Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
File: RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json)
Hash identifier: KSe3gvWPVmAWyb6Z53uqRdy9MPi19a1ie/K1piDE9/Q=
Subject key identifier: 0F:46:F3:7B:02:76:FD:E6:B5:A6:9A:DE:06:BC:10:11:34:22:5A:6B
Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799
Certificate serial: 01983E3CF3CB31E573F4FC26865D568CFFFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
Manifest number: 13CA
Signing time: Thu 24 Jul 2025 21:00:38 +0000
Manifest this update: Thu 24 Jul 2025 21:00:38 +0000
Manifest next update: Fri 25 Jul 2025 21:00:38 +0000
Files and hashes: 1: 1-a4x5OOX4iisCDf6ed1yjE-GXUQ.roa (hash: sw8ry0bOHDndmxXW/2FyYZ7exmAZ4VvNy12eeZpqa3o=)
2: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: gHOU/Z01iZ9jwuM6RGBroeSphX+tbscoxj9f8Rz4PO0=)
3: UTTLqXMtJUxFPASsyV3j9mlbrsU.roa (hash: 2XJm8gYnzGZQLzDIfSf2GHQMXAHNk+qtN5YEcj0V9ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:3c:f3:cb:31:e5:73:f4:fc:26:86:5d:56:8c:ff:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799
Validity
Not Before: Jul 24 21:00:38 2025 GMT
Not After : Jul 25 21:00:38 2025 GMT
Subject: CN=0f46f37b0276fde6b5a69ade06bc101134225a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:60:f3:86:19:50:f8:d8:3b:8e:a5:c7:ff:f0:
6d:1a:64:70:fd:c5:93:d2:fd:35:0b:5b:91:bb:36:
53:48:38:24:cc:c4:09:22:61:1b:07:7c:94:48:54:
48:9b:28:7e:b0:54:a5:a4:bc:4d:f1:33:42:08:d7:
a5:81:65:e7:87:43:43:26:2f:d7:cb:41:e9:a4:01:
a3:60:5b:9f:77:b5:c8:0d:99:83:c7:96:22:15:07:
f2:28:f6:0e:52:ad:8f:ce:c1:f3:31:f0:20:df:fa:
59:5a:24:cb:46:f6:88:a4:f9:2e:75:97:2f:f6:93:
00:4d:3b:30:f1:e4:54:87:b4:88:62:e0:7d:6c:1c:
88:23:c8:64:5d:fc:0d:81:40:22:72:48:03:89:e3:
9d:80:dd:95:da:c9:f3:6e:8d:76:9e:0d:a6:00:fd:
c1:55:cf:5d:be:65:68:5f:35:0e:d2:4b:32:15:fb:
bb:bf:5e:d2:06:60:86:73:42:e2:c6:69:9f:84:93:
bf:4c:b7:10:5c:6e:90:7b:9e:32:2b:69:f9:a2:5d:
9c:a3:dc:37:63:c6:81:9e:24:dd:6e:2b:57:36:ae:
98:f7:d2:57:56:cc:54:8b:a9:c4:57:6f:69:b2:98:
d3:7b:2a:a8:86:dd:d5:4e:98:99:b5:2d:d1:f0:20:
cb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:46:F3:7B:02:76:FD:E6:B5:A6:9A:DE:06:BC:10:11:34:22:5A:6B
X509v3 Authority Key Identifier:
keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:86:60:aa:96:af:15:72:6b:f7:bc:1c:b3:d2:aa:f2:2b:6f:
6a:7d:cf:38:37:67:1d:e5:91:1c:d3:44:12:f9:66:96:19:9b:
5d:5b:22:92:11:c1:ea:37:1a:a4:75:b8:89:02:ac:a4:be:13:
74:b3:23:48:6d:f6:ce:28:8a:4d:c8:43:9f:3b:03:06:59:8f:
cd:4f:3e:53:71:5f:be:bf:53:6b:5d:2b:e2:77:24:2e:0f:7d:
0a:51:f0:a1:81:6f:e7:f9:c0:07:2e:94:9f:fc:80:cd:f2:db:
25:ca:87:04:93:a8:98:93:dc:d3:03:3b:e8:b8:6a:28:3c:92:
2c:ea:3d:c6:96:51:eb:09:4b:91:bc:09:c1:72:08:80:e6:e0:
27:62:02:d6:d3:41:e3:5f:26:84:a8:e5:13:cb:2e:12:dc:b5:
05:96:07:df:b7:3f:b4:87:89:82:25:9f:b6:9d:e1:58:0a:a0:
ed:b6:87:d3:76:8b:d2:b2:de:01:75:87:c9:1e:c6:53:dc:a7:
0d:e6:79:d1:5e:7e:86:bd:6a:f3:38:b2:b0:78:3a:fb:37:3f:
b9:3a:b9:a0:10:a1:72:0b:2d:5b:c6:ac:36:23:d9:73:5c:b7:
c7:84:f4:92:0e:20:89:48:8d:3b:d7:be:ed:b4:eb:6d:ff:8f:
5f:fe:ae:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:52:50 2025 by rpki-client