Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
File: rmRaywIXx0oP004XpT297lbwEeU.mft (raw, json)
Hash identifier: mwL5XaRSzBzi8TS1rmrse8GjptX6vPk6hFxIfYG8rlM=
Subject key identifier: 7D:50:AF:1D:F2:6C:99:4A:65:96:98:E8:C3:30:7B:7D:80:92:FA:6D
Authority key identifier: AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
Certificate issuer: /CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Certificate serial: 019783576CC96661972B2E84144274C59105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
Manifest number: 0F92
Signing time: Wed 18 Jun 2025 14:00:34 +0000
Manifest this update: Wed 18 Jun 2025 14:00:34 +0000
Manifest next update: Thu 19 Jun 2025 14:00:34 +0000
Files and hashes: 1: 9gPdnlu8pzrUW3Ji0sxUHZw4ZQ4.roa (hash: tZpT15jv998HP7FRsRavbx2dzEDkME8mtW6HPMKG8Zg=)
2: rmRaywIXx0oP004XpT297lbwEeU.crl (hash: 0K6cyU6MI7eECM7zr+5QDT27tBelxj2IIu3C/uNQQq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:57:6c:c9:66:61:97:2b:2e:84:14:42:74:c5:91:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Validity
Not Before: Jun 18 14:00:34 2025 GMT
Not After : Jun 19 14:00:34 2025 GMT
Subject: CN=7d50af1df26c994a659698e8c3307b7d8092fa6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dd:ee:f4:5a:18:ca:77:34:28:c2:4c:3e:ae:
06:63:3e:5d:5c:4f:18:6b:97:bb:d7:65:46:5e:30:
85:18:54:06:f3:d1:22:8b:11:b2:44:c2:5c:c2:04:
2d:8a:d7:08:9e:97:27:59:99:bd:79:5e:1a:54:16:
97:a3:b9:c9:5a:1d:8f:53:65:4d:e4:8d:51:c5:f6:
11:1a:07:b7:92:59:6e:11:b9:89:53:c7:6b:d7:f9:
ee:02:c5:a3:16:0e:d9:14:8c:81:f8:3b:c3:29:e7:
1e:14:26:d3:51:ce:4c:ba:58:1f:9a:1f:66:90:11:
94:56:c0:f6:cb:88:cc:6a:76:56:4b:c7:7d:08:8b:
a2:c8:19:cd:a8:0a:61:49:6e:c5:67:3d:bb:48:52:
84:c1:ea:11:61:50:db:6e:c9:d2:7d:39:ea:d0:23:
fb:02:6a:b3:d7:31:4b:35:6c:d6:3f:fc:0c:a7:f2:
4a:29:33:23:1b:89:7e:ce:42:3f:98:f6:24:14:fe:
c2:d3:1c:25:72:f0:9b:48:b8:48:3d:68:b1:7b:46:
ae:a8:b5:47:4c:a2:26:6f:01:e8:18:55:a0:bd:4e:
e9:d9:22:4c:37:55:74:b3:fb:8b:d5:27:c1:15:d4:
cc:19:d2:96:da:95:a2:53:db:95:43:02:1f:bf:f7:
e0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:50:AF:1D:F2:6C:99:4A:65:96:98:E8:C3:30:7B:7D:80:92:FA:6D
X509v3 Authority Key Identifier:
keyid:AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7f:00:b7:71:b6:fb:6b:49:b3:e5:c1:93:08:77:a4:fa:9e:
91:08:f8:b9:31:59:c6:5b:b1:43:60:dc:c6:f4:56:f5:b2:88:
fa:74:ae:0e:1e:ab:7d:86:e9:f1:8e:5b:4d:ec:25:4b:6a:4a:
49:8b:12:15:86:3e:31:7c:98:29:b6:31:15:b9:a7:96:84:ee:
c4:7a:0b:72:76:15:3f:04:80:4e:b6:db:e6:83:26:d3:4b:85:
c4:2b:d0:22:ab:21:8a:3b:ae:d9:be:b1:dd:4b:b6:ff:a6:30:
d6:12:a3:5b:c0:15:75:8e:27:67:5d:d3:59:03:8a:c7:3f:30:
fc:5d:f3:61:ca:ce:e8:2f:5e:e9:31:00:31:94:88:2c:bc:24:
3f:6d:32:31:10:b6:ff:16:06:0c:6b:cb:36:3e:fa:e6:62:59:
c3:7f:28:98:c9:81:37:13:18:3d:de:4a:22:c3:48:40:9c:e6:
e2:85:e3:0b:58:ec:68:38:48:69:48:61:3d:c7:7d:39:7f:53:
4e:17:b7:b4:a3:4b:39:46:36:82:a3:06:54:72:f5:8c:86:b2:
02:cb:c1:26:79:d0:60:70:4f:ee:fe:67:98:56:a5:3e:17:3b:
00:9d:a3:2b:18:08:12:58:a5:59:51:af:e8:70:c5:8d:31:f8:
f3:35:ef:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:35:44 2025 by rpki-client