Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
File: rujl3-xoOuXxoOvg-5b6JWswR2I.mft (raw, json)
Hash identifier: 78wvOCJiSm4VB1KtwfIKZbK1Iq2nyK8uaz8rsQ3ZPJQ=
Subject key identifier: 46:07:26:FD:99:EB:04:4B:CB:23:36:59:84:2D:6D:91:00:54:D3:76
Authority key identifier: AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62
Certificate issuer: /CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762
Certificate serial: 019A4F620EFBBC7F5775045F41290A1887FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
Manifest number: 0FCA
Signing time: Tue 04 Nov 2025 15:00:17 +0000
Manifest this update: Tue 04 Nov 2025 15:00:17 +0000
Manifest next update: Wed 05 Nov 2025 15:00:17 +0000
Files and hashes: 1: I1hQSc_aI8nnk6g1vpjyTdXYNJI.roa (hash: h2IeKZyMJz7T7nR3ubhVngPyKXqYp/CJM8eA4imhJCk=)
2: rujl3-xoOuXxoOvg-5b6JWswR2I.crl (hash: gOY1vR4GvXJT/i4w1CiNeE7teNVBYcbey8jRcJ4jJOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:0e:fb:bc:7f:57:75:04:5f:41:29:0a:18:87:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee8e5dfec683ae5f1a0ebe0fb96fa256b304762
Validity
Not Before: Nov 4 15:00:17 2025 GMT
Not After : Nov 5 15:00:17 2025 GMT
Subject: CN=460726fd99eb044bcb233659842d6d910054d376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c9:49:1f:d3:74:48:24:ec:22:af:28:5c:4c:
a3:f0:1d:ba:72:be:de:36:d0:54:2f:56:e6:bd:24:
1e:69:2a:b4:83:0c:fc:1c:7a:81:65:78:28:ad:1b:
58:be:2c:c9:4c:02:30:a2:cf:b7:0a:fe:d4:f9:a2:
b2:ee:0e:a6:3c:41:4f:65:68:49:34:5f:79:81:31:
6d:44:f3:e7:59:aa:eb:ab:aa:c2:7f:07:3a:18:92:
29:6a:fd:3d:fb:24:58:74:6c:68:78:e5:db:da:8c:
fc:73:7c:fc:ae:ba:6b:d7:a7:4e:58:14:4d:00:52:
bc:b9:32:93:a4:2b:32:bf:de:a3:03:32:b4:ba:f1:
cf:c1:47:2b:d1:30:79:26:a3:29:39:b7:5e:6a:01:
14:55:70:97:60:6c:4c:1c:d4:4c:0a:d9:b6:25:ac:
ac:e8:c3:11:7d:3a:84:58:ed:cf:96:10:34:a4:5f:
6e:2f:2d:87:5c:28:78:51:de:25:04:c0:c9:05:2a:
67:98:08:c9:87:ec:2d:89:b8:60:af:2d:83:b9:79:
41:97:6f:91:38:04:4b:e8:17:65:b2:e6:01:4b:01:
4e:9b:9a:f9:11:78:53:bf:ba:d7:a7:4b:b9:8e:62:
1b:2f:3e:ce:2e:88:81:0f:18:3e:4e:95:40:e2:8b:
a5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:07:26:FD:99:EB:04:4B:CB:23:36:59:84:2D:6D:91:00:54:D3:76
X509v3 Authority Key Identifier:
keyid:AE:E8:E5:DF:EC:68:3A:E5:F1:A0:EB:E0:FB:96:FA:25:6B:30:47:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rujl3-xoOuXxoOvg-5b6JWswR2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/18b690-c5ae-4fb4-8bf8-63a0be6a8e5f/1/rujl3-xoOuXxoOvg-5b6JWswR2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:a5:4c:3d:d0:43:8d:04:eb:6e:7a:38:69:57:13:3d:50:b5:
