
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
File: RMDyoqVgB-TEXMxx59oJKGEwWyA.mft (raw, json)
Hash identifier: ufQCKtWB14xGPGZ5vAn6JI7tcnuT/3jIfVmKpGPp6rU=
Subject key identifier: CF:75:86:38:86:AA:F3:79:54:3C:21:6E:A8:AF:9A:4A:1F:6D:FB:4E
Authority key identifier: 44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
Certificate issuer: /CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Certificate serial: 01987E2EDB446172001E997102918DEA23B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 07:00:56 +0000
Manifest this update: Wed 06 Aug 2025 07:00:56 +0000
Manifest next update: Thu 07 Aug 2025 07:00:56 +0000
Files and hashes: 1: AaeTZJ_Mx4pF3TF16wEEVAdeKg4.roa (hash: uC6UcXyt2Kmfls1QdacCrz5Tf6o/T5Y+fDQ00/99ycM=)
2: RMDyoqVgB-TEXMxx59oJKGEwWyA.crl (hash: lRDciKKQRd3uwYdvzuJn3jgrOK5GpFZeDn2ItHqymk0=)
3: j-Ifej8p6sYfHH1KeQ_QH-keweY.roa (hash: iVB6o7qwOuA1Lj9sG4cTIYUNVhckFRweng10RlAwHI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:db:44:61:72:00:1e:99:71:02:91:8d:ea:23:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Validity
Not Before: Aug 6 07:00:56 2025 GMT
Not After : Aug 7 07:00:56 2025 GMT
Subject: CN=cf75863886aaf379543c216ea8af9a4a1f6dfb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:69:07:86:f3:d7:9c:5e:ce:ab:7f:b5:a0:30:
a6:f7:fb:9f:a2:db:68:b9:c8:e6:ca:2f:b6:3f:de:
e8:ca:67:7a:3b:b2:76:0d:0d:c8:50:0c:c8:e5:19:
b9:b1:94:de:72:65:7e:ee:3d:35:73:af:72:7c:82:
cc:af:28:47:fa:1e:c5:c6:60:ae:68:0a:c9:55:eb:
e9:a3:15:88:f1:ad:94:34:0c:45:5e:af:4a:73:35:
15:86:e0:db:c2:ae:38:df:51:9d:3d:e4:4f:5b:26:
04:15:81:24:83:03:7b:07:ac:e5:5e:2b:b4:00:3c:
06:94:ed:ab:6a:a1:6a:59:bc:05:61:b2:10:ba:95:
94:04:0b:d6:ee:10:d8:8d:92:e1:55:9c:f5:e2:2b:
b1:3b:67:b7:74:6f:ba:35:ea:e7:92:ca:3f:9a:fe:
be:20:9f:69:11:6d:61:c9:38:be:c0:b0:8a:fc:c8:
43:0b:ff:7a:8e:20:80:3d:ac:b7:e7:61:87:6d:ec:
c7:ef:f4:a4:eb:90:1e:b0:36:c6:05:0d:2a:55:4f:
8a:d4:1c:69:83:b1:5d:8a:ce:ac:52:70:d0:34:c2:
f2:42:45:3b:05:b6:b7:19:d7:b0:24:63:42:74:b2:
72:9d:21:98:cc:ef:d1:e8:a3:f1:6f:bb:7d:8c:c3:
b8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:75:86:38:86:AA:F3:79:54:3C:21:6E:A8:AF:9A:4A:1F:6D:FB:4E
X509v3 Authority Key Identifier:
keyid:44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:82:c1:f7:4f:f9:71:cc:ad:8d:47:18:6e:d2:4b:68:46:f0:
99:1d:d7:41:30:5c:21:1e:20:13:22:a7:7b:13:6c:6f:49:ed:
