Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
File: ruxDT4IchrfuYxZpHXHMYcQMNGw.mft (raw, json)
Hash identifier: wQ72GDOdr9g0FPG4Muzlehs7yOiI6xTVVeNaJbK7BCA=
Subject key identifier: 58:94:52:96:BD:F3:C6:E3:30:2B:FE:FA:AF:23:E8:E6:C0:78:6F:CF
Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Certificate serial: 019A251CDBA397F710EA52B60856F7B1487B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
Manifest number: 0C26
Signing time: Mon 27 Oct 2025 10:00:39 +0000
Manifest this update: Mon 27 Oct 2025 10:00:39 +0000
Manifest next update: Tue 28 Oct 2025 10:00:39 +0000
Files and hashes: 1: 5O89Acll2BSQwsAU1cu5uSGZnA4.roa (hash: bQuSQoXZ0EYJdYaZW1OMXS0ZVjJxuMon+vONAFdoiT0=)
2: ruxDT4IchrfuYxZpHXHMYcQMNGw.crl (hash: y3HQ+2yKmMewZPzfQ4KofsHTApyLDN4hWSNu7j3gV7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:db:a3:97:f7:10:ea:52:b6:08:56:f7:b1:48:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Validity
Not Before: Oct 27 10:00:39 2025 GMT
Not After : Oct 28 10:00:39 2025 GMT
Subject: CN=58945296bdf3c6e3302bfefaaf23e8e6c0786fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:72:3a:86:ef:d4:65:7e:9d:44:6a:7e:03:ac:
02:4d:76:a3:da:9c:08:f2:e0:a9:e6:39:62:32:1e:
57:53:b4:1f:1f:81:a3:b1:9e:97:f0:08:9f:c6:ef:
f8:f3:bf:37:5f:4b:fd:df:7a:22:5a:11:f2:0d:1e:
08:a5:eb:9a:48:66:36:92:8f:a2:f4:b0:1b:3c:b7:
43:2d:66:82:84:f4:36:68:5b:02:c9:82:3a:ea:75:
5b:b4:0f:2e:b6:46:83:c2:ea:cf:77:83:69:5b:8d:
ae:06:be:77:50:fd:e2:4f:9e:ed:96:f0:d5:dc:c3:
50:0f:30:be:d1:c6:b5:cd:d8:e5:91:c9:85:cc:ec:
fa:41:2a:5e:32:59:86:92:af:31:ed:7c:1e:26:07:
d0:c6:c4:2d:e5:73:ce:4c:d9:98:2f:13:b9:8b:3a:
8b:da:1e:f6:68:3a:f8:0e:ce:ae:e1:5b:3d:b2:94:
09:ca:cc:4c:52:64:36:6c:a7:9d:65:7f:e8:38:db:
15:45:8f:f4:f0:ec:7b:c5:64:d8:18:6f:fc:01:1d:
12:61:48:a9:39:ce:37:e8:e0:10:d6:3e:f3:4b:5e:
31:eb:79:3f:41:2c:ae:1e:7d:93:fd:d1:fa:81:09:
3f:53:8a:dd:b5:41:dc:e6:d9:31:91:d9:01:22:c5:
d4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:94:52:96:BD:F3:C6:E3:30:2B:FE:FA:AF:23:E8:E6:C0:78:6F:CF
X509v3 Authority Key Identifier:
keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c9:70:78:83:d5:89:c3:99:77:18:79:c9:34:4d:ec:9e:5e:
a2:b1:9a:30:33:f2:8b:b4:39:a9:17:ad:ee:44:a1:9b:ea:80:
68:1a:81:9f:66:ac:61:95:e1:ca:6b:65:c1:c8:1c:aa:b4:47:
8a:7a:84:94:ea:5b:84:92:c5:32:3d:2d:5a:42:0c:47:9a:0b:
40:06:2b:e4:6f:1e:af:c1:0e:a4:c7:34:04:ba:20:2c:71:a2:
59:50:4e:0b:cf:c0:dd:59:74:39:23:90:f5:de:49:6b:c7:ba:
ce:57:97:7e:10:8b:0e:d4:ef:fb:74:a0:59:9a:f3:f0:db:67:
da:e0:25:21:11:2c:fd:83:af:77:84:77:f2:f0:ee:be:76:78:
22:75:0d:df:6d:ca:06:1e:10:50:97:a9:ec:84:da:02:00:91:
94:5d:66:de:b7:53:90:af:50:1c:e6:0c:51:ac:47:57:56:a7:
4f:e1:43:ca:d8:bb:65:85:ab:d6:03:e4:5a:6d:c5:60:71:15:
42:36:2c:15:f5:9e:9c:d5:04:b2:3b:8e:09:d8:85:21:97:63:
02:ed:12:98:55:30:91:33:6a:c8:b1:16:2c:78:dd:06:30:15:
01:f1:73:b7:1a:b3:14:3b:a1:d0:b2:42:b3:fd:cc:85:f7:21:
15:7c:dd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 19:47:15 2025 by rpki-client