Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
File: RMrauRpreaMhYYgHxnibKxyYI3g.mft (raw, json)
Hash identifier: OjXelO7lz5ae6gtp/GX3XTdq4R1+a6ZWA9Pu/kcSSH0=
Subject key identifier: 8A:C0:25:20:F0:38:C4:BB:99:C5:BF:0C:23:45:F5:CA:5F:D8:56:2E
Authority key identifier: 44:CA:DA:B9:1A:6B:79:A3:21:61:88:07:C6:78:9B:2B:1C:98:23:78
Certificate issuer: /CN=44cadab91a6b79a321618807c6789b2b1c982378
Certificate serial: 019916BF2392B03A0B3EE4ECE93E5A36F5B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
Manifest number: 111B
Signing time: Thu 04 Sep 2025 22:00:49 +0000
Manifest this update: Thu 04 Sep 2025 22:00:49 +0000
Manifest next update: Fri 05 Sep 2025 22:00:49 +0000
Files and hashes: 1: RMrauRpreaMhYYgHxnibKxyYI3g.crl (hash: IlW6l/er47zAEHKvwAazhzSXozUiZ52jyPV9FcWWc18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:bf:23:92:b0:3a:0b:3e:e4:ec:e9:3e:5a:36:f5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44cadab91a6b79a321618807c6789b2b1c982378
Validity
Not Before: Sep 4 22:00:49 2025 GMT
Not After : Sep 5 22:00:49 2025 GMT
Subject: CN=8ac02520f038c4bb99c5bf0c2345f5ca5fd8562e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c9:77:fb:94:e9:8a:10:60:b2:0a:eb:37:fb:
e0:00:bf:b2:f8:47:e7:5f:31:4c:e1:27:b1:06:4c:
52:fb:36:d3:91:26:03:c6:2d:e9:0a:54:05:33:cb:
33:55:d1:ef:66:4f:9e:6f:8e:45:f5:d4:ee:87:5a:
1b:f6:94:eb:24:2c:a0:aa:1f:c1:41:a5:65:5d:9b:
49:0f:fc:b2:d4:ae:0a:cf:00:f1:10:03:bb:af:45:
b6:23:91:96:f6:43:50:dd:a7:0a:95:7b:6a:f9:cd:
34:bc:7d:6f:7f:eb:6d:40:a5:0a:2a:e4:37:78:a6:
5c:87:87:f7:65:e5:a4:6b:6f:32:9f:f7:ce:04:49:
43:bb:31:99:d1:ae:d9:c5:cc:2f:e6:a5:f7:cd:f0:
d0:88:92:48:0a:7a:e1:02:fc:fc:b9:a3:e5:c8:fb:
89:d6:cf:13:87:70:82:c0:d4:50:0c:2f:2c:34:93:
f3:cc:96:2f:52:5b:4a:e6:c5:41:22:ac:a9:00:ce:
f4:83:e4:95:6c:63:1d:0b:67:07:1c:09:fa:e4:f3:
7d:83:f2:b8:51:59:86:71:74:7c:04:3f:85:c8:d6:
ec:b3:50:40:29:e8:be:9b:e1:8c:2f:39:2f:b3:39:
6c:ea:93:bd:3a:73:6c:10:e3:2b:44:8f:1d:f9:67:
a3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C0:25:20:F0:38:C4:BB:99:C5:BF:0C:23:45:F5:CA:5F:D8:56:2E
X509v3 Authority Key Identifier:
keyid:44:CA:DA:B9:1A:6B:79:A3:21:61:88:07:C6:78:9B:2B:1C:98:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b5:7d:fc:a0:d3:f2:02:ed:ff:b7:4f:36:b8:ad:b5:58:53:
01:82:64:71:70:74:83:11:87:d3:05:db:33:58:ea:d1:df:73:
f9:83:4c:15:ff:6f:a8:c0:a6:0c:06:0e:9f:61:8a:d5:e3:ff:
2f:53:18:53:f7:e4:99:56:08:85:35:d1:59:0d:b1:a3:a0:12:
37:fb:98:bb:89:d3:92:f8:d1:6e:8b:e4:ea:6f:cc:00:d4:3c:
ca:e0:2c:6c:b5:d2:c9:7c:e9:7e:5f:7a:d5:9e:2e:b5:5b:1d:
ab:5b:96:e0:d4:65:23:e2:23:11:7b:ad:31:75:eb:8e:31:dc:
6e:82:57:cd:49:d7:4c:90:f4:f2:31:c6:c6:1d:4d:c9:1e:4a:
9c:ff:c6:1d:9a:ea:84:fa:76:80:87:da:8f:c2:9c:ce:a8:f8:
f3:2b:47:0e:71:d6:1c:bb:91:69:7b:3b:6b:aa:95:f3:a9:54:
6e:b9:e5:2c:46:cf:70:cf:6e:68:6e:54:e6:e3:db:50:11:f2:
1b:7b:a7:1a:4b:5d:ba:e5:5b:5a:07:98:0d:63:26:b6:3a:3a:
48:3c:6d:5a:80:bb:44:da:0f:7c:7e:1f:61:61:58:a4:1e:a7:
2e:82:ac:8e:aa:94:03:5c:94:cc:da:af:2a:56:92:4b:6f:11:
d0:05:6b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:25 2025 by rpki-client