0c:72:b0:be:7e:04:83:16:70:85:e1:75:f2:a9:d8:74:85:80:
e4:51:59:c4:cf:fe:cf:cc:d1:4a:bd:2e:8a:dc:83:90:d7:87:
15:ac:ac:3c:05:5c:2d:ea:53:e4:9a:d3:15:0e:6e:b5:59:14:
c9:73:9d:e5:91:21:36:f0:80:9c:92:51:58:c1:d0:8c:3d:4d:
9c:ef:ac:c2:b9:be:34:11:f4:77:78:e4:62:c2:64:7b:8a:ae:
23:ab:02:90:45:cd:80:55:f7:5d:09:b4:78:17:d7:f2:e7:0d:
30:a8:be:b2:0e:a4:47:3a:73:ab:a1:8a:c5:ed:0f:17:ae:f6:
72:1b:d3:d0:df:c6:ff:5c:fe:66:98:a3:43:10:5e:ed:f9:0f:
21:4e:7f:2b:09:03:19:e6:3c:2e:da:d3:ef:6f:c5:fd:f2:b0:
3f:31:87:f9:62:c6:57:08:d4:5d:e7:b3:28:24:c0:14:10:7b:
21:55:c6:3a:a0:84:b2:92:a1:aa:34:cc:84:72:12:8f:c9:74:
a8:78:83:a2:4f:87:09:29:07:90:f6:84:3d:a7:e0:b1:66:47:
fa:f4:53:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+LttEYXIAHplxApGN6iO4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YzBmMmEyYTU2MDA3ZTRjNDVjY2M3MWU3ZGEwOTI4NjEz
MDViMjAwHhcNMjUwODA2MDcwMDU2WhcNMjUwODA3MDcwMDU2WjAzMTEwLwYDVQQD
EyhjZjc1ODYzODg2YWFmMzc5NTQzYzIxNmVhOGFmOWE0YTFmNmRmYjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGkHhvPXnF7Oq3+1oDCm9/ufotto
ucjmyi+2P97oymd6O7J2DQ3IUAzI5Rm5sZTecmV+7j01c69yfILMryhH+h7FxmCu
aArJVevpoxWI8a2UNAxFXq9KczUVhuDbwq4431GdPeRPWyYEFYEkgwN7B6zlXiu0
ADwGlO2raqFqWbwFYbIQupWUBAvW7hDYjZLhVZz14iuxO2e3dG+6Nernkso/mv6+
IJ9pEW1hyTi+wLCK/MhDC/96jiCAPay352GHbezH7/Sk65AesDbGBQ0qVU+K1Bxp
g7Fdis6sUnDQNMLyQkU7Bba3GdewJGNCdLJynSGYzO/R6KPxb7t9jMO4gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM91hjiGqvN5VDwhbqivmkofbftOMB8GA1UdIwQY
MBaAFETA8qKlYAfkxFzMcefaCShhMFsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk1EeW9xVmdCLVRFWE14eDU5b0pLR0V3V3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9iODA1OGUtNGViYS00Y2M0LThjMWQt
OWM4NGYyZmRkOGYwLzEvUk1EeW9xVmdCLVRFWE14eDU5b0pLR0V3V3lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9iODA1OGUtNGViYS00Y2M0LThjMWQtOWM4NGYyZmRkOGYw
LzEvUk1EeW9xVmdCLVRFWE14eDU5b0pLR0V3V3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYLB90/5
ccytjUcYbtJLaEbwmR3XQTBcIR4gEyKnexNsb0ntDHKwvn4EgxZwheF18qnYdIWA
5FFZxM/+z8zRSr0uityDkNeHFaysPAVcLepT5JrTFQ5utVkUyXOd5ZEhNvCAnJJR
WMHQjD1NnO+swrm+NBH0d3jkYsJke4quI6sCkEXNgFX3XQm0eBfX8ucNMKi+sg6k
Rzpzq6GKxe0PF672chvT0N/G/1z+ZpijQxBe7fkPIU5/KwkDGeY8LtrT72/F/fKw
PzGH+WLGVwjUXeezKCTAFBB7IVXGOqCEspKhqjTMhHISj8l0qHiDok+HCSkHkPaE
PafgsWZH+vRTfA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:41:24 2025 by rpki-client