
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
File: RNPMWRzro4YTDzyfdCZFi4iHwus.mft (raw, json)
Hash identifier: igsy/1zcYEAQfFSIsQcQHrfdmG9WE6AdYje+cMV9YSY=
Subject key identifier: BF:C2:A1:34:C9:B5:8A:6B:43:AF:8A:9E:74:B2:89:32:02:8E:02:C3
Authority key identifier: 44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
Certificate issuer: /CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Certificate serial: 019881676E1E6D5CBA30E9A8C76F9A71FF9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
Manifest number: 0648
Signing time: Wed 06 Aug 2025 22:01:35 +0000
Manifest this update: Wed 06 Aug 2025 22:01:35 +0000
Manifest next update: Thu 07 Aug 2025 22:01:35 +0000
Files and hashes: 1: 5_5ZxyaYymDkazwik4_YUJ_u6nk.roa (hash: 0ihJyb/8cvHev60hCuqr7j7mSBpvAI6EqaNQNOqgNHg=)
2: RNPMWRzro4YTDzyfdCZFi4iHwus.crl (hash: tNSQtUiWfGz7Ctqox5IcW4CaMrJu7ctIF+0NQQmWDsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:6e:1e:6d:5c:ba:30:e9:a8:c7:6f:9a:71:ff:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Validity
Not Before: Aug 6 22:01:35 2025 GMT
Not After : Aug 7 22:01:35 2025 GMT
Subject: CN=bfc2a134c9b58a6b43af8a9e74b28932028e02c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b5:d8:3b:db:60:24:b1:c7:a1:46:9a:01:49:
86:aa:92:84:9f:4b:47:24:a6:17:65:be:bf:a4:eb:
67:60:29:95:2d:5a:e5:61:88:0d:15:5c:9e:8b:3b:
f0:0d:62:c9:c9:53:6c:46:7e:b7:71:7a:e1:1d:1e:
0f:9b:3b:14:ed:b6:b3:d7:87:16:50:31:59:d9:b9:
b2:35:f4:eb:5f:0e:45:76:94:a0:32:24:9f:d0:27:
fb:a6:a1:00:cb:02:34:6d:01:96:fe:ea:cf:98:61:
06:b1:41:c2:04:8a:bb:b8:56:55:8e:af:01:c0:8b:
88:d4:5b:e1:08:02:be:66:cf:fd:2e:0f:e0:b8:ea:
0c:b6:16:4b:b9:06:91:7c:a1:a9:a4:5d:89:bc:f5:
0d:04:22:bd:35:0e:2e:9c:43:99:b5:48:11:f2:63:
a3:f3:d5:59:a3:50:c9:7f:a9:da:f6:a6:04:d0:40:
d8:49:4f:f4:0c:48:db:f6:41:68:c3:7b:0f:0b:9d:
f9:32:6f:aa:2b:f1:cb:6e:22:be:8b:bb:8c:5a:b2:
46:ab:18:a1:7c:98:a5:9b:9b:5d:50:ff:a5:6d:5d:
85:2a:88:c3:d9:68:97:b4:a4:f9:d8:ad:24:7a:ae:
f9:9e:04:28:8d:a9:27:ce:ef:7b:73:c2:c3:45:4f:
63:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C2:A1:34:C9:B5:8A:6B:43:AF:8A:9E:74:B2:89:32:02:8E:02:C3
X509v3 Authority Key Identifier:
keyid:44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:64:2e:38:25:ce:66:35:4f:05:7b:2a:b5:bb:42:3f:4d:b8:
bb:bd:01:10:79:a7:6b:73:d9:91:1e:f2:58:43:09:be:a0:de:
07:c3:45:42:7f:75:14:4a:0e:60:34:66:82:27:a0:a6:80:3b:
22:9d:cc:cb:cd:68:43:2a:3e:41:1e:a2:ec:c0:80:e5:85:27:
c5:fb:56:e5:60:7f:d1:f9:7b:8d:58:f6:75:a3:50:fe:04:d3:
0f:bd:70:d0:e4:d7:da:6a:e4:4f:19:2c:ce:86:a8:94:a4:47:
0e:b2:df:6d:f0:1b:4b:a6:81:57:21:04:37:d2:5a:b2:5a:90:
5f:87:a2:38:21:50:ed:68:d3:2d:c9:ad:c2:6a:6f:b8:a2:ee:
9a:90:53:13:e1:a0:77:30:ae:06:b2:e9:d0:d3:51:71:20:e7:
19:ad:49:72:6c:89:80:6d:ad:2f:09:48:68:8a:52:b9:4d:aa:
85:98:a2:31:93:0a:18:58:1b:2d:3e:42:80:c9:c5:94:45:32:
c7:86:ea:71:75:52:d3:41:00:07:71:d4:47:cd:ad:10:18:e3:
a9:64:5c:46:6b:28:a6:2d:ab:f1:08:45:2e:64:16:a6:57:8c:
83:30:d7:ae:1a:cc:55:5f:60:70:23:b4:0f:2a:ec:6d:1b:a3:
6b:20:0d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:13:30 2025 by rpki-client