Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
File: rmrw1fOCidNMIbpnxMOXh6QqZp4.mft (raw, json)
Hash identifier: fJOTvNBx754lZHbq9QsF/t8kuDj52hHER2JYN0yM12c=
Subject key identifier: 67:56:4D:66:81:92:9B:F1:43:08:92:0D:FD:90:49:F3:86:C2:97:6E
Authority key identifier: AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
Certificate issuer: /CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Certificate serial: 0197684DE96A89EDE04E52A3B594A7F8DF81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
Manifest number: 1589
Signing time: Fri 13 Jun 2025 08:00:25 +0000
Manifest this update: Fri 13 Jun 2025 08:00:25 +0000
Manifest next update: Sat 14 Jun 2025 08:00:25 +0000
Files and hashes: 1: W8HdoS1T8uaMpM9YFeme5afjmm8.roa (hash: MVcxUXAqk+tB4gBwDZOl3zZvyfrQXKh2vGJmtjrVMqc=)
2: dC665gBaSCufZLjae0l6pAdLs6Q.roa (hash: kur7Pc6RtMGt0xkEhTapoaHBlvXxGfD2IjX+NyztpmY=)
3: rmrw1fOCidNMIbpnxMOXh6QqZp4.crl (hash: VQ91UUIoX1LHi4XkJZgZOC8gHUiAvPk9xSShEW8MQwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:e9:6a:89:ed:e0:4e:52:a3:b5:94:a7:f8:df:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Validity
Not Before: Jun 13 08:00:25 2025 GMT
Not After : Jun 14 08:00:25 2025 GMT
Subject: CN=67564d6681929bf14308920dfd9049f386c2976e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e4:28:1d:7d:ff:2a:d3:27:47:81:7a:0f:25:
ab:b2:9a:73:98:41:15:80:c6:f4:19:e7:38:ab:29:
e1:a4:7d:fc:11:d6:4d:7c:2d:cb:2f:c2:9a:97:41:
ea:ca:ed:8d:89:fe:fc:7c:30:10:60:88:5d:a1:47:
d6:bd:de:75:64:5b:25:7b:ad:20:61:db:65:08:da:
ed:eb:ff:7f:92:f3:0e:58:17:4f:06:01:68:7b:17:
ef:88:39:1e:4c:10:5c:dc:5f:2a:fb:18:0d:91:ef:
40:ac:05:ac:b1:32:0b:0d:ee:55:6d:97:e4:69:b8:
b3:a2:17:d0:92:4a:4a:f3:0c:f1:84:9a:82:ee:ae:
d9:d1:ec:d6:4f:50:69:e1:8c:d9:f6:0a:e9:91:0d:
70:24:c1:86:64:5f:c9:20:a2:50:23:2a:d3:6c:dc:
50:4c:40:f4:05:f8:fc:14:5f:18:81:07:f0:24:2e:
0d:23:b4:72:5e:ec:41:2c:cc:19:27:40:0c:63:02:
06:5c:b2:98:1c:97:7b:d9:f0:1e:ff:0c:01:58:8a:
f0:cd:5f:8b:53:3d:69:c8:ec:f7:af:23:79:43:f6:
68:98:a4:0b:b2:92:d4:04:7f:6d:78:88:91:7e:f9:
94:b5:71:f9:e4:3f:9b:b3:ab:da:28:a5:fe:07:9c:
91:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:56:4D:66:81:92:9B:F1:43:08:92:0D:FD:90:49:F3:86:C2:97:6E
X509v3 Authority Key Identifier:
keyid:AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e2:24:7a:08:05:53:87:ae:d8:09:18:dd:fc:73:dd:d7:55:
