Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
File: RmI6xd-e7899JPMXx7aUKX5PNio.mft (raw, json)
Hash identifier: QMAKgClyDZP4mS16yIImA/cWHPeRpxj3iMxsXTeSRpU=
Subject key identifier: 9E:1D:12:A1:CC:96:F5:D1:56:0A:98:3C:72:45:81:2B:7C:0A:DC:49
Authority key identifier: 46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A
Certificate issuer: /CN=46623ac5df9eefcf7d24f317c7b694297e4f362a
Certificate serial: 019A582E8B595DC78939DDBA1C48CC8B94AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
Manifest number: 07F9
Signing time: Thu 06 Nov 2025 08:00:36 +0000
Manifest this update: Thu 06 Nov 2025 08:00:36 +0000
Manifest next update: Fri 07 Nov 2025 08:00:36 +0000
Files and hashes: 1: RmI6xd-e7899JPMXx7aUKX5PNio.crl (hash: FiQ5szP70iuAn1Ji+w2tVuIRrWT4EXhH2SHXULXoraM=)
2: nCIxCjPPY6DWPKx_WJ_D213f1h8.roa (hash: TAjRe+1L1yReCVm9dO/sWTs7kJtd/3RFn58xjlrbP+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 06:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:58:2e:8b:59:5d:c7:89:39:dd:ba:1c:48:cc:8b:94:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46623ac5df9eefcf7d24f317c7b694297e4f362a
Validity
Not Before: Nov 6 08:00:36 2025 GMT
Not After : Nov 7 08:00:36 2025 GMT
Subject: CN=9e1d12a1cc96f5d1560a983c7245812b7c0adc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:87:f6:a0:db:30:73:92:eb:d6:a6:92:95:2a:
42:f2:e1:d9:e1:00:24:46:e2:96:9b:78:e0:d6:55:
1c:65:f4:aa:cc:5e:fa:30:1f:db:fd:80:54:c2:86:
a0:76:8c:c1:18:f9:60:28:53:9c:30:56:ac:51:1c:
1f:be:64:6a:71:f1:93:49:bd:87:4b:d6:41:43:c0:
27:ab:0d:be:be:3e:f0:d5:cf:ad:83:0a:82:c0:93:
89:9d:1f:54:b8:c6:4f:66:a8:8d:f2:58:63:c5:50:
dc:05:95:fc:bf:a9:07:1f:ab:0d:2a:ba:88:71:6e:
48:09:77:45:20:03:98:f1:af:7a:48:3d:38:65:1d:
4a:bc:0b:59:8c:7a:21:91:45:42:6b:c9:89:4b:97:
ed:49:43:b8:03:db:11:d4:89:12:26:e4:fb:27:26:
c6:60:6a:93:1e:55:db:6c:c9:81:b9:9e:f1:6a:66:
f8:d2:22:89:51:8f:cc:b4:e1:44:97:e2:4c:f5:9b:
6d:21:7b:76:f0:e5:2a:0b:db:c6:f0:19:e3:47:38:
c7:2b:27:39:7d:e7:a8:a1:a1:4a:1a:75:fd:3a:d6:
b4:c1:69:02:73:47:e0:88:47:6e:a0:e8:87:9d:b9:
19:43:ad:68:3f:ca:2b:00:ce:79:36:42:28:b7:b8:
0d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1D:12:A1:CC:96:F5:D1:56:0A:98:3C:72:45:81:2B:7C:0A:DC:49
X509v3 Authority Key Identifier:
keyid:46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c6:6e:d3:42:7d:96:93:1b:9f:88:75:29:49:d5:04:fe:25:
80:e5:db:60:32:a2:1a:11:5e:ca:07:54:7d:7b:55:88:97:f5:
4a:ad:48:30:58:11:8b:7c:d9:8d:a7:81:75:ed:10:6f:b1:91:
12:f7:44:d4:81:30:e3:a4:94:ec:15:cc:20:0f:fc:3f:31:58:
a5:48:e4:0e:f2:a4:7c:36:3e:29:9d:d7:4f:86:70:a1:f3:5a:
be:99:e7:60:e6:b3:a9:52:a5:b4:27:71:3c:c7:5f:18:78:90:
f7:7d:04:3b:28:e8:1f:99:1b:c1:12:26:c5:21:72:ff:80:8b:
4d:83:b0:e1:65:a3:7c:d2:ab:3c:e7:da:0a:bb:52:f7:62:7c:
ba:1e:9c:d3:28:26:51:4e:84:6e:76:23:ac:f0:a9:b0:d1:dd:
8b:81:84:86:09:b6:17:51:0a:1d:56:bd:b6:16:82:34:d3:7b:
c1:d3:59:c7:a1:d5:b0:43:f5:7e:bd:dd:e5:ab:bd:4d:bd:82:
f0:ce:e1:55:da:c8:20:cc:62:35:17:77:9a:a6:55:81:dc:7a:
f4:30:28:78:85:64:3d:02:3a:b6:2e:50:63:5e:e5:93:70:51:
b9:23:e2:5b:a9:82:9b:6e:3b:dc:e1:4b:61:69:e3:e2:89:48:
6e:2d:c3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 12:31:17 2025 by rpki-client