Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
File: rmrw1fOCidNMIbpnxMOXh6QqZp4.mft (raw, json)
Hash identifier: XdanKZfko+RFc0RArF2y6ISwQDffadtgljJeAom7A5s=
Subject key identifier: FE:4D:D2:77:39:20:75:CB:D0:CD:01:0C:6B:D3:52:F7:91:24:29:A8
Authority key identifier: AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
Certificate issuer: /CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Certificate serial: 0198C9B87B2BE2986CFF851A03235CB0ACE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
Manifest number: 1640
Signing time: Wed 20 Aug 2025 23:02:47 +0000
Manifest this update: Wed 20 Aug 2025 23:02:47 +0000
Manifest next update: Thu 21 Aug 2025 23:02:47 +0000
Files and hashes: 1: W8HdoS1T8uaMpM9YFeme5afjmm8.roa (hash: MVcxUXAqk+tB4gBwDZOl3zZvyfrQXKh2vGJmtjrVMqc=)
2: dC665gBaSCufZLjae0l6pAdLs6Q.roa (hash: kur7Pc6RtMGt0xkEhTapoaHBlvXxGfD2IjX+NyztpmY=)
3: rmrw1fOCidNMIbpnxMOXh6QqZp4.crl (hash: 66UQVYBU0SrujuUEOHUKhnrpXMgHXNvFendOM+cEILM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:b8:7b:2b:e2:98:6c:ff:85:1a:03:23:5c:b0:ac:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Validity
Not Before: Aug 20 23:02:47 2025 GMT
Not After : Aug 21 23:02:47 2025 GMT
Subject: CN=fe4dd277392075cbd0cd010c6bd352f7912429a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0e:03:c9:76:55:b4:4c:6e:58:92:e2:d2:59:
37:12:fa:60:5e:67:88:f5:a6:50:58:ed:d8:0d:f8:
87:2f:b6:88:9c:ec:18:2e:b9:77:47:2d:3b:91:58:
c7:fe:9a:51:30:57:b0:b1:b3:0a:7b:5d:69:5e:e1:
53:7d:fe:48:e2:ba:4b:44:5b:00:c0:27:95:c2:09:
9a:78:e1:20:53:01:b1:80:d4:18:89:08:46:66:75:
53:2b:c2:65:5b:77:f3:d5:40:8b:0f:9e:46:09:94:
60:60:3c:a1:ad:78:5a:e6:64:da:63:39:1f:a8:c8:
84:be:7f:14:6d:f1:76:60:1e:f9:14:1b:ce:36:0e:
87:23:8c:b1:d5:2f:f0:52:9d:ae:42:c8:dc:c9:84:
de:f1:51:7e:8c:ed:64:50:a7:e7:0c:7a:76:91:54:
25:3b:c3:9f:c1:0f:05:5d:40:42:ba:5b:de:ad:39:
52:4f:2a:66:e4:84:a9:1e:eb:21:a1:70:23:ce:20:
df:0b:be:57:82:b9:12:9d:74:c2:75:60:c5:9e:67:
72:2d:fb:e6:23:a4:e3:3d:2d:fa:be:84:55:34:08:
cc:61:94:2e:07:11:4d:71:ca:87:27:93:c4:6d:27:
fd:f1:ae:28:d0:44:e4:85:77:ea:14:65:8e:f7:88:
1f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4D:D2:77:39:20:75:CB:D0:CD:01:0C:6B:D3:52:F7:91:24:29:A8
X509v3 Authority Key Identifier:
keyid:AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:03:9a:5f:ba:93:5e:80:c8:93:e0:76:c7:51:02:5b:3b:ee:
29:95:1c:67:81:8e:be:09:75:66:df:6a:05:0e:ef:c4:18:cd:
55:50:e1:94:16:40:ec:b4:23:fb:85:2a:cb:59:c6:15:94:c7:
ea:c3:e6:81:ce:7f:7b:a8:8d:85:e8:64:04:c0:af:fa:4d:41:
1b:01:db:9b:f1:a1:a8:b2:06:cc:a4:b7:0c:1c:df:a9:6f:08:
1c:94:ed:59:d4:4e:97:ed:43:b9:cc:d5:c6:ff:22:b6:06:70:
28:c6:d0:47:02:7f:bf:01:15:fe:9a:02:0b:43:16:6c:71:0a:
d2:cd:cb:a5:b5:c9:f2:45:8c:4f:2a:07:97:6d:a0:e1:e2:f7:
8c:d5:d5:2a:d6:b0:98:6b:50:d9:b8:1d:33:0e:03:37:e1:45:
d3:68:4c:64:e3:53:f6:2d:3c:d5:5e:3f:6e:d7:14:0d:be:d7:
27:19:c9:7f:d6:cf:7e:b7:81:45:e1:8b:bf:b9:9a:93:8f:3c:
e0:11:5d:70:a7:7a:c7:8e:68:ac:27:b9:57:8a:d3:77:0c:fe:
c6:79:dc:dc:cd:5a:85:2d:f8:76:ce:4c:50:cf:4a:b4:34:33:
01:cb:ff:77:8a:95:da:a5:62:5b:d5:43:bf:05:51:d4:99:82:
90:eb:31:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 04:54:09 2025 by rpki-client