Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
File: RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft (raw, json)
Hash identifier: W1ZgoRmL5O3wB8fSd+xCmXlnyunSNxChHgJLgk6XtNM=
Subject key identifier: 62:BD:64:B8:25:93:24:86:B9:5F:E6:C5:84:E4:8D:A3:4F:AF:CB:68
Authority key identifier: 44:CF:3F:A7:07:4E:73:04:B1:F3:2E:16:64:AD:5F:71:57:D6:5D:62
Certificate issuer: /CN=44cf3fa7074e7304b1f32e1664ad5f7157d65d62
Certificate serial: 019A71B8659C802E0186131F25891FDD2AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:01:41 +0000
Manifest this update: Tue 11 Nov 2025 07:01:41 +0000
Manifest next update: Wed 12 Nov 2025 07:01:41 +0000
Files and hashes: 1: RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl (hash: 6L/XV0lwIpuZAUzDvW7Z/sh014fI+9XztqUBkIKM/5w=)
2: eIPu-oRSt6i1dIgnDCklFRUAlSQ.roa (hash: Sgde8KLLocp16u9bpO8WIWMRQrBpRylsfdhGYkOvJ1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:65:9c:80:2e:01:86:13:1f:25:89:1f:dd:2a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44cf3fa7074e7304b1f32e1664ad5f7157d65d62
Validity
Not Before: Nov 11 07:01:41 2025 GMT
Not After : Nov 12 07:01:41 2025 GMT
Subject: CN=62bd64b825932486b95fe6c584e48da34fafcb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:87:8f:b2:f9:14:9c:43:b0:9f:7d:11:08:
87:b2:5e:a9:f9:84:ed:80:66:46:64:c6:9c:e6:26:
51:de:47:81:69:5b:ad:3b:24:f1:33:39:4d:25:ec:
a0:52:74:61:ab:56:14:a8:da:98:ef:b2:5a:5f:d5:
91:4b:86:61:82:5b:e6:48:54:ab:91:83:1f:e6:fa:
ce:75:d3:52:28:ca:c2:52:3f:fe:fd:49:ec:83:c7:
2a:e9:44:e3:55:59:a2:31:4d:62:ec:1b:01:88:f5:
aa:c6:eb:3a:3b:b3:5b:19:04:fd:9c:52:7a:36:d4:
34:0d:e5:52:f0:dc:34:26:e6:bf:6c:2e:87:ce:33:
d8:8e:70:20:ec:1b:c5:65:fc:a8:12:34:95:3c:29:
02:10:c3:cf:8c:ac:e0:54:98:50:de:28:4c:b1:19:
3e:2b:ff:79:9b:b4:bd:55:c9:c1:5d:1a:d6:7a:f3:
ff:f0:75:7b:14:f3:0d:e1:56:58:bc:90:44:a5:64:
d5:6e:93:cf:32:e6:ac:7c:f2:cd:ff:02:5d:b1:16:
40:ee:62:06:80:fd:ac:e2:f1:df:12:23:eb:dd:f4:
6a:eb:85:2e:06:7b:23:95:5b:da:93:9b:34:a2:b2:
b0:31:1f:be:10:fc:81:d7:61:04:ba:2e:e0:84:96:
d5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BD:64:B8:25:93:24:86:B9:5F:E6:C5:84:E4:8D:A3:4F:AF:CB:68
X509v3 Authority Key Identifier:
keyid:44:CF:3F:A7:07:4E:73:04:B1:F3:2E:16:64:AD:5F:71:57:D6:5D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:89:35:2a:7d:ae:f5:d2:91:79:98:74:4d:e7:ce:12:32:fc:
6c:c4:2d:09:da:91:f9:16:38:f1:c7:76:ca:7a:3c:7c:3f:af:
f1:ab:6a:9c:c1:62:0a:77:3a:fd:2f:c0:b0:59:da:c0:79:90:
d1:ae:61:a2:92:e0:fc:6f:88:18:ec:b9:0d:f1:48:d2:8b:dd:
34:01:c4:b9:12:de:e7:a2:5c:34:e9:6c:ad:53:d9:63:62:fb:
87:2c:11:a8:7b:6a:5f:e0:7b:5c:c0:23:f5:07:82:67:ad:14:
1a:ed:13:ca:07:40:99:52:25:58:11:cf:d2:90:a8:34:c0:05:
c9:73:47:e8:91:c3:28:0b:19:a4:a3:c5:02:97:5f:b6:03:ae:
ff:0f:74:0c:a9:17:70:c4:91:cc:a7:ed:c6:75:50:21:ce:fc:
19:ff:42:1f:0e:70:8a:e1:a0:dc:f5:73:a8:a4:3b:b9:76:18:
6a:86:a1:98:b3:68:45:63:28:c5:db:af:df:1b:7b:30:2f:d5:
c2:5a:c8:11:c4:db:26:78:ba:f9:56:db:d9:25:c3:ee:53:92:
82:29:d3:00:47:c6:36:68:44:7a:8c:6b:6e:76:e9:56:f1:fa:
c1:27:e5:8b:b2:29:af:41:23:4d:35:f4:e2:54:56:89:5c:3b:
82:c9:fc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:56 2025 by rpki-client