Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
File: rujl3-xoOuXxoOvg-5b6JWswR2I.mft (raw, json)
Hash identifier: cWoxO9wjLE9bpflGWxrtEtgshKS1FO0qmhkXMBGWR9o=
Subject key identifier: 38:08:5E:0A:4C:9A:DD:A6:F6:A0:8C:14:BD:32:2C:22:FE:E8:8D:E3
Authority key identifier: AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62
Certificate issuer: /CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762
Certificate serial: 019A72259BFE063EB66995A783A9F1AB9DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
Manifest number: 0FDC
Signing time: Tue 11 Nov 2025 09:00:58 +0000
Manifest this update: Tue 11 Nov 2025 09:00:58 +0000
Manifest next update: Wed 12 Nov 2025 09:00:58 +0000
Files and hashes: 1: I1hQSc_aI8nnk6g1vpjyTdXYNJI.roa (hash: h2IeKZyMJz7T7nR3ubhVngPyKXqYp/CJM8eA4imhJCk=)
2: rujl3-xoOuXxoOvg-5b6JWswR2I.crl (hash: V2dNTzJc9vx/4CPBAUTAkQl7Vi1BuNJFyZ03nir6UUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9b:fe:06:3e:b6:69:95:a7:83:a9:f1:ab:9d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762
Validity
Not Before: Nov 11 09:00:58 2025 GMT
Not After : Nov 12 09:00:58 2025 GMT
Subject: CN=38085e0a4c9adda6f6a08c14bd322c22fee88de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:69:25:86:b4:aa:c2:f9:50:a2:b6:55:55:29:
b9:9f:fb:da:d1:6a:26:81:4d:c3:c5:13:fb:3c:d3:
6f:e3:8d:4c:74:b2:26:01:48:d3:35:e6:30:10:44:
68:29:5c:f5:6d:42:c3:53:ba:77:33:de:80:d2:1a:
fa:95:82:a0:e6:4a:d9:41:82:75:d7:29:11:7c:6f:
85:d2:65:07:7d:ef:1f:b6:94:22:f2:ff:b4:e9:8d:
5b:52:35:06:a0:13:4a:42:45:5d:1e:e1:78:55:20:
f3:88:dc:f4:73:f9:2d:9e:46:3b:1e:50:77:73:d9:
c1:96:c8:34:48:a1:3d:4a:45:bd:16:fd:f5:a8:86:
7a:6c:01:4c:c0:3e:96:a5:d4:83:e6:74:aa:39:c3:
80:7d:d8:93:38:72:af:ff:77:00:9f:a7:ff:4f:af:
02:95:bb:9c:f4:35:7d:12:5b:06:b6:12:30:19:b1:
12:ac:ca:3e:e1:f0:ba:f9:34:3a:3c:c6:cf:f4:6b:
0c:6c:56:7b:68:ab:0a:28:85:6f:06:d6:4e:8e:b2:
dc:7f:4f:8a:cf:bd:56:df:b8:bc:43:02:45:6f:6a:
79:de:74:ed:a2:54:86:46:f1:5b:5d:69:a0:57:c1:
96:11:e1:6a:26:03:e2:31:87:11:11:3a:38:0c:d6:
1e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:08:5E:0A:4C:9A:DD:A6:F6:A0:8C:14:BD:32:2C:22:FE:E8:8D:E3
X509v3 Authority Key Identifier:
keyid:AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:81:63:f2:13:32:15:d1:06:a3:e9:6e:e4:80:5e:64:df:f4:
ad:0e:80:ec:96:51:bd:01:ec:23:b3:53:90:8b:15:a6:83:4f:
da:7b:68:62:ec:91:6a:13:b5:4e:df:a5:aa:5e:81:7b:7e:0f:
a6:b3:fe:3b:11:69:54:bd:b5:0e:31:90:21:d9:fa:10:a3:c6:
5c:8e:0f:f3:83:d2:26:fb:e1:be:ee:d7:ea:28:87:77:43:ff:
67:84:c7:48:47:62:a1:15:87:4c:e2:79:16:b4:2e:aa:b7:d5:
01:54:30:69:36:7d:bc:64:34:65:06:1b:a5:85:64:a1:cb:50:
90:0f:ac:c6:cf:c5:e6:a5:79:8e:5b:a8:11:0f:17:61:3d:13:
3e:a3:7e:0c:28:f2:34:f6:3d:3d:81:84:5a:39:57:0a:12:a0:
14:d8:f1:9b:3b:1d:e4:a0:a7:f0:83:5b:8a:90:68:fa:a9:f6:
db:af:d3:29:e0:89:90:0d:3e:84:58:61:94:e9:3d:fd:28:79:
8a:5f:18:21:e8:db:d7:cd:73:e8:9f:6b:c1:7c:cd:cb:09:81:
4e:94:7b:b3:d1:3c:57:10:c6:ae:61:5e:7e:8b:92:01:00:de:
ab:e6:3a:31:1a:28:f9:cf:fd:81:1f:19:30:86:bc:89:a9:e7:
e4:4a:36:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:22 2025 by rpki-client