Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
File: ruxDT4IchrfuYxZpHXHMYcQMNGw.mft (raw, json)
Hash identifier: jX6JwStnWFd3vobQyHyBB5DGEMGeplTYs6NOMYm/5cE=
Subject key identifier: 5D:44:C6:61:C8:17:37:3F:10:23:00:52:52:DE:79:CD:14:C9:74:A8
Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Certificate serial: 0199FC8F3026A68A242D7E52857F575B069B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
Manifest number: 0C11
Signing time: Sun 19 Oct 2025 13:01:06 +0000
Manifest this update: Sun 19 Oct 2025 13:01:06 +0000
Manifest next update: Mon 20 Oct 2025 13:01:06 +0000
Files and hashes: 1: 5O89Acll2BSQwsAU1cu5uSGZnA4.roa (hash: bQuSQoXZ0EYJdYaZW1OMXS0ZVjJxuMon+vONAFdoiT0=)
2: ruxDT4IchrfuYxZpHXHMYcQMNGw.crl (hash: hWJhD9HdaUiMkxh2+99i8X/m/PYdVmP6wH36jTn41TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:30:26:a6:8a:24:2d:7e:52:85:7f:57:5b:06:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Validity
Not Before: Oct 19 13:01:06 2025 GMT
Not After : Oct 20 13:01:06 2025 GMT
Subject: CN=5d44c661c817373f1023005252de79cd14c974a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:17:ca:86:ea:63:98:54:b5:7f:df:e4:fa:
a0:79:45:51:6d:cd:78:da:c2:d6:92:91:96:a8:30:
1e:7f:bf:a4:fe:01:5a:f3:b5:a3:ba:31:9d:0c:63:
07:6c:d6:1f:0a:09:54:96:0f:8b:ef:8a:ce:fb:7c:
3d:38:87:fd:63:b5:e6:ef:dd:fb:fb:9b:8b:3b:69:
fe:ff:ef:aa:2a:f9:cc:f6:5a:b3:7d:19:2d:7f:9c:
f1:6f:69:4c:df:c2:f7:50:65:37:5b:a6:49:b4:91:
00:f8:ca:36:45:16:5b:2c:24:f1:ae:e8:f8:51:68:
64:47:ae:c2:94:78:a6:54:8e:62:e9:e5:cf:1c:a3:
e8:f4:7c:0d:38:17:7e:82:8a:68:ec:d8:01:62:b4:
0a:d6:9e:ac:b7:90:a5:23:60:4d:98:3e:7f:0a:02:
f3:69:c8:d2:58:fa:c6:44:3a:0c:a6:e0:54:28:a5:
ba:09:db:99:6b:af:17:e2:76:90:6e:39:e9:34:c0:
4d:bd:3a:a0:a7:5d:f0:d8:98:3f:fc:32:3a:3b:0b:
c7:8d:41:1f:09:83:30:e0:ad:e9:58:b5:9f:10:b5:
9c:fc:65:a6:8a:d0:3b:b1:00:85:83:8c:95:83:97:
c1:02:f4:4c:7e:c3:87:5b:82:b5:f7:e3:f1:29:7e:
d6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:44:C6:61:C8:17:37:3F:10:23:00:52:52:DE:79:CD:14:C9:74:A8
X509v3 Authority Key Identifier:
keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d9:0e:14:0e:e0:4a:33:2e:ba:15:4a:3b:84:7e:bd:e2:31:
62:b2:36:0e:26:3b:bf:68:8b:fb:c0:e9:26:8c:d4:5e:8e:76:
ff:a9:67:fe:90:f1:7e:a0:4a:44:ec:ed:93:05:de:1b:61:9b:
16:f3:d8:bc:b7:58:b4:9d:fd:4a:74:78:4e:a3:48:30:9e:82:
e8:68:d7:3e:de:2a:51:8f:cb:fb:1b:77:d5:c8:14:e9:df:33:
77:b8:64:0a:90:b3:20:4a:70:d9:34:56:bc:7f:60:1f:93:59:
b5:0a:0e:4d:d8:95:db:5b:8e:9a:3c:dd:d7:e0:09:b8:76:fd:
c8:50:94:f3:80:fd:63:6e:cb:5a:2e:dc:e4:e4:6f:c9:cd:6e:
78:71:20:cd:09:65:c1:92:cc:d6:32:0b:82:d8:e2:12:7d:4d:
d9:4a:89:24:78:2f:4d:bf:8c:68:d6:46:c5:c9:5d:42:fb:f9:
98:92:0a:51:e4:6d:ee:70:f4:57:f8:d7:4c:c9:b2:c3:b6:fe:
a1:85:5c:3c:85:b5:62:2e:e9:2a:d3:70:18:a6:66:09:b0:8b:
d6:f5:df:41:40:b0:30:76:ed:89:34:22:19:6e:2d:55:e7:58:
a3:24:87:52:46:65:dd:87:e8:e3:7d:ea:45:5f:2d:da:a4:19:
3c:27:73:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:40 2025 by rpki-client