44:b4:61:cf:23:e4:ee:6d:ca:da:12:47:75:c3:cc:b2:71:7d:
5d:5e:22:49:3a:11:95:c2:f0:8e:82:ab:35:cc:1c:73:e6:15:
65:d7:01:f0:40:04:40:f7:e9:85:40:9c:75:f4:5d:d6:d7:2d:
d6:e1:9f:75:1c:d7:ad:15:5e:6a:82:cb:1b:f5:1a:92:f7:53:
7d:b8:41:d7:73:1d:bc:2a:15:8d:9f:4f:14:5c:6f:e1:57:0e:
e2:ce:f7:c6:c6:21:c7:24:19:cc:fc:6e:33:04:53:fa:d3:c1:
88:7b:61:0d:73:c6:47:a1:d7:fc:26:95:9d:d9:3a:51:0d:f8:
79:f3:24:00:87:b7:f3:50:87:ec:0c:ba:9a:25:06:59:ad:44:
9e:1a:7e:9b:2a:0e:c2:b5:4b:c2:98:21:f0:d0:5b:44:18:e0:
dd:6d:6b:df:59:17:a4:0a:82:ba:c9:8d:f8:be:2c:29:ee:5a:
5c:ed:43:ee:6f:41:79:53:a9:e4:69:c2:ae:9c:32:eb:e2:0b:
d7:19:71:1d:d8:67:a2:a9:7c:b7:7f:b0:39:91:3c:21:c8:ba:
ae:1a:b5:21:13:7f:f3:44:3e:a1:a7:cb:50:b6:63:83:a2:61:
f7:c7:6a:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYg77vH9XdQRfQSkKGIf/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZThlNWRmZWM2ODNhZTVmMWEwZWJlMGZiOTZmYTI1NmIz
MDQ3NjIwHhcNMjUxMTA0MTUwMDE3WhcNMjUxMTA1MTUwMDE3WjAzMTEwLwYDVQQD
Eyg0NjA3MjZmZDk5ZWIwNDRiY2IyMzM2NTk4NDJkNmQ5MTAwNTRkMzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmslJH9N0SCTsIq8oXEyj8B26cr7e
NtBUL1bmvSQeaSq0gwz8HHqBZXgorRtYvizJTAIwos+3Cv7U+aKy7g6mPEFPZWhJ
NF95gTFtRPPnWarrq6rCfwc6GJIpav09+yRYdGxoeOXb2oz8c3z8rrpr16dOWBRN
AFK8uTKTpCsyv96jAzK0uvHPwUcr0TB5JqMpObdeagEUVXCXYGxMHNRMCtm2Jays
6MMRfTqEWO3PlhA0pF9uLy2HXCh4Ud4lBMDJBSpnmAjJh+wtibhgry2DuXlBl2+R
OARL6BdlsuYBSwFOm5r5EXhTv7rXp0u5jmIbLz7OLoiBDxg+TpVA4oulCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYHJv2Z6wRLyyM2WYQtbZEAVNN2MB8GA1UdIwQY
MBaAFK7o5d/saDrl8aDr4PuW+iVrMEdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnVqbDMteG9PdVh4b092Zy01YjZKV3N3UjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xOGI2OTAtYzVhZS00ZmI0LThiZjgt
NjNhMGJlNmE4ZTVmLzEvcnVqbDMteG9PdVh4b092Zy01YjZKV3N3UjJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8xOGI2OTAtYzVhZS00ZmI0LThiZjgtNjNhMGJlNmE4ZTVm
LzEvcnVqbDMteG9PdVh4b092Zy01YjZKV3N3UjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA36VMPdBD
jQTrbno4aVcTPVC1RLRhzyPk7m3K2hJHdcPMsnF9XV4iSToRlcLwjoKrNcwcc+YV
ZdcB8EAEQPfphUCcdfRd1tct1uGfdRzXrRVeaoLLG/UakvdTfbhB13MdvCoVjZ9P
FFxv4VcO4s73xsYhxyQZzPxuMwRT+tPBiHthDXPGR6HX/CaVndk6UQ34efMkAIe3
81CH7Ay6miUGWa1Enhp+myoOwrVLwpgh8NBbRBjg3W1r31kXpAqCusmN+L4sKe5a
XO1D7m9BeVOp5GnCrpwy6+IL1xlxHdhnoql8t3+wOZE8Ici6rhq1IRN/80Q+oafL
ULZjg6Jh98dqLQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:37 2025 by rpki-client