
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
File: rmjJUYwq1UwKy4IUaMhuRboWHBg.mft (raw, json)
Hash identifier: tk1zEdQrEkpvHxe2tYBxLH/fwPxE7bNjyUPn8mQgWkw=
Subject key identifier: 2D:C5:BA:46:58:A4:34:20:DE:B4:84:96:AE:70:EC:2A:42:CE:89:19
Authority key identifier: AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18
Certificate issuer: /CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
Certificate serial: 019873E1EEBB294AD3B263F145D151A80A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
Manifest number: 04E2
Signing time: Mon 04 Aug 2025 07:00:42 +0000
Manifest this update: Mon 04 Aug 2025 07:00:42 +0000
Manifest next update: Tue 05 Aug 2025 07:00:42 +0000
Files and hashes: 1: PwlcQaBPeu72jRxpS1TyAFafqIs.roa (hash: zweRMxR6GdWC0C5ngJnRInvOkWHsboI5uvSiYLo2X20=)
2: rmjJUYwq1UwKy4IUaMhuRboWHBg.crl (hash: /ayg6+g/tBp2SFodAjyQYX3sP3Y120KSCDz26lw2tDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:ee:bb:29:4a:d3:b2:63:f1:45:d1:51:a8:0a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
Validity
Not Before: Aug 4 07:00:42 2025 GMT
Not After : Aug 5 07:00:42 2025 GMT
Subject: CN=2dc5ba4658a43420deb48496ae70ec2a42ce8919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e3:1d:19:6e:58:c7:a4:50:fa:8a:52:7b:f7:
91:8c:5c:98:2d:9e:e6:73:c1:de:73:88:b4:16:43:
81:fa:b6:4a:47:89:a1:5e:00:53:ca:a2:dc:ac:8c:
cc:ed:12:da:22:13:b4:7e:5d:f6:92:15:3a:2c:dc:
51:e6:39:7e:0c:75:0b:4e:c8:fd:63:15:3f:46:e2:
60:50:24:72:95:15:7a:fc:c8:17:27:ba:61:c3:63:
97:1e:7d:31:59:69:fe:b2:5b:52:55:24:66:f0:0a:
51:73:c1:b3:81:9b:fa:cc:4d:83:a9:de:f5:40:45:
e2:71:25:28:d4:7f:21:74:be:42:89:e0:28:4d:b3:
8b:91:b9:4a:97:c7:f9:1f:9f:26:f3:3a:fb:21:13:
77:fd:db:cc:4c:11:6a:ff:bb:1b:3e:41:c4:bd:ac:
1a:f2:42:60:d8:2c:25:b5:c1:b6:3c:d8:31:37:99:
25:f3:78:66:0b:28:78:0c:e4:04:de:e9:0a:ef:0f:
9f:70:97:b4:10:ee:da:3d:17:11:37:7e:10:f2:1a:
5b:73:89:68:fb:e2:22:0d:81:8d:e3:8b:40:99:b6:
ac:0d:ca:fd:ac:c9:6d:70:63:8b:c7:ff:93:bd:b1:
c1:f6:84:bb:8a:0c:67:f5:ac:45:cb:b9:8c:3d:fd:
d5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C5:BA:46:58:A4:34:20:DE:B4:84:96:AE:70:EC:2A:42:CE:89:19
X509v3 Authority Key Identifier:
keyid:AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6e:4b:9b:95:53:af:bc:74:fd:49:54:10:bd:43:e6:bd:5a:
89:14:d8:11:d8:19:ab:10:48:be:f7:40:2a:25:3c:db:69:dc:
f9:cd:4b:ab:04:02:d5:2b:00:fc:5c:bb:29:32:df:c8:ba:76:
3a:f7:c4:9b:c4:4d:8e:4e:e2:8a:ee:b8:10:09:c2:eb:ca:e4:
20:59:86:7c:be:ba:b5:12:4b:43:86:f4:ec:ef:69:0b:01:ec:
a9:ec:78:32:18:c2:cd:74:2f:8a:c5:f4:91:ee:91:10:5d:07:
f0:f5:ef:ad:e9:f9:50:5c:77:65:e5:91:ad:9e:0b:c2:fb:3f:
dd:90:5d:7d:fb:94:96:78:3e:2a:37:f1:7b:77:0b:b0:2c:d0:
47:f3:b7:95:7d:35:47:d1:86:ce:33:12:74:cb:a1:85:c7:31:
16:a6:88:36:b4:15:63:22:02:54:4f:a6:de:1f:a6:b5:3c:1a:
a8:be:76:3f:f9:93:9e:82:15:c1:e4:9a:b5:5f:bd:89:09:da:
15:19:89:87:c0:4a:59:fa:45:35:97:42:2d:b2:95:8b:5b:45:
50:30:fa:ec:a3:cf:ea:ea:e5:db:b3:d8:7b:1f:c5:75:de:63:
aa:f1:c8:36:4e:81:c3:b6:55:a3:f8:4f:cc:5a:dd:af:2e:ae:
be:0f:7a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:46 2025 by rpki-client