Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
File: rmRaywIXx0oP004XpT297lbwEeU.mft (raw, json)
Hash identifier: XNv3z3Lh2rqKBEFuf5B5b01F04pXhYhz8wwzw5HTDDE=
Subject key identifier: B3:98:96:F9:AC:CA:54:13:63:2F:77:22:43:12:14:F8:C3:D4:BD:62
Authority key identifier: AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
Certificate issuer: /CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Certificate serial: 019893A44F3BCD78595471DC67BBEB275FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
Manifest number: 101F
Signing time: Sun 10 Aug 2025 11:01:15 +0000
Manifest this update: Sun 10 Aug 2025 11:01:15 +0000
Manifest next update: Mon 11 Aug 2025 11:01:15 +0000
Files and hashes: 1: 9gPdnlu8pzrUW3Ji0sxUHZw4ZQ4.roa (hash: tZpT15jv998HP7FRsRavbx2dzEDkME8mtW6HPMKG8Zg=)
2: rmRaywIXx0oP004XpT297lbwEeU.crl (hash: H2DjjjPB5bCT6Ru0ubXFv1Ab/QLdV2SYni1sFdfbVhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:4f:3b:cd:78:59:54:71:dc:67:bb:eb:27:5f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Validity
Not Before: Aug 10 11:01:15 2025 GMT
Not After : Aug 11 11:01:15 2025 GMT
Subject: CN=b39896f9acca5413632f7722431214f8c3d4bd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cb:15:b3:5f:29:3c:12:ce:bc:cf:ff:17:b5:
4e:56:2e:36:d8:d9:11:24:23:47:9e:ed:61:6a:1e:
71:cb:3a:5e:96:e2:72:0f:49:17:80:9b:7b:94:95:
04:f5:da:47:ee:c1:c7:21:be:bd:bf:fb:d4:e8:b1:
d0:51:e3:68:b1:8a:35:54:3a:98:0e:1a:3d:b9:3f:
13:79:ef:ba:8e:c6:e8:ac:9d:b8:e3:ed:65:98:f0:
45:68:b9:e5:20:a3:d6:e0:7e:32:42:5f:f3:b7:fd:
76:03:92:0a:99:c5:b0:02:ca:09:4b:20:ef:05:6f:
ec:51:83:37:45:7b:f9:22:cd:3e:90:6d:92:d4:fd:
2d:27:c1:2c:c2:6c:ab:9b:84:db:dd:04:ae:a6:38:
6c:88:65:32:90:3c:63:4e:1e:fa:02:40:2f:c3:31:
2e:f7:82:d1:a3:16:d1:2d:73:11:8e:fd:a5:78:6a:
cb:5b:0e:53:05:28:ab:ff:d5:51:99:af:6c:11:20:
8a:40:ba:e5:c6:67:c3:79:b9:db:e9:f7:0e:16:ae:
92:fb:6b:58:47:a3:c4:fd:5a:e4:10:b6:d8:33:f9:
63:45:1e:d5:33:b5:43:73:b3:6a:18:5d:8d:53:5b:
56:02:d0:34:28:96:8e:07:80:0c:9a:88:dd:f2:38:
94:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:98:96:F9:AC:CA:54:13:63:2F:77:22:43:12:14:F8:C3:D4:BD:62
X509v3 Authority Key Identifier:
keyid:AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:71:14:6c:b8:dc:aa:1d:c6:b0:e4:35:b8:66:c7:09:4b:bf:
90:3a:33:ba:05:d2:89:15:f4:ef:78:6a:72:b1:d0:3b:4f:19:
0c:38:a9:bd:89:c8:da:46:9e:27:26:92:86:72:46:db:7b:e6:
e4:3d:4a:2b:b9:ab:cb:29:ea:b2:f4:7f:93:93:99:74:b2:62:
91:84:87:a8:1b:2a:56:46:26:f2:ec:47:48:2a:98:c1:bb:c1:
3c:ac:86:bb:45:36:a6:b5:ba:bb:26:43:b7:7a:b5:89:a0:a8:
03:4f:93:26:c7:4c:73:22:63:fa:df:43:6c:e0:e2:ec:a0:15:
89:fa:bb:80:c3:ed:3d:47:e3:b1:d4:bd:cd:a8:29:6b:4d:7a:
13:9c:77:de:03:36:66:4f:1c:a8:9a:89:04:81:4b:21:32:c6:
82:51:d1:b9:fd:bf:5a:70:da:7e:9d:5c:d4:48:f5:2a:a9:d5:
cc:55:e0:3d:d4:7e:da:fb:21:87:df:72:50:90:e3:f5:62:cc:
5e:c1:83:fe:7b:63:88:cc:12:76:d9:36:34:86:5e:78:29:a1:
7e:f2:fe:be:35:74:ff:2e:d5:cb:06:de:18:a4:ac:0e:49:8d:
b9:e3:6d:c4:69:51:fd:b5:e1:28:a6:10:40:e5:05:43:6a:b4:
2a:20:40:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:58:36 2025 by rpki-client