Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
File: rmrw1fOCidNMIbpnxMOXh6QqZp4.mft (raw, json)
Hash identifier: gXygiXHv/PxVzTejmcmsTppFb5+t5TUrRBCQrz+NAfI=
Subject key identifier: FC:E2:31:61:CC:26:85:F9:10:30:30:CC:EE:D2:67:93:F2:1F:12:FA
Authority key identifier: AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
Certificate issuer: /CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Certificate serial: 019872CF4CC83196906ECD016B07E270DB5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
Manifest number: 1613
Signing time: Mon 04 Aug 2025 02:00:44 +0000
Manifest this update: Mon 04 Aug 2025 02:00:44 +0000
Manifest next update: Tue 05 Aug 2025 02:00:44 +0000
Files and hashes: 1: W8HdoS1T8uaMpM9YFeme5afjmm8.roa (hash: MVcxUXAqk+tB4gBwDZOl3zZvyfrQXKh2vGJmtjrVMqc=)
2: dC665gBaSCufZLjae0l6pAdLs6Q.roa (hash: kur7Pc6RtMGt0xkEhTapoaHBlvXxGfD2IjX+NyztpmY=)
3: rmrw1fOCidNMIbpnxMOXh6QqZp4.crl (hash: FGyHnaA+Cgj/4kaJJ/WKCnAJfs58ApCdYlaflNIPTis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:4c:c8:31:96:90:6e:cd:01:6b:07:e2:70:db:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Validity
Not Before: Aug 4 02:00:44 2025 GMT
Not After : Aug 5 02:00:44 2025 GMT
Subject: CN=fce23161cc2685f9103030cceed26793f21f12fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ac:52:ad:5f:64:79:13:b2:e4:e2:cd:e0:d9:
40:45:9e:5b:d6:bc:b3:b3:a6:1d:27:2e:ea:cc:a1:
17:95:bf:c9:23:2d:39:27:5c:07:65:04:91:33:8e:
4a:e8:8d:ab:96:66:dc:74:1c:ed:e2:00:ef:73:76:
0d:b1:71:d1:8b:9a:4a:3f:05:c4:01:58:bb:a7:c1:
28:7e:bf:eb:f8:22:6d:23:39:f0:47:a0:21:c0:8f:
0f:95:4e:46:28:6d:72:83:8c:a5:cd:07:50:e8:ac:
4b:58:66:33:67:96:43:57:82:f5:54:09:db:38:a9:
c9:a1:88:b9:72:6f:5e:dc:eb:c8:e5:51:66:9f:01:
04:46:d2:f0:63:c3:b6:20:d9:37:79:ef:6c:c1:c4:
c6:41:f5:09:dd:21:85:4b:38:cd:75:f9:af:5c:6a:
f4:e6:72:d5:9d:14:72:67:7f:37:7c:6c:96:86:03:
98:11:d7:cb:99:63:ad:98:b3:ca:05:fb:fe:e9:cc:
64:27:62:d0:cd:7f:72:c5:29:c7:c8:d1:21:23:53:
44:f6:e4:b5:cb:3b:d0:b9:1b:55:1d:a1:ae:63:6e:
e4:f5:54:99:2d:57:3d:d9:a8:1a:5e:62:4a:78:86:
c6:8f:b5:34:9d:a4:2f:7b:24:70:cd:c4:dc:fa:1e:
de:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E2:31:61:CC:26:85:F9:10:30:30:CC:EE:D2:67:93:F2:1F:12:FA
X509v3 Authority Key Identifier:
keyid:AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:bf:c0:ff:1c:9f:f5:3f:e9:71:bd:db:e7:ba:5d:dc:3e:fd:
