Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
File: RPMwC82ETWB1L-Xfst4pmWbpuPY.mft (raw, json)
Hash identifier: DdORl2pFYzemXQ1F43S7Pado0LzSiACmkYGCL7QX2ng=
Subject key identifier: CB:7A:3A:70:60:4F:6A:39:77:5D:19:5B:9D:C5:08:79:30:1A:FB:C6
Authority key identifier: 44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
Certificate issuer: /CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Certificate serial: 019A50E2D8D8BEEB1243440FCD172B5CF5C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
Manifest number: 0CF8
Signing time: Tue 04 Nov 2025 22:00:35 +0000
Manifest this update: Tue 04 Nov 2025 22:00:35 +0000
Manifest next update: Wed 05 Nov 2025 22:00:35 +0000
Files and hashes: 1: RPMwC82ETWB1L-Xfst4pmWbpuPY.crl (hash: N0pin7+920CCn8yxoaXblZgy2gAWd0hUNEagU0PvTr0=)
2: vqjdm1KiZFUuymq7gFNn9nu1xeI.roa (hash: n5Ik+8X2gw4ASROPfXrEyi/m0Dt0d0dYMw901zfQlQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:d8:d8:be:eb:12:43:44:0f:cd:17:2b:5c:f5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Validity
Not Before: Nov 4 22:00:35 2025 GMT
Not After : Nov 5 22:00:35 2025 GMT
Subject: CN=cb7a3a70604f6a39775d195b9dc50879301afbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:88:58:76:c7:31:42:5c:f3:53:d2:44:ca:
80:cf:e1:f1:8b:19:e3:53:97:2c:90:4d:97:c4:4e:
da:7a:ed:a9:98:4b:6a:49:62:77:cf:38:e3:21:64:
f5:03:a4:6b:92:07:b7:c9:f3:66:fe:9a:08:ad:f0:
e4:d8:71:b2:45:8f:b1:54:b5:33:27:10:e6:3d:71:
e1:c6:b7:e5:a9:46:ef:e7:0e:5c:05:c6:09:d6:07:
c0:37:b5:1a:c4:54:92:c4:9d:c7:bf:56:3b:57:7e:
58:aa:b1:87:ca:98:59:8b:6d:00:80:0e:0d:d0:b6:
bc:e0:e3:37:15:24:5e:67:df:36:52:b6:9f:fe:64:
c4:bb:93:dc:55:ec:dd:58:98:35:86:0c:08:f4:bb:
1e:d6:62:34:6d:e3:50:f2:ce:b6:c2:19:24:92:40:
11:3d:6c:c8:96:ae:87:80:a7:9c:0d:94:57:68:3f:
a9:15:a0:7e:f6:a6:52:4f:ff:93:47:b1:6f:1e:9d:
fc:bd:ee:60:71:29:14:5a:18:81:e5:2b:91:13:f1:
60:d7:cf:6a:88:3f:37:8e:67:af:75:d2:86:6d:9b:
f0:bc:d7:48:44:0c:c9:92:ae:c7:d6:d5:2b:cf:06:
c5:76:8b:95:c3:cb:16:12:2d:86:53:5a:5b:c0:fb:
56:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7A:3A:70:60:4F:6A:39:77:5D:19:5B:9D:C5:08:79:30:1A:FB:C6
X509v3 Authority Key Identifier:
keyid:44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d2:df:42:5a:d7:e1:2f:dd:8b:2a:68:47:2d:f2:dc:46:19:
17:34:51:a9:c2:2b:a7:de:a0:fe:1f:25:68:9e:37:c5:0c:1b:
fd:46:23:4c:a8:e1:25:91:27:fe:05:a5:9c:99:66:33:62:31:
a4:d5:7e:c2:71:63:47:83:9e:35:d5:ca:fd:20:21:de:90:eb:
1f:2b:44:a8:42:8b:3f:10:39:6f:30:71:1d:b1:45:f4:1e:ef:
e3:6b:99:ea:9f:d1:58:e8:6a:13:96:68:a8:07:21:60:50:fd:
90:5a:bb:31:51:67:45:49:ea:c5:d3:f9:e6:29:70:db:cc:94:
0f:5d:9a:2f:4b:5e:47:c8:0e:40:69:c9:9b:04:d1:6f:c1:30:
bd:bb:45:6d:b4:62:c7:b2:84:4a:fb:13:ca:ee:bb:51:48:1f:
90:6b:53:d9:69:f5:db:f3:d0:4c:b6:3d:ee:fe:52:6b:c5:f4:
2b:70:78:95:7b:f8:8b:79:27:90:97:64:65:02:0b:da:64:6c:
ed:ae:66:c1:09:3a:e9:87:c2:4d:75:ec:c0:39:34:9f:cc:3b:
e1:cb:06:7b:ef:b6:7d:87:f0:5a:6b:1a:c0:38:73:a7:21:d6:
0d:d2:89:5e:ea:05:a0:6d:73:1c:97:4e:c4:d8:f7:54:1e:a3:
55:d8:d9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:08:12 2025 by rpki-client