Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
File: ruxDT4IchrfuYxZpHXHMYcQMNGw.mft (raw, json)
Hash identifier: +XZLeMCcyONrRD27MLDEJSx0sIU5j1Q1FHetCicK3L8=
Subject key identifier: 17:C8:FA:98:F7:27:1A:2C:5B:41:46:D3:26:45:11:8F:B6:70:49:ED
Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Certificate serial: 0197B77CE1546AFA53F723502434B0FF5F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
Manifest number: 0AE4
Signing time: Sat 28 Jun 2025 17:01:44 +0000
Manifest this update: Sat 28 Jun 2025 17:01:44 +0000
Manifest next update: Sun 29 Jun 2025 17:01:44 +0000
Files and hashes: 1: 5O89Acll2BSQwsAU1cu5uSGZnA4.roa (hash: bQuSQoXZ0EYJdYaZW1OMXS0ZVjJxuMon+vONAFdoiT0=)
2: ruxDT4IchrfuYxZpHXHMYcQMNGw.crl (hash: RrHqwouAlzpwnA6P4ZnktJjp8DurtJ3htYUNWmWpSJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:e1:54:6a:fa:53:f7:23:50:24:34:b0:ff:5f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Validity
Not Before: Jun 28 17:01:44 2025 GMT
Not After : Jun 29 17:01:44 2025 GMT
Subject: CN=17c8fa98f7271a2c5b4146d32645118fb67049ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e5:97:69:4f:51:5a:b2:87:cd:64:29:64:dc:
e7:d7:c6:f7:13:f5:8c:b6:e3:34:61:1b:1f:b8:a4:
cd:d2:29:e5:64:db:64:85:32:48:2e:f0:f3:e2:f1:
39:e5:39:94:02:61:57:79:08:8c:5a:12:2b:94:fa:
fd:89:12:c1:58:f5:52:8d:9c:5d:0a:c4:e8:68:bc:
57:93:69:9a:db:8f:72:7c:f0:d2:a3:f0:41:df:78:
04:ef:8d:8a:be:53:3e:71:77:f7:53:fb:02:6a:02:
b5:30:a6:70:2e:f6:d3:5a:60:14:6c:4c:0a:06:df:
65:c8:9f:cb:76:e6:af:5f:2b:37:2d:5e:a9:9a:a4:
e6:5b:29:f2:f3:5b:be:15:f8:54:c4:28:84:70:38:
77:be:6c:a6:39:5a:15:af:f9:38:0f:1d:ba:e1:42:
0e:5c:31:ab:86:0a:55:e6:66:e6:08:9b:f4:e5:4b:
4d:74:5f:cd:3f:8d:2d:5f:74:50:a0:5f:a2:f7:6f:
d4:3f:0e:25:25:f5:d8:b8:be:a2:e3:b1:12:83:ea:
e6:bd:f3:53:28:0f:d8:db:58:8f:da:bf:ba:ce:32:
87:da:81:e0:2c:d0:5d:1e:2b:6f:3f:d0:d3:49:37:
3a:76:63:b4:a2:c6:9b:2f:fe:19:1d:d7:b9:95:fb:
56:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C8:FA:98:F7:27:1A:2C:5B:41:46:D3:26:45:11:8F:B6:70:49:ED
X509v3 Authority Key Identifier:
keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:3c:fc:0b:cd:b1:78:e3:71:f1:ae:db:c0:6e:dc:ba:e6:92:
ca:ec:2b:29:f8:7e:38:46:16:14:e7:d0:5e:19:92:61:00:f1:
cc:06:a8:a6:0c:de:9d:6e:bd:f6:35:2c:4c:ca:f6:9e:9f:7f:
