Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
File: ruxDT4IchrfuYxZpHXHMYcQMNGw.mft (raw, json)
Hash identifier: y9631HN5H3grPtbvoOZ5sqwJE+CUCiSdIh5sRx0vtxo=
Subject key identifier: 9E:75:E9:F5:94:10:86:18:FA:84:AF:9C:D9:DD:E7:C2:87:52:CE:FF
Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Certificate serial: 019A5376076012620EA1B54DFD06600E4F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
Manifest number: 0C3E
Signing time: Wed 05 Nov 2025 10:00:35 +0000
Manifest this update: Wed 05 Nov 2025 10:00:35 +0000
Manifest next update: Thu 06 Nov 2025 10:00:35 +0000
Files and hashes: 1: 5O89Acll2BSQwsAU1cu5uSGZnA4.roa (hash: bQuSQoXZ0EYJdYaZW1OMXS0ZVjJxuMon+vONAFdoiT0=)
2: ruxDT4IchrfuYxZpHXHMYcQMNGw.crl (hash: P/gAg0nm5fv1KHNATlpmTaJDp4CKdhsfKgjB61k5OHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:07:60:12:62:0e:a1:b5:4d:fd:06:60:0e:4f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Validity
Not Before: Nov 5 10:00:35 2025 GMT
Not After : Nov 6 10:00:35 2025 GMT
Subject: CN=9e75e9f594108618fa84af9cd9dde7c28752ceff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:21:5c:0d:24:61:79:4d:2c:30:19:76:c1:c0:
0a:4c:77:52:07:94:02:bb:ee:8e:5d:f9:fb:be:a3:
02:43:3a:2d:41:b9:e3:2f:c7:61:53:46:0c:20:5f:
22:6b:8f:53:72:26:63:d5:7a:d5:fc:ff:57:37:20:
f4:23:49:81:ad:9f:8b:42:93:97:a9:ad:00:f1:60:
fa:80:f1:35:d6:7c:5e:90:94:c7:38:84:93:7c:2b:
5c:e5:46:dd:f7:94:df:43:76:b5:38:17:9e:76:4b:
79:b2:ec:71:ad:4c:db:3f:3f:82:6b:dd:fb:52:0b:
f9:7c:f4:8a:f1:a5:fe:b9:d9:a5:80:33:96:d7:ce:
ce:25:00:0f:a3:d6:e0:e0:90:3d:64:36:87:aa:7d:
1a:d1:ca:d6:fc:2b:9a:6d:4d:64:1f:69:c9:aa:ec:
99:22:96:1d:31:17:88:28:fd:16:f5:4a:e0:8a:92:
57:62:f9:3f:5f:bf:f2:86:a3:9c:fc:3a:b2:95:46:
e6:77:59:32:0e:ae:64:fb:ee:b5:30:89:a8:35:e3:
34:ec:e2:88:2f:99:3b:4f:4b:af:69:be:aa:07:ac:
98:5a:f2:6a:3e:d9:a4:48:47:e4:ab:89:86:68:f6:
3a:20:2c:e9:7d:7a:10:5b:a8:15:16:55:0e:a8:67:
63:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:75:E9:F5:94:10:86:18:FA:84:AF:9C:D9:DD:E7:C2:87:52:CE:FF
X509v3 Authority Key Identifier:
keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b0:0b:0e:39:b5:78:5b:e6:57:c7:68:ff:59:0d:45:d2:af:
8d:8e:5d:08:5b:cb:87:cd:e5:00:c0:a5:c2:51:63:f6:32:02:
98:e9:d6:02:78:35:90:a7:e4:98:50:91:85:dc:a3:05:c1:ed:
29:da:c8:6b:06:2c:99:ea:a2:5b:40:ea:ae:5f:3b:71:a0:cc:
4d:44:88:c0:be:e2:97:08:a3:59:4a:e9:43:28:35:74:66:7f:
e0:84:01:99:59:3d:d5:72:20:15:3f:3e:4e:b9:48:d6:1b:f9:
27:28:50:3d:2e:2d:12:42:4e:f5:a1:35:11:35:07:19:a0:bf:
58:a9:3b:1f:33:38:f6:f3:fd:4d:ba:33:87:0d:e1:3f:1a:0c:
28:6e:33:a4:94:17:8e:c8:80:15:6c:55:9a:3f:51:4f:7f:37:
5e:72:23:09:dc:b7:97:9a:4f:9e:69:8c:ad:ef:89:d3:2f:9b:
4c:ad:39:86:b1:a5:c5:9a:8e:f1:b2:87:c9:a9:78:7a:47:af:
59:ad:6b:6a:20:bd:03:13:c1:b4:43:74:85:25:13:c9:3a:aa:
85:2f:8a:e2:03:7c:f8:b3:48:56:5c:d3:a4:ad:ec:87:70:65:
42:1a:a1:9d:16:02:33:1e:42:d8:5b:56:3a:32:08:0a:72:00:
fe:29:37:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:59:34 2025 by rpki-client