Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
File: rujl3-xoOuXxoOvg-5b6JWswR2I.mft (raw, json)
Hash identifier: ip/KTLnewAWdATF7XTvF2eyQsTXneQjLRlx/tHvI1lc=
Subject key identifier: F4:D5:9D:D9:52:04:35:80:0D:EC:FB:2E:48:86:9A:CA:F4:A9:19:E3
Authority key identifier: AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62
Certificate issuer: /CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762
Certificate serial: 0199FC583CA1442FF3A64B5067CAAFF757B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
Manifest number: 0F9F
Signing time: Sun 19 Oct 2025 12:01:05 +0000
Manifest this update: Sun 19 Oct 2025 12:01:05 +0000
Manifest next update: Mon 20 Oct 2025 12:01:05 +0000
Files and hashes: 1: I1hQSc_aI8nnk6g1vpjyTdXYNJI.roa (hash: h2IeKZyMJz7T7nR3ubhVngPyKXqYp/CJM8eA4imhJCk=)
2: rujl3-xoOuXxoOvg-5b6JWswR2I.crl (hash: G4ebSqc4EM+g1xrkmLQ2VgKdgSm4nS6eAxFxdS/dQPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:3c:a1:44:2f:f3:a6:4b:50:67:ca:af:f7:57:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762
Validity
Not Before: Oct 19 12:01:05 2025 GMT
Not After : Oct 20 12:01:05 2025 GMT
Subject: CN=f4d59dd9520435800decfb2e48869acaf4a919e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:37:f9:28:f6:6e:64:12:9e:97:ad:31:92:
d1:b4:e2:49:17:9b:16:d3:d8:19:12:58:4c:a1:e8:
e3:0e:69:40:3a:41:d8:7d:f7:94:32:c7:47:ec:9a:
da:b5:54:e1:a6:af:43:29:42:bc:f3:00:a3:af:49:
1e:85:4b:d2:9d:05:6c:21:6b:fd:52:82:28:44:19:
fe:9f:a9:b6:a1:26:ec:6c:71:9a:e0:9b:05:2b:d7:
22:3c:aa:02:02:d3:18:e4:51:6c:3d:4d:e5:6b:ce:
1d:ae:b2:cb:a1:f6:e1:97:01:cf:f5:cf:3a:cc:21:
2b:5d:d2:cd:96:ae:88:cc:c8:03:fe:5a:8e:e5:9a:
ab:fd:6e:36:95:a2:9f:ec:d5:b1:d7:32:50:0c:5f:
d1:73:12:c6:d5:33:57:f2:dd:f3:75:c3:88:68:95:
d9:f1:2f:9a:7c:7b:06:c6:29:63:1f:00:0f:6f:d4:
5b:55:fd:04:f4:eb:fd:2b:7d:71:d7:32:2d:49:82:
97:18:e3:bf:26:96:07:cb:fa:b1:f9:5c:3d:78:a4:
f5:76:1d:c9:d3:2e:af:38:3a:5f:3b:ec:77:d8:32:
1c:b4:5d:1f:cf:36:b6:72:1d:fa:e7:1f:fc:bc:22:
71:3f:0c:2d:2c:71:14:44:db:c8:cb:5e:4c:b5:07:
ba:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D5:9D:D9:52:04:35:80:0D:EC:FB:2E:48:86:9A:CA:F4:A9:19:E3
X509v3 Authority Key Identifier:
keyid:AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c8:42:c5:1f:d2:ad:cf:8b:ad:6c:f3:24:59:18:ad:e7:17:
c7:1e:b3:01:2b:f1:e6:2f:a5:36:e9:b3:e2:dc:9c:75:55:9b:
ae:67:84:94:5c:2f:fa:49:00:b4:6f:d7:f5:fc:f0:f6:4d:47:
66:56:17:16:21:1d:27:1b:07:b7:73:f7:d7:1b:eb:d2:f9:65:
94:2e:0d:08:51:04:33:b3:c5:51:74:eb:b0:37:85:52:a2:d0:
93:18:76:59:b1:a4:c9:28:95:05:ae:d2:22:0a:a2:c3:16:27:
02:c0:e1:52:d2:53:3e:6f:cd:18:5c:da:ce:44:38:b8:41:83:
f3:f9:47:8f:66:3b:ef:ab:e7:a3:91:5d:e1:57:df:46:24:b4:
70:7a:f6:77:d9:a8:0e:b4:c8:37:45:ed:04:be:d2:8a:6d:c3:
a5:0a:f4:38:11:ab:e8:9c:04:74:0b:a5:7a:b7:d9:e4:ea:59:
30:75:f0:64:fa:45:15:6b:6a:66:7d:38:55:35:5d:13:f9:c7:
48:69:69:21:df:67:14:26:e7:af:9a:30:f1:95:c6:bb:bf:d9:
e7:b3:eb:d1:62:f1:30:08:37:c8:3f:b0:6f:ec:8c:5f:bf:97:
71:3d:9c:0c:af:4a:c7:bb:93:9c:2d:fa:28:ac:17:dd:4a:64:
3e:bb:1f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:26 2025 by rpki-client