a2:83:e2:c2:fe:d6:4a:bb:3d:83:5a:4c:54:1c:ac:42:04:39:
98:8d:36:c1:df:01:4a:0a:be:f2:91:92:9d:dc:f7:0c:1e:ba:
f0:95:12:f5:2c:ed:6f:dc:e0:7d:24:56:4b:b9:d0:7e:68:62:
48:0b:e5:72:c5:a6:65:3a:ad:a1:b6:2d:a5:e0:b8:c0:66:6e:
c3:34:55:c6:8c:91:ef:78:a3:76:64:73:df:bb:79:ff:2f:a3:
f3:4c:cc:6c:53:95:fe:b4:75:fd:af:34:91:b8:8a:63:ec:f9:
70:57:c4:97:fa:f7:44:32:50:77:7e:d4:9e:51:0c:cd:40:cb:
0a:7d:7b:20:3e:ef:00:e7:4c:9f:17:62:1a:20:8e:84:0b:64:
2a:8e:5c:49:b5:a4:83:23:26:c1:b8:ab:3a:35:33:bd:87:44:
f6:ed:7a:e5:63:49:d9:cf:56:4c:9a:20:ff:ab:6e:af:b7:79:
9a:10:7e:ad:53:3f:5b:8c:36:46:89:97:43:a2:0e:73:87:64:
51:e8:22:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fOFUavpT9yNQJDSw/19WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZWM0MzRmODIxYzg2YjdlZTYzMTY2OTFkNzFjYzYxYzQw
YzM0NmMwHhcNMjUwNjI4MTcwMTQ0WhcNMjUwNjI5MTcwMTQ0WjAzMTEwLwYDVQQD
EygxN2M4ZmE5OGY3MjcxYTJjNWI0MTQ2ZDMyNjQ1MTE4ZmI2NzA0OWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuWXaU9RWrKHzWQpZNzn18b3E/WM
tuM0YRsfuKTN0inlZNtkhTJILvDz4vE55TmUAmFXeQiMWhIrlPr9iRLBWPVSjZxd
CsToaLxXk2ma249yfPDSo/BB33gE742KvlM+cXf3U/sCagK1MKZwLvbTWmAUbEwK
Bt9lyJ/LduavXys3LV6pmqTmWyny81u+FfhUxCiEcDh3vmymOVoVr/k4Dx264UIO
XDGrhgpV5mbmCJv05UtNdF/NP40tX3RQoF+i92/UPw4lJfXYuL6i47ESg+rmvfNT
KA/Y21iP2r+6zjKH2oHgLNBdHitvP9DTSTc6dmO0osabL/4ZHde5lftWBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfI+pj3JxosW0FG0yZFEY+2cEntMB8GA1UdIwQY
MBaAFK7sQ0+CHIa37mMWaR1xzGHEDDRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnV4RFQ0SWNocmZ1WXhacEhYSE1ZY1FNTkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80YjA3OTAtNTc3OC00ZjYxLWEwZWUt
OTEwZTA4MTBjYTk0LzEvcnV4RFQ0SWNocmZ1WXhacEhYSE1ZY1FNTkd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny80YjA3OTAtNTc3OC00ZjYxLWEwZWUtOTEwZTA4MTBjYTk0
LzEvcnV4RFQ0SWNocmZ1WXhacEhYSE1ZY1FNTkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTz8C82x
eONx8a7bwG7cuuaSyuwrKfh+OEYWFOfQXhmSYQDxzAaopgzenW699jUsTMr2np9/
ooPiwv7WSrs9g1pMVBysQgQ5mI02wd8BSgq+8pGSndz3DB668JUS9Sztb9zgfSRW
S7nQfmhiSAvlcsWmZTqtobYtpeC4wGZuwzRVxoyR73ijdmRz37t5/y+j80zMbFOV
/rR1/a80kbiKY+z5cFfEl/r3RDJQd37UnlEMzUDLCn17ID7vAOdMnxdiGiCOhAtk
Ko5cSbWkgyMmwbirOjUzvYdE9u165WNJ2c9WTJog/6tur7d5mhB+rVM/W4w2RomX
Q6IOc4dkUegicQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:07 2025 by rpki-client