Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
File: rmjJUYwq1UwKy4IUaMhuRboWHBg.mft (raw, json)
Hash identifier: BsY0vfszzMgPajXaS1lII47q5ds91TXdnZiuSnZBcKI=
Subject key identifier: 92:9C:FC:05:32:4A:F5:28:EA:AA:FB:BE:11:12:67:0A:15:C7:10:4F
Authority key identifier: AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18
Certificate issuer: /CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
Certificate serial: 019A4EF457D25CAB8404A8F561F4FB7194F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
Manifest number: 05D8
Signing time: Tue 04 Nov 2025 13:00:27 +0000
Manifest this update: Tue 04 Nov 2025 13:00:27 +0000
Manifest next update: Wed 05 Nov 2025 13:00:27 +0000
Files and hashes: 1: PwlcQaBPeu72jRxpS1TyAFafqIs.roa (hash: zweRMxR6GdWC0C5ngJnRInvOkWHsboI5uvSiYLo2X20=)
2: rmjJUYwq1UwKy4IUaMhuRboWHBg.crl (hash: EEpio0eoV69/hjvovRPO3gh0aqkMsSqF2ImflhmGdcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:57:d2:5c:ab:84:04:a8:f5:61:f4:fb:71:94:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
Validity
Not Before: Nov 4 13:00:27 2025 GMT
Not After : Nov 5 13:00:27 2025 GMT
Subject: CN=929cfc05324af528eaaafbbe1112670a15c7104f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:b9:de:ee:46:87:9f:ec:25:3c:74:0e:59:
31:59:6d:ba:a1:78:02:59:46:1d:69:db:af:c8:ee:
51:ac:59:31:dc:ab:57:96:1f:79:ce:53:08:83:46:
ff:e6:b5:17:2e:cb:35:ca:f9:3b:fb:a3:42:14:3d:
b0:f6:f8:5f:54:ea:d6:0b:e9:5d:95:82:a9:6a:92:
47:d9:36:e8:44:d7:91:be:97:3e:a1:c3:09:86:76:
eb:ec:6f:8c:7e:03:42:5e:a8:58:4e:67:67:13:89:
c1:ca:09:8e:52:39:1a:ee:d0:c0:c5:34:3b:3e:03:
c2:00:f4:d3:ca:a7:a4:9e:6e:b1:13:46:2b:a8:ff:
da:b2:26:78:c8:01:6c:3c:40:00:86:bf:6f:02:39:
7b:94:5f:1d:1b:59:d4:cf:09:6e:87:e1:fc:a8:dc:
d4:68:85:8b:ba:4a:18:57:b0:6a:63:fe:66:83:2d:
87:13:6a:63:80:17:3e:17:69:37:fe:b0:d7:b8:63:
d9:26:5e:e6:02:00:10:f2:53:98:73:8f:39:0e:53:
bd:3a:2b:a8:61:63:0d:29:b0:c8:ff:93:20:87:a6:
b8:f9:43:80:d4:3a:f3:89:00:83:af:32:3a:77:5a:
12:e7:6e:a2:8f:80:76:b9:5c:e8:f5:d6:6a:de:53:
40:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9C:FC:05:32:4A:F5:28:EA:AA:FB:BE:11:12:67:0A:15:C7:10:4F
X509v3 Authority Key Identifier:
keyid:AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d8:8a:a6:04:77:9c:90:07:ed:34:63:f6:d3:d0:f2:e9:9c:
c4:30:6a:4e:7b:74:45:b6:6d:32:75:16:0b:b2:12:3d:6b:9c:
bf:88:ad:82:45:06:75:49:66:5b:84:ab:20:8b:68:f4:d1:7e:
0e:c6:11:1a:ef:f3:45:cd:bc:d0:7f:be:58:cf:2f:42:43:7e:
8b:4a:89:c8:02:f9:3d:d3:62:95:9b:9f:4b:ef:ec:22:05:9c:
dc:d2:96:cc:41:18:db:24:73:de:fc:a6:fe:a6:d6:df:47:3f:
53:d5:b4:f8:93:ad:d1:de:14:46:90:61:59:ba:29:57:6e:93:
24:6e:95:12:c8:2c:24:12:a4:e1:71:35:2c:58:f7:8b:c4:41:
06:7f:e4:5d:53:06:13:83:b0:18:a5:cb:69:74:3c:36:d5:22:
98:fe:0e:8a:b6:fa:47:0a:e1:29:93:de:71:38:d6:4b:96:f8:
c3:0b:9a:b8:7c:b0:c2:51:2d:32:9f:dd:25:0a:97:ca:28:f7:
43:f4:1e:3c:26:95:4a:1d:49:56:a1:0c:8c:14:c3:eb:6a:1b:
00:76:0c:f5:4d:88:84:98:46:2a:ff:54:6d:5c:2d:d3:1a:63:
85:b8:0d:7a:a3:76:4d:dc:6c:a5:d9:f8:3e:b9:f6:9f:58:b0:
e9:13:36:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:15 2025 by rpki-client