Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
File: RPMwC82ETWB1L-Xfst4pmWbpuPY.mft (raw, json)
Hash identifier: LCA9htGR/C7TfIMXhexXNQ1hgMJeMlK0QoZQTxKQgB4=
Subject key identifier: D2:21:0A:6E:66:4F:3C:FA:EB:6E:55:42:C9:64:16:2A:B6:33:7D:21
Authority key identifier: 44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
Certificate issuer: /CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Certificate serial: 0198530D89F4EDA2C929B873FDBAFB8B0146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
Manifest number: 0BF0
Signing time: Mon 28 Jul 2025 22:00:52 +0000
Manifest this update: Mon 28 Jul 2025 22:00:52 +0000
Manifest next update: Tue 29 Jul 2025 22:00:52 +0000
Files and hashes: 1: RPMwC82ETWB1L-Xfst4pmWbpuPY.crl (hash: ZMHDxyRkjdDnFnBUUZshGzg+fHVPnkXWTnKQXBdHrpg=)
2: vqjdm1KiZFUuymq7gFNn9nu1xeI.roa (hash: n5Ik+8X2gw4ASROPfXrEyi/m0Dt0d0dYMw901zfQlQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:89:f4:ed:a2:c9:29:b8:73:fd:ba:fb:8b:01:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Validity
Not Before: Jul 28 22:00:52 2025 GMT
Not After : Jul 29 22:00:52 2025 GMT
Subject: CN=d2210a6e664f3cfaeb6e5542c964162ab6337d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:14:4a:1a:5c:57:2b:01:38:61:10:0c:d8:
87:28:20:57:55:2e:7e:91:3c:27:72:ca:32:68:18:
0c:e8:1a:27:16:90:1b:9e:0b:3d:14:d0:35:87:bd:
b2:9d:6c:78:af:73:c8:b4:cf:28:cc:95:40:9c:54:
a9:cd:fc:eb:86:4f:d2:dc:f9:f7:41:43:3e:29:5d:
17:b5:11:05:6d:b4:59:f2:50:31:02:2c:e9:38:5a:
8f:cb:00:fd:e3:a6:b8:37:9c:b9:47:6c:5c:ae:f3:
0a:4d:da:3d:53:f7:96:b7:74:54:f7:d4:13:22:87:
4e:57:d0:e9:e1:57:f6:71:77:e3:31:23:05:88:0d:
a1:47:74:db:64:9c:75:ea:4a:28:20:a6:84:20:61:
08:52:bb:33:ab:1d:cc:c1:58:05:a9:81:38:0f:b6:
af:ab:81:ac:bf:0f:55:ad:da:f9:93:92:a6:8f:c8:
57:ff:58:67:8d:c9:66:a5:24:28:5f:bc:86:d4:48:
96:1a:61:27:b1:9a:90:59:fd:63:52:3f:9f:31:46:
b3:e4:dd:82:36:0f:24:88:16:49:13:86:79:76:83:
5b:23:00:a0:8f:1c:3b:66:2d:db:43:85:fb:08:55:
4c:70:79:ed:07:8d:ae:73:c2:ac:d3:15:49:22:6d:
9e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:21:0A:6E:66:4F:3C:FA:EB:6E:55:42:C9:64:16:2A:B6:33:7D:21
X509v3 Authority Key Identifier:
keyid:44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8d:47:b9:d0:83:5c:7e:5a:14:ed:5c:4d:61:86:5d:c2:ac:
ad:38:c8:74:c4:11:e1:af:6b:d7:22:6c:3f:a7:d5:0d:cc:d1:
71:9c:35:9a:86:4a:fc:a2:69:16:8c:db:ff:af:c1:e7:ff:74:
6d:6e:dd:65:0f:b4:6f:71:88:a0:a1:83:c1:93:df:3a:46:37:
9e:b6:55:95:ac:0b:f7:cf:d2:72:bd:38:bd:7e:b4:54:02:b3:
46:3d:15:24:ab:8e:9d:07:99:bd:15:c7:0f:58:3d:13:ab:08:
24:95:d8:0a:ae:e0:0f:09:49:d2:8c:ff:7b:ec:af:f7:44:1a:
aa:8c:b6:51:2c:b8:61:80:fa:4d:49:5e:e0:ab:a1:da:81:8a:
7c:5d:cb:f9:3c:2e:32:86:2e:9c:0a:28:6c:6b:b5:23:25:b2:
99:e4:09:0b:3d:35:a8:c8:26:a4:b1:12:e0:2f:c6:c6:d5:69:
bf:20:09:0b:23:af:88:6c:c8:bc:28:89:0e:50:c2:7d:5f:bb:
c3:f9:a9:fd:49:3b:a2:13:84:e9:8c:b1:5a:91:5d:aa:47:58:
b2:f2:e6:66:0f:34:34:9e:98:74:b7:eb:fc:7b:75:f3:bc:b3:
c8:4c:e7:26:7f:ce:a3:48:db:78:1d:7c:0f:40:ff:34:e9:f3:
22:16:ca:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:30:03 2025 by rpki-client