Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
File: rmrw1fOCidNMIbpnxMOXh6QqZp4.mft (raw, json)
Hash identifier: nmwmpFzDyUX8SeJzzNJkWM+pmwmegZ5N+20OpIJUx0k=
Subject key identifier: 93:D4:C6:13:53:70:C5:2D:2D:AA:09:78:05:55:30:FA:17:94:58:F9
Authority key identifier: AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
Certificate issuer: /CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Certificate serial: 019A51BE574CBBCA0BE8137CC94F26333A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
Manifest number: 170B
Signing time: Wed 05 Nov 2025 02:00:19 +0000
Manifest this update: Wed 05 Nov 2025 02:00:19 +0000
Manifest next update: Thu 06 Nov 2025 02:00:19 +0000
Files and hashes: 1: W8HdoS1T8uaMpM9YFeme5afjmm8.roa (hash: MVcxUXAqk+tB4gBwDZOl3zZvyfrQXKh2vGJmtjrVMqc=)
2: dC665gBaSCufZLjae0l6pAdLs6Q.roa (hash: kur7Pc6RtMGt0xkEhTapoaHBlvXxGfD2IjX+NyztpmY=)
3: rmrw1fOCidNMIbpnxMOXh6QqZp4.crl (hash: aQ4pcjT6xAGuk8c+hKHEeDrrutABsb2ytPiM79yyTfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:57:4c:bb:ca:0b:e8:13:7c:c9:4f:26:33:3a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Validity
Not Before: Nov 5 02:00:19 2025 GMT
Not After : Nov 6 02:00:19 2025 GMT
Subject: CN=93d4c6135370c52d2daa0978055530fa179458f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:85:0a:29:2a:3e:0d:a4:0e:38:e8:98:ae:
d9:bc:a7:a9:e8:9f:a6:8f:0e:14:6e:2e:02:00:1c:
0b:3c:77:25:71:d5:ff:39:09:77:e7:7e:4c:4a:ea:
cd:d6:0c:ac:73:61:77:65:a7:4e:15:5e:3f:f3:7f:
8e:7b:49:76:e9:73:83:8e:2f:5f:24:25:ee:5a:70:
d9:fe:72:19:55:ad:ee:67:bf:d3:a0:ec:3c:05:9b:
6d:14:86:a8:97:fc:7e:c9:eb:f6:87:5c:63:f7:55:
44:bf:8f:5c:71:8d:07:7c:71:5d:de:74:35:c7:3d:
bf:4c:dc:ce:83:e6:8f:dc:5c:59:30:a8:a5:c7:35:
77:7a:15:c9:2d:3d:bd:a3:99:e7:0f:a8:9c:26:82:
2b:f4:cf:be:da:8a:43:f3:82:c1:53:bd:a8:43:49:
1a:d9:82:e6:0d:fe:79:3f:a3:a8:79:b2:cd:cf:df:
c1:ac:e1:24:37:36:00:93:a1:80:2e:f1:67:66:3b:
77:c7:d7:69:f3:82:96:c8:e1:62:8b:62:bf:fa:17:
28:e1:a1:4b:af:49:21:0e:3a:c6:30:8c:07:7e:5d:
08:6f:af:df:82:02:35:0d:09:a9:49:6b:63:15:89:
da:53:b0:71:85:79:f9:cf:e5:13:fa:ef:32:b9:b7:
dc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D4:C6:13:53:70:C5:2D:2D:AA:09:78:05:55:30:FA:17:94:58:F9
X509v3 Authority Key Identifier:
keyid:AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8f:ea:b6:b3:64:b0:f6:e9:cc:32:9d:67:8d:44:ac:07:12:
ba:b5:1b:8b:ef:94:70:00:2d:12:bd:20:e2:61:d3:c3:b6:5c:
ff:51:77:fd:dc:56:0a:4f:33:e3:22:c7:0f:87:d6:bc:fb:33:
07:9a:a0:7e:93:38:43:90:e4:4f:d4:4a:fa:52:da:af:ed:61:
83:eb:32:85:65:51:02:a0:2b:52:88:ed:a7:90:0f:0c:8b:d4:
e6:6c:e0:43:72:c9:ec:a3:5a:d6:0e:a6:b3:54:88:96:60:8e:
9b:10:c8:05:1b:49:5a:e6:7f:48:b2:be:e4:d4:5c:f2:34:08:
d7:48:8d:3e:e7:82:45:82:ae:5b:bf:3e:38:f6:6c:da:33:eb:
fb:3e:17:38:ee:0c:72:8b:22:e1:e1:25:88:30:65:e8:a3:54:
d3:eb:c6:f1:c0:e1:4d:49:92:dc:2a:5a:25:84:b6:91:78:15:
f1:11:55:8e:6f:85:0c:84:b4:b9:a3:ca:f3:5e:9b:81:7c:2c:
1e:28:10:c2:eb:36:fa:af:90:b6:63:4f:20:12:e6:5d:7e:29:
64:fb:15:2b:96:9c:5f:d9:2c:0c:8b:2e:aa:cb:41:a5:a6:74:
69:b8:25:96:23:ce:72:e5:4c:55:6c:f2:cd:bd:29:80:28:6d:
c4:da:9c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:41:58 2025 by rpki-client