Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
File: RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json)
Hash identifier: IIvPVhpVdEm9bXDExZnn/vrg15FYSIlSoigKBz0gbYs=
Subject key identifier: 05:B6:96:C8:71:2B:E4:B8:6F:64:BF:28:A9:FD:68:37:D4:1E:3B:55
Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799
Certificate serial: 019A4F62B060110D09581E8513A8CAB006FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
Manifest number: 14DC
Signing time: Tue 04 Nov 2025 15:00:58 +0000
Manifest this update: Tue 04 Nov 2025 15:00:58 +0000
Manifest next update: Wed 05 Nov 2025 15:00:58 +0000
Files and hashes: 1: 1-a4x5OOX4iisCDf6ed1yjE-GXUQ.roa (hash: sw8ry0bOHDndmxXW/2FyYZ7exmAZ4VvNy12eeZpqa3o=)
2: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: huor6x3ceL+ky+yqd0P1RyrZ7tWsHc7sGDE3jzZMRu4=)
3: UTTLqXMtJUxFPASsyV3j9mlbrsU.roa (hash: 2XJm8gYnzGZQLzDIfSf2GHQMXAHNk+qtN5YEcj0V9ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:b0:60:11:0d:09:58:1e:85:13:a8:ca:b0:06:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799
Validity
Not Before: Nov 4 15:00:58 2025 GMT
Not After : Nov 5 15:00:58 2025 GMT
Subject: CN=05b696c8712be4b86f64bf28a9fd6837d41e3b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:b6:8e:ad:08:74:c1:62:5c:2b:bb:f4:ce:
a3:b4:8b:13:ba:d5:dc:84:46:87:77:f5:79:e6:f3:
2e:3c:57:39:97:3a:5d:99:76:ee:ef:80:c5:68:aa:
5b:20:b4:68:e9:39:a7:84:bf:a5:d5:d9:a0:7f:c9:
d1:7b:f1:30:90:54:49:2b:c9:b4:0f:98:5a:db:9f:
5f:84:4f:27:6d:31:30:5e:e9:92:5a:6c:ff:b6:78:
84:e2:d3:80:8f:06:bb:d5:9e:cb:35:e0:56:28:dc:
bd:11:8f:8c:b5:de:69:be:2b:28:77:c3:2d:46:46:
c9:77:57:5a:65:92:46:21:70:73:6f:b7:2b:c9:31:
84:24:4f:17:f5:65:ab:3c:9c:c7:e7:0f:75:62:58:
d8:f7:83:6c:49:9e:38:86:cc:1f:c9:bd:d2:94:94:
6b:27:46:c1:09:24:54:e4:09:a7:8b:6a:d8:68:96:
6f:11:45:90:0c:7c:51:09:bd:f7:18:87:86:dc:f0:
3f:1d:9d:29:eb:4f:65:f5:09:d3:52:95:30:a0:44:
c9:dd:d9:e5:35:99:5a:c7:1e:a5:39:97:b4:09:ff:
90:ce:c3:c3:e3:3c:c5:49:6a:84:43:03:d6:62:d0:
b4:78:19:ce:2d:8e:23:a0:2a:a3:8f:c0:6c:03:0c:
77:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B6:96:C8:71:2B:E4:B8:6F:64:BF:28:A9:FD:68:37:D4:1E:3B:55
X509v3 Authority Key Identifier:
keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d1:cc:3c:a5:4e:1a:a2:d8:c9:e1:b1:5c:62:2b:ae:75:21:
3b:bb:14:2f:ae:87:e4:65:6d:e8:89:50:87:c6:f5:de:3d:3d:
58:83:93:44:c7:fe:43:61:9c:a3:50:5a:07:50:dd:12:ec:3d:
29:45:84:58:1b:ad:ce:a6:9b:4d:1e:34:9c:4c:a8:01:be:77:
1a:33:14:7c:e2:77:8d:5c:dd:3f:f4:ca:69:41:6b:2d:bd:05:
81:f1:6f:1c:2d:14:34:19:a5:1e:17:18:d6:ad:7f:f7:a8:6c:
26:1e:08:bb:a4:aa:8d:b9:c4:d7:71:a7:a1:b0:95:27:b9:9f:
05:fa:9e:4f:77:69:b7:77:e4:0e:95:42:a4:61:08:14:e6:17:
d0:af:d9:4c:8b:86:14:4f:87:2c:4a:15:9a:5b:fc:af:22:e8:
6a:5c:cf:9b:71:8f:17:ba:06:61:35:ea:47:dd:e7:51:3b:b7:
7f:aa:10:fe:fa:e6:34:99:42:ab:9c:8d:cc:9f:b1:31:b3:ea:
cc:e9:39:f1:63:e5:4a:5a:83:36:f0:76:4b:67:49:71:72:01:
1f:0f:bd:25:15:ae:28:f5:53:78:cf:59:be:92:57:b0:5d:75:
15:95:83:dd:7d:ca:d9:64:4c:44:3d:6f:da:92:34:ef:ec:28:
d2:ae:1b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:31:34 2025 by rpki-client