Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
File: ruxDT4IchrfuYxZpHXHMYcQMNGw.mft (raw, json)
Hash identifier: cd7Th+DcFgIxYlA9bkRN7iscrrJrqIJGhejS95XUU2w=
Subject key identifier: F4:45:20:9E:14:A1:85:03:B5:4C:2E:84:45:83:63:08:AE:C3:BF:42
Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Certificate serial: 0198D73B565D12A66733AE5CB74764DDCD99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
Manifest number: 0B79
Signing time: Sat 23 Aug 2025 14:00:46 +0000
Manifest this update: Sat 23 Aug 2025 14:00:46 +0000
Manifest next update: Sun 24 Aug 2025 14:00:46 +0000
Files and hashes: 1: 5O89Acll2BSQwsAU1cu5uSGZnA4.roa (hash: bQuSQoXZ0EYJdYaZW1OMXS0ZVjJxuMon+vONAFdoiT0=)
2: ruxDT4IchrfuYxZpHXHMYcQMNGw.crl (hash: Nc+Z2b9SysCQVqgpmdufmZks4ek84OBuu+tGFKtQ5es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:56:5d:12:a6:67:33:ae:5c:b7:47:64:dd:cd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Validity
Not Before: Aug 23 14:00:46 2025 GMT
Not After : Aug 24 14:00:46 2025 GMT
Subject: CN=f445209e14a18503b54c2e8445836308aec3bf42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:43:74:2a:8f:c2:3a:1a:bd:31:05:65:6e:78:
46:b8:48:17:c6:6d:5d:99:da:b3:74:59:aa:8b:3a:
0c:94:ee:a3:bb:9c:a2:f3:c4:3f:b9:9d:ce:d9:9e:
3c:73:2c:ab:33:95:5b:56:7d:6e:b1:39:49:e6:1f:
05:5d:e5:b5:34:ab:d3:7d:2e:9b:2d:3d:58:6a:e1:
2a:07:c3:7a:14:31:e1:7b:78:9a:60:3b:f7:0e:ed:
65:ff:8d:a9:a4:e4:fc:14:59:4d:47:69:87:09:71:
d0:ca:d0:0a:d9:6c:22:1d:df:2c:48:e1:f3:b4:eb:
4f:94:3c:68:e4:41:ba:a4:a1:26:13:56:a8:63:7f:
dd:7f:30:64:c4:02:f2:59:c3:ce:df:e3:e2:1b:cd:
a4:a5:5a:93:28:df:e0:c2:a2:6f:e9:fe:da:f4:3c:
bf:d8:a7:46:22:7f:67:8f:69:32:c6:57:c4:bd:0c:
6c:21:64:8d:18:bb:df:98:90:70:34:e4:4e:70:ca:
04:5a:a3:4c:c9:52:0d:d0:09:47:f5:ea:a8:b6:52:
08:81:85:8a:9f:20:f3:b4:7b:ec:94:11:05:42:a5:
0b:58:e7:9f:3c:64:8b:a4:c5:2d:7b:8f:f9:77:08:
07:20:b9:6b:b1:e9:e8:83:5e:a0:f2:53:3a:a1:80:
ff:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:45:20:9E:14:A1:85:03:B5:4C:2E:84:45:83:63:08:AE:C3:BF:42
X509v3 Authority Key Identifier:
keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f0:7f:52:90:08:09:32:f9:66:18:9c:62:42:a3:29:af:cf:
94:e8:13:25:e1:e5:82:a7:82:79:8c:04:f9:e3:0b:a8:ab:64:
d9:54:08:42:9f:a6:ad:a1:8b:72:b9:de:07:48:62:49:02:6f:
48:e8:4c:37:b8:61:3f:09:52:5b:7c:fb:2e:10:b1:a7:06:a0:
29:47:f0:04:0b:f8:18:d3:93:1b:0b:99:be:2e:0b:c3:d1:4e:
b2:9f:be:39:31:67:02:de:8f:e7:da:97:37:ee:93:96:b4:12:
97:d5:d3:49:32:74:35:0e:7d:4c:3d:73:0d:e5:d0:ae:0b:e5:
f8:d3:4a:80:2c:8e:bc:d1:cc:71:71:a6:d0:32:32:fc:b2:33:
bd:38:be:8d:99:59:71:05:2f:36:9a:31:ec:28:d5:28:06:d8:
d7:5c:27:e9:00:79:3a:cf:a3:ce:37:cf:36:e3:e8:dd:06:66:
de:95:e1:72:80:ae:18:35:9c:3b:1e:54:11:0c:c1:2d:01:0d:
2f:ea:e3:75:5c:1d:0c:f5:1f:d8:a3:6e:c5:a2:f9:ec:b4:90:
9d:a0:a4:e6:d0:d9:87:e3:73:a6:22:4a:c0:35:64:e6:f3:2c:
7f:64:33:b4:22:c4:86:7d:bb:af:3a:af:1a:27:7f:29:82:ed:
a0:8a:9e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:24:47 2025 by rpki-client