Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
File: RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json)
Hash identifier: AFRdTSbDG77WheyqCIcLtJfRqXu+yA9LSGf9VdFTcOM=
Subject key identifier: 2F:F9:F8:71:27:9F:2E:6A:71:AA:2E:ED:6C:1B:BC:E4:E1:96:4D:35
Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799
Certificate serial: 019874509BF1EAA76E6D64EE747C0199BEFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
Manifest number: 13E6
Signing time: Mon 04 Aug 2025 09:01:36 +0000
Manifest this update: Mon 04 Aug 2025 09:01:36 +0000
Manifest next update: Tue 05 Aug 2025 09:01:36 +0000
Files and hashes: 1: 1-a4x5OOX4iisCDf6ed1yjE-GXUQ.roa (hash: sw8ry0bOHDndmxXW/2FyYZ7exmAZ4VvNy12eeZpqa3o=)
2: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: UnbiuU4vGUj3TXkTUR2rdzzg2pw/MylRITXButz+2cQ=)
3: UTTLqXMtJUxFPASsyV3j9mlbrsU.roa (hash: 2XJm8gYnzGZQLzDIfSf2GHQMXAHNk+qtN5YEcj0V9ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:9b:f1:ea:a7:6e:6d:64:ee:74:7c:01:99:be:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799
Validity
Not Before: Aug 4 09:01:36 2025 GMT
Not After : Aug 5 09:01:36 2025 GMT
Subject: CN=2ff9f871279f2e6a71aa2eed6c1bbce4e1964d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:30:fc:7b:de:20:93:36:af:fb:29:9b:2e:
30:84:d8:ef:d1:05:a5:77:0a:fa:35:ea:ab:fb:8f:
b5:11:93:06:1b:6a:62:5a:eb:75:1a:20:4c:53:a3:
ef:37:6a:d2:19:31:a9:2b:90:f3:99:0c:f6:c3:4c:
15:2b:72:3e:0e:3f:99:93:3b:25:09:40:2d:b1:e1:
e3:a9:69:cf:fe:da:d7:3f:29:72:16:1c:d5:74:c5:
7d:da:fd:d0:90:1e:e9:26:5c:59:7c:c9:47:9d:ba:
28:33:0e:91:b8:7c:3b:dc:f2:0b:2d:a3:b5:d7:5b:
ab:e2:d0:95:80:90:b2:b4:fc:fa:71:13:03:8f:cf:
b5:2d:9e:3b:29:42:5f:9b:6f:4c:12:f3:da:6d:ee:
c9:e9:b5:dc:40:40:56:ae:6e:46:64:a8:e1:3c:5f:
17:6d:c3:35:f0:95:0a:f7:a2:bd:d9:c8:17:8e:79:
64:06:40:6a:91:3e:0b:fe:17:42:a7:73:38:01:f8:
db:1a:9f:a9:2a:28:ac:67:0f:91:81:8f:d9:91:07:
b3:91:68:29:9e:bf:a2:4d:6c:df:9b:d5:68:71:35:
f7:59:1f:a4:d8:35:bc:ec:39:3f:b8:cc:61:cc:e2:
ca:94:20:0b:aa:d3:3a:f9:cb:20:97:c5:80:df:b0:
0f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F9:F8:71:27:9F:2E:6A:71:AA:2E:ED:6C:1B:BC:E4:E1:96:4D:35
X509v3 Authority Key Identifier:
keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c4:db:da:4e:ec:9e:82:7a:62:31:e3:67:aa:a5:42:d8:74:
70:9f:0d:e1:16:30:4f:a7:a3:04:ad:db:32:1a:a4:4e:ed:11:
01:71:c3:42:6b:10:8b:96:a8:bb:e2:f3:06:b6:0e:ee:c1:f4:
1e:f3:65:b0:ba:8a:34:c3:d2:29:6c:25:ca:d0:25:fe:e5:6e:
60:a5:4a:56:36:46:e6:d5:e9:2c:72:ab:7d:fd:15:ad:c9:40:
84:fe:26:25:88:d6:70:52:49:7b:e5:ce:8b:a1:4f:67:2a:34:
ec:09:98:13:6a:15:d6:69:3b:18:fd:48:1f:a9:38:1b:99:a7:
49:fa:76:e1:28:c6:27:fb:7a:45:26:ab:4e:80:60:28:a4:42:
88:2b:fd:16:41:fd:4f:86:84:5c:b9:ee:cf:90:c1:d3:b6:97:
e6:47:34:54:65:42:02:6f:30:cb:99:2a:53:28:bc:d5:53:dd:
cc:b9:51:5d:82:d4:92:b5:bf:0d:2c:e2:10:db:7f:7c:1f:6c:
71:ef:bf:e4:42:ba:8e:93:da:18:a1:a3:ca:8b:6c:4f:b9:a1:
77:25:16:bb:e5:2f:dc:66:06:60:34:d5:41:a1:3c:ba:1c:19:
5d:aa:03:b6:9e:ad:df:54:13:b9:dd:27:94:51:68:83:a3:89:
dd:e7:e9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:45 2025 by rpki-client