20:34:36:86:65:50:53:9b:49:3d:62:80:0a:6d:21:2d:dc:93:
2d:4d:2e:03:a7:bd:5c:bc:99:35:58:c5:56:ca:df:e8:a5:15:
18:79:1f:c7:cb:c6:46:47:6c:39:3d:dc:31:84:42:7c:8e:23:
81:5b:e9:3e:83:50:ce:35:a9:60:19:0e:68:f3:49:fe:86:75:
36:e5:0d:8a:87:fa:95:1f:44:b4:b3:04:dc:6f:c7:67:b7:df:
92:42:22:7d:e3:9e:dc:ee:ea:b4:b4:04:04:db:aa:fe:15:4f:
76:ac:f4:ec:2a:a4:15:69:97:8b:30:ce:d0:cf:19:71:6b:68:
9c:6b:cb:4d:7f:86:4c:10:52:c7:91:b4:a1:72:54:98:09:21:
86:32:b3:9d:3c:3d:b7:4e:13:84:16:08:9f:98:dc:4f:f7:35:
34:61:e5:79:ca:68:89:41:9a:68:c9:45:8d:dd:49:70:c2:05:
5d:af:4d:ab:ae:a3:58:7f:96:8c:3c:b5:7b:1f:03:52:44:c9:
4b:6b:d4:8a:2d:5c:9c:a3:2e:f7:a6:86:e6:d3:d3:39:c4:e6:
39:9b:d3:a4:f9:0c:50:8b:f0:b5:20:9c:19:d8:75:35:e2:0d:
de:75:e5:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz0zIMZaQbs0BawficNtbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNmFmMGQ1ZjM4Mjg5ZDM0YzIxYmE2N2M0YzM5Nzg3YTQy
YTY2OWUwHhcNMjUwODA0MDIwMDQ0WhcNMjUwODA1MDIwMDQ0WjAzMTEwLwYDVQQD
EyhmY2UyMzE2MWNjMjY4NWY5MTAzMDMwY2NlZWQyNjc5M2YyMWYxMmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1axSrV9keROy5OLN4NlARZ5b1ryz
s6YdJy7qzKEXlb/JIy05J1wHZQSRM45K6I2rlmbcdBzt4gDvc3YNsXHRi5pKPwXE
AVi7p8Eofr/r+CJtIznwR6AhwI8PlU5GKG1yg4ylzQdQ6KxLWGYzZ5ZDV4L1VAnb
OKnJoYi5cm9e3OvI5VFmnwEERtLwY8O2INk3ee9swcTGQfUJ3SGFSzjNdfmvXGr0
5nLVnRRyZ383fGyWhgOYEdfLmWOtmLPKBfv+6cxkJ2LQzX9yxSnHyNEhI1NE9uS1
yzvQuRtVHaGuY27k9VSZLVc92agaXmJKeIbGj7U0naQveyRwzcTc+h7eSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPziMWHMJoX5EDAwzO7SZ5PyHxL6MB8GA1UdIwQY
MBaAFK5q8NXzgonTTCG6Z8TDl4ekKmaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm1ydzFmT0NpZE5NSWJwbnhNT1hoNlFxWnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kZWY1NTUtOTY1MS00ZTgxLTgyOGMt
N2E5NGRhN2Q5ZWUyLzEvcm1ydzFmT0NpZE5NSWJwbnhNT1hoNlFxWnA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9kZWY1NTUtOTY1MS00ZTgxLTgyOGMtN2E5NGRhN2Q5ZWUy
LzEvcm1ydzFmT0NpZE5NSWJwbnhNT1hoNlFxWnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOL/A/xyf
9T/pcb3b57pd3D79IDQ2hmVQU5tJPWKACm0hLdyTLU0uA6e9XLyZNVjFVsrf6KUV
GHkfx8vGRkdsOT3cMYRCfI4jgVvpPoNQzjWpYBkOaPNJ/oZ1NuUNiof6lR9EtLME
3G/HZ7ffkkIifeOe3O7qtLQEBNuq/hVPdqz07CqkFWmXizDO0M8ZcWtonGvLTX+G
TBBSx5G0oXJUmAkhhjKznTw9t04ThBYIn5jcT/c1NGHlecpoiUGaaMlFjd1JcMIF
Xa9Nq66jWH+WjDy1ex8DUkTJS2vUii1cnKMu96aG5tPTOcTmOZvTpPkMUIvwtSCc
Gdh1NeIN3nXlAA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:07 2025 by rpki-client