c6:40:09:35:42:
7c:c8:54:15:61:84:ab:67:98:74:38:b9:9f:f9:b7:
b0:7b:ca:8b:ce:3e:c8:62:84:74:d4:8e:6e:71:53:
00:52:6d:40:a9:39:33:26:0e:d6:fa:e0:ed:00:d0:
45:70:0c:65:9f:5a:0c:13:e2:1b:d6:8d:9f:b9:a4:
41:b8:11:80:fc:80:96:f9:f7:46:ca:8f:fa:00:99:
62:d8:f4:c5:a1:ce:3b:29:2b:94:10:e9:80:be:f2:
1d:9f:cc:5e:25:ea:f9:bb:d0:2e:9d:66:93:04:57:
da:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:65:57:C7:BB:78:F5:69:92:F6:FD:85:34:8F:52:38:8F:F7:09:F6
X509v3 Authority Key Identifier:
keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:99:56:6e:d1:52:3c:f9:d6:fb:46:3f:d7:56:a0:98:91:e6:
3c:2b:84:38:f4:90:76:2e:78:f9:85:0c:8e:95:10:17:f4:90:
a0:38:df:d7:a3:b3:07:90:e5:a5:d5:af:57:62:29:43:98:53:
22:8d:dd:fa:e2:5a:b1:01:ad:d0:55:74:e2:7e:e9:94:a3:f5:
37:84:91:42:2a:00:ab:3f:55:cf:ca:0e:3a:73:05:2e:55:f1:
36:2f:86:f0:34:40:bb:9f:0a:62:a6:5b:6c:25:69:56:8c:9f:
4e:85:84:ff:37:79:37:eb:f7:2a:c0:0f:76:d9:76:33:5b:51:
17:bd:d0:6f:15:ec:d2:30:10:da:83:a5:0b:87:02:f1:85:43:
8b:d3:26:a7:e9:de:e5:a5:cf:6d:33:62:38:67:81:a1:4c:cd:
40:db:0c:fb:07:a5:b0:77:fa:75:9c:ec:78:97:df:6c:de:53:
af:0a:44:be:8c:ff:3b:5a:6b:32:ae:40:26:23:b4:13:ac:c0:
e9:d6:6e:6f:22:1f:31:4c:79:aa:9b:15:5f:ef:0d:e5:8d:06:
5a:c5:02:ba:37:da:34:32:7f:63:d2:df:b7:a9:09:64:16:81:
05:6b:17:7e:3c:ea:03:2d:52:e5:41:b0:54:b1:e8:79:cc:dc:
b1:27:a7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 17:29:22 2025 by rpki-client