Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
File: RmJSHrWLRbDFosy-ODMVznnX7qU.mft (raw, json)
Hash identifier: OkGKDebIGMmhfoZPsrFBEU61lc74wuEEOU32QS89jCg=
Subject key identifier: 76:CA:DE:2F:72:05:D5:D9:AE:F6:F1:98:E2:49:9B:1A:1A:04:E2:97
Authority key identifier: 46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
Certificate issuer: /CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Certificate serial: 019A4F625BBF0CC46B134A3273A7619DAF7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
Manifest number: 0565
Signing time: Tue 04 Nov 2025 15:00:37 +0000
Manifest this update: Tue 04 Nov 2025 15:00:37 +0000
Manifest next update: Wed 05 Nov 2025 15:00:37 +0000
Files and hashes: 1: FMOrAvuXC1st0AxiGEbiYaRYpDg.roa (hash: OmIWmIcqWrtJmv8GjH0kjZnCnt6Sjb2fVpbncWqIDDs=)
2: RmJSHrWLRbDFosy-ODMVznnX7qU.crl (hash: IQ5klWOz7kTEmPlvO/N0eWjivKBlGDIrfVVx8wjOP5k=)
3: Rn8OIh8zHAwmG50kXHn-kNbTEto.roa (hash: RiLsXz+R4XXCz86+60MDV16LzwORDjEzlHMC7VSLj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:5b:bf:0c:c4:6b:13:4a:32:73:a7:61:9d:af:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Validity
Not Before: Nov 4 15:00:37 2025 GMT
Not After : Nov 5 15:00:37 2025 GMT
Subject: CN=76cade2f7205d5d9aef6f198e2499b1a1a04e297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:01:93:9a:fc:58:6a:80:21:d0:74:cf:1d:a7:
f3:f2:c9:6d:88:25:da:bd:2f:13:2d:39:9a:eb:51:
e5:7b:ab:dd:ea:36:b6:71:b1:5e:81:ee:18:38:d1:
74:37:a4:72:25:5e:81:92:d1:cb:7c:f4:36:bc:90:
13:f7:a6:b7:5e:db:5a:4d:6a:4e:97:be:38:76:5c:
ba:b1:a3:e2:38:dd:67:a0:3c:d6:23:47:29:79:75:
69:85:e7:23:0b:87:e5:ef:cd:b6:6c:15:47:ce:97:
b7:bc:ed:e9:d3:4a:5a:1f:f3:06:7c:72:43:60:44:
d7:50:b9:19:db:15:ec:2c:fc:99:3e:c1:c3:02:78:
90:40:1f:2a:ed:05:ac:c8:4c:b0:a8:f7:8a:82:63:
f2:29:c7:1e:69:70:fb:0e:3c:c5:d1:c2:4d:4e:71:
5c:8e:f7:19:73:b8:a5:38:bc:cb:39:89:ed:be:11:
b7:e5:b7:de:a1:ba:64:1f:a4:54:6a:4a:74:43:bb:
f8:d1:b7:5f:07:d8:b4:7b:36:7a:1f:05:74:c0:dd:
b4:c5:e1:0e:76:99:78:8a:2b:86:1c:ee:c9:a4:48:
80:23:7f:56:58:27:cb:8a:88:5f:3e:bb:e1:e2:20:
a1:7f:84:be:c6:29:b9:f0:9d:2a:1b:c5:1e:36:44:
c2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CA:DE:2F:72:05:D5:D9:AE:F6:F1:98:E2:49:9B:1A:1A:04:E2:97
X509v3 Authority Key Identifier:
keyid:46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d4:ae:d8:60:77:eb:53:fb:8e:19:a9:9b:44:cf:ba:54:23:
1f:8c:99:32:18:05:47:96:c1:82:01:4d:a3:91:0b:b5:7e:7a:
ea:da:a4:b5:df:fc:60:4f:11:cb:c2:ae:87:20:10:0a:0a:01:
41:5f:39:b4:c0:85:b6:b5:49:3a:9d:a5:47:f9:76:f9:e4:47:
64:56:15:7e:57:ef:f6:33:54:e7:96:85:96:fb:12:65:91:ed:
5e:17:0d:ff:8e:bd:c6:fe:7e:ae:18:f5:f0:22:dd:da:2b:97:
b0:7b:72:6e:4b:94:ca:32:df:34:ea:1b:c1:ff:d2:1f:22:e3:
ad:b2:54:d5:38:83:bd:d3:d9:45:b8:b0:95:ef:8e:9e:74:ea:
c2:51:51:ba:60:e3:ea:82:66:f8:f2:e7:76:5d:78:4b:4d:33:
c2:89:6c:5d:80:eb:81:61:3c:13:f2:b2:1d:ad:32:df:d0:48:
c6:91:db:e8:ae:f4:a1:b5:bf:d0:62:b2:57:b8:c2:d5:96:25:
14:47:ca:bb:a2:3b:56:31:b7:00:28:9c:8a:79:f3:96:dc:97:
f4:8a:08:ee:aa:09:7b:4d:c6:90:97:e6:b2:55:1f:69:d3:03:
8e:dc:f9:e7:a5:32:9d:f8:c6:20:6a:1b:af:6e:fc:5a:01:62:
66:d8:90:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:06 2025 by rpki-client