30:6c:13:08:02:6f:cb:6b:b4:13:53:fb:90:ed:1c:68:02:cd:
c7:8c:05:47:b1:3f:ca:9c:a9:46:bb:12:6e:df:6f:18:50:db:
bc:83:2e:28:04:93:b8:ff:08:17:7a:68:97:af:8e:c7:86:bf:
68:c8:f7:d7:ee:d7:61:bf:5e:d0:87:71:e7:eb:f5:c9:78:59:
8a:a8:84:27:13:4a:f2:13:3e:d1:9e:fe:9f:36:a5:93:d7:af:
bc:95:4a:90:ae:29:1e:4c:61:7f:8c:21:7e:0c:ee:de:0c:51:
0c:43:88:99:a6:6c:30:00:bb:66:e2:d5:0a:7c:4d:45:ad:7f:
3a:09:28:72:af:04:7e:fa:e0:51:28:73:1d:52:15:6a:7b:cd:
a9:76:0f:d5:e3:90:9b:17:fe:06:65:1a:48:24:83:08:f5:6c:
88:a5:5e:9b:b5:23:3a:20:c2:55:5a:9d:c2:ac:47:52:1e:1b:
cc:98:f9:ec:be:f8:63:11:ef:a7:10:39:14:5f:54:be:e0:2d:
75:9c:a4:d0:06:fc:c8:cb:25:89:f0:07:8b:d8:c9:78:0c:ad:
30:dc:68:a2:8c:03:87:aa:65:39:2d:59:42:81:33:cd:ef:4a:
cb:a2:31:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoTelqie3gTlKjtZSn+N+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNmFmMGQ1ZjM4Mjg5ZDM0YzIxYmE2N2M0YzM5Nzg3YTQy
YTY2OWUwHhcNMjUwNjEzMDgwMDI1WhcNMjUwNjE0MDgwMDI1WjAzMTEwLwYDVQQD
Eyg2NzU2NGQ2NjgxOTI5YmYxNDMwODkyMGRmZDkwNDlmMzg2YzI5NzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeQoHX3/KtMnR4F6DyWrsppzmEEV
gMb0Gec4qynhpH38EdZNfC3LL8Kal0Hqyu2Nif78fDAQYIhdoUfWvd51ZFsle60g
YdtlCNrt6/9/kvMOWBdPBgFoexfviDkeTBBc3F8q+xgNke9ArAWssTILDe5VbZfk
abizohfQkkpK8wzxhJqC7q7Z0ezWT1Bp4YzZ9grpkQ1wJMGGZF/JIKJQIyrTbNxQ
TED0Bfj8FF8YgQfwJC4NI7RyXuxBLMwZJ0AMYwIGXLKYHJd72fAe/wwBWIrwzV+L
Uz1pyOz3ryN5Q/ZomKQLspLUBH9teIiRfvmUtXH55D+bs6vaKKX+B5yR7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdWTWaBkpvxQwiSDf2QSfOGwpduMB8GA1UdIwQY
MBaAFK5q8NXzgonTTCG6Z8TDl4ekKmaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm1ydzFmT0NpZE5NSWJwbnhNT1hoNlFxWnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kZWY1NTUtOTY1MS00ZTgxLTgyOGMt
N2E5NGRhN2Q5ZWUyLzEvcm1ydzFmT0NpZE5NSWJwbnhNT1hoNlFxWnA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9kZWY1NTUtOTY1MS00ZTgxLTgyOGMtN2E5NGRhN2Q5ZWUy
LzEvcm1ydzFmT0NpZE5NSWJwbnhNT1hoNlFxWnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOIkeggF
U4eu2AkY3fxz3ddVMGwTCAJvy2u0E1P7kO0caALNx4wFR7E/ypypRrsSbt9vGFDb
vIMuKASTuP8IF3pol6+Ox4a/aMj31+7XYb9e0Idx5+v1yXhZiqiEJxNK8hM+0Z7+
nzalk9evvJVKkK4pHkxhf4whfgzu3gxRDEOImaZsMAC7ZuLVCnxNRa1/Ogkocq8E
fvrgUShzHVIVanvNqXYP1eOQmxf+BmUaSCSDCPVsiKVem7UjOiDCVVqdwqxHUh4b
zJj57L74YxHvpxA5FF9UvuAtdZyk0Ab8yMslifAHi9jJeAytMNxooowDh6plOS1Z
QoEzze9Ky6IxBg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:11 2025 by rpki-client