Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
File: rmrw1fOCidNMIbpnxMOXh6QqZp4.mft (raw, json)
Hash identifier: /rIMXmsd5FAw6wY0xWAvKTvla0gq5eoI08Rc+6EchlQ=
Subject key identifier: 3F:97:A8:48:37:F8:11:74:57:BB:FC:0B:83:25:59:88:F4:A1:18:8B
Authority key identifier: AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
Certificate issuer: /CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Certificate serial: 0199C4C4CC152A411F0AB856310259F6F24A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
Manifest number: 16C2
Signing time: Wed 08 Oct 2025 17:00:55 +0000
Manifest this update: Wed 08 Oct 2025 17:00:55 +0000
Manifest next update: Thu 09 Oct 2025 17:00:55 +0000
Files and hashes: 1: W8HdoS1T8uaMpM9YFeme5afjmm8.roa (hash: MVcxUXAqk+tB4gBwDZOl3zZvyfrQXKh2vGJmtjrVMqc=)
2: dC665gBaSCufZLjae0l6pAdLs6Q.roa (hash: kur7Pc6RtMGt0xkEhTapoaHBlvXxGfD2IjX+NyztpmY=)
3: rmrw1fOCidNMIbpnxMOXh6QqZp4.crl (hash: 90fM2VB9d6j30ZtROblbqajwhqhGW+do0gt3nrxykCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:c4:cc:15:2a:41:1f:0a:b8:56:31:02:59:f6:f2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Validity
Not Before: Oct 8 17:00:55 2025 GMT
Not After : Oct 9 17:00:55 2025 GMT
Subject: CN=3f97a84837f8117457bbfc0b83255988f4a1188b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f9:1d:9b:71:5b:35:6d:0f:97:7b:8e:54:3e:
df:9f:22:53:b6:6f:b4:41:24:e9:64:14:83:60:3e:
14:6f:83:30:c8:de:c8:c6:c6:e7:52:09:00:14:65:
c0:4b:23:75:6b:54:85:43:cf:b6:c1:53:4a:94:d9:
4f:54:2d:52:2d:4e:d5:e5:ab:97:76:54:d4:e5:98:
f3:0f:78:72:a9:56:28:be:b3:60:cd:d4:b9:44:2b:
d2:1e:59:6e:7f:dc:44:86:b7:b3:37:b6:91:9c:19:
a8:42:c4:aa:b9:48:6e:9d:52:4d:41:1d:76:75:73:
24:a4:b5:8c:ed:47:a4:a9:e4:a5:d4:f5:4e:60:c4:
00:90:b8:58:af:5e:3f:76:9f:70:7d:85:d1:d9:7a:
ec:77:9f:cb:5d:af:95:f9:0a:b9:65:9d:12:df:47:
48:69:da:41:db:7a:3f:53:7e:49:7c:ea:81:1b:a5:
3e:49:e6:c6:43:e4:ee:a0:45:65:80:33:ca:7c:50:
50:73:ed:5d:b4:f3:31:08:0e:11:40:4c:a6:33:3a:
96:ac:a7:d3:2d:c3:b2:66:5c:69:95:2e:00:74:60:
6c:28:11:2a:aa:86:ea:49:af:8b:86:0b:cc:97:76:
6b:2d:7a:60:83:9a:19:a4:20:08:d5:91:71:a3:8b:
8a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:97:A8:48:37:F8:11:74:57:BB:FC:0B:83:25:59:88:F4:A1:18:8B
X509v3 Authority Key Identifier:
keyid:AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0e:94:9f:02:17:a8:60:8e:2c:4a:d5:45:57:4a:61:7c:a6:
a0:79:c3:a3:1b:70:84:e6:84:1a:a0:95:cf:f8:00:3e:39:44:
4e:1b:d3:11:62:b7:3b:1a:63:c4:a4:13:f2:e9:33:c8:fa:04:
68:10:d8:d3:bb:a5:37:4e:e5:f7:bc:9c:b0:08:58:06:08:34:
73:8e:e9:1f:c4:8c:87:ae:ce:e0:f4:a1:b1:a2:e4:66:ac:36:
30:b3:ee:e5:44:d4:86:64:df:41:6b:6b:00:0e:8d:e0:81:7c:
3f:54:ce:55:7a:8d:31:ca:08:fb:41:19:1c:87:53:dc:a8:e2:
99:3c:1c:42:34:1a:9f:2a:cc:28:ff:ad:6c:05:00:67:26:09:
9f:4d:a5:15:e3:e8:cc:6f:e8:1a:e7:6e:d0:f0:d9:85:ad:48:
ff:0c:c8:b8:21:4c:c1:a5:d2:2c:6d:d8:79:e1:ab:7b:a3:85:
93:bb:53:b4:47:28:06:37:9b:45:b3:ec:70:ad:8e:e8:3f:42:
10:bf:77:68:6e:3d:12:f9:58:94:b1:cd:ff:0d:5a:d7:0d:f5:
8c:02:fc:9f:69:80:1c:72:aa:9b:4c:d9:6b:52:96:68:e6:dd:
60:c8:8b:3b:3f:1e:93:ee:4a:ea:58:4b:04:0e:11:87:04:49:
20:a3:40:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:34:45 2025 by rpki-client