Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
File: rmRaywIXx0oP004XpT297lbwEeU.mft (raw, json)
Hash identifier: NMSkHYTbO/AeVen/K1DOOBQdMp0PC3223S9LEG3s3gE=
Subject key identifier: 46:13:2B:75:3D:87:B6:11:80:6F:0D:DC:8F:6E:D2:03:33:71:E8:A1
Authority key identifier: AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
Certificate issuer: /CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Certificate serial: 0199228D0E80E1E42D2BA33557DC9544D6C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
Manifest number: 1069
Signing time: Sun 07 Sep 2025 05:01:33 +0000
Manifest this update: Sun 07 Sep 2025 05:01:33 +0000
Manifest next update: Mon 08 Sep 2025 05:01:33 +0000
Files and hashes: 1: 9gPdnlu8pzrUW3Ji0sxUHZw4ZQ4.roa (hash: tZpT15jv998HP7FRsRavbx2dzEDkME8mtW6HPMKG8Zg=)
2: rmRaywIXx0oP004XpT297lbwEeU.crl (hash: zqKsOvYbN3rK00F5Rabz9G5BBN03RTv7j9a/iJPUeqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:0e:80:e1:e4:2d:2b:a3:35:57:dc:95:44:d6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae645acb0217c74a0fd34e17a53dbdee56f011e5
Validity
Not Before: Sep 7 05:01:33 2025 GMT
Not After : Sep 8 05:01:33 2025 GMT
Subject: CN=46132b753d87b611806f0ddc8f6ed2033371e8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:a7:72:9d:05:a6:5a:02:11:59:37:c5:fa:
f7:6c:6a:dc:a5:35:48:82:c0:a1:aa:4e:1a:5f:1d:
47:6c:4d:bd:0f:22:fe:9a:48:f7:07:50:68:87:bd:
87:ed:98:8b:ef:e4:20:a6:78:4f:42:9e:bf:f4:0b:
0f:e8:b8:10:7e:da:ba:36:54:f4:c4:a2:bb:3e:4b:
99:98:14:40:50:77:3e:12:f3:ce:78:d8:aa:66:be:
5e:5a:0f:38:a6:42:ef:3d:38:27:d6:61:17:94:0c:
69:d0:e1:91:af:38:a7:b1:b6:62:47:44:a9:c6:64:
d7:ed:27:11:fa:2f:81:e8:47:44:83:90:29:06:7b:
32:61:29:1d:69:6e:19:2c:24:44:83:94:cd:44:0d:
5a:85:90:55:dd:05:cb:0f:57:bf:af:c5:8c:9d:95:
9e:66:74:77:5a:8c:86:f8:13:8a:a0:d4:df:cc:d5:
ce:2c:2b:db:c8:7e:29:10:ae:51:bc:a8:0f:5a:11:
0e:cb:02:7d:28:8e:18:6a:ee:cb:c8:3a:10:dd:dc:
40:7b:d4:07:52:73:07:69:80:fc:3f:01:7a:70:5a:
68:3e:48:b7:19:e0:fe:01:08:1b:2a:09:32:73:c5:
c4:81:56:08:c3:7f:df:56:1a:67:58:ca:64:9a:8c:
66:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:13:2B:75:3D:87:B6:11:80:6F:0D:DC:8F:6E:D2:03:33:71:E8:A1
X509v3 Authority Key Identifier:
keyid:AE:64:5A:CB:02:17:C7:4A:0F:D3:4E:17:A5:3D:BD:EE:56:F0:11:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmRaywIXx0oP004XpT297lbwEeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0ed33a-1f1d-4281-ab39-40890130dd18/1/rmRaywIXx0oP004XpT297lbwEeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6b:3e:8e:29:90:89:ce:e0:26:27:37:8b:aa:a5:7e:64:0e:
89:15:6f:c7:61:cb:b3:f0:06:98:3b:4c:6f:a2:b2:84:d1:0e:
24:86:eb:be:84:22:6f:7f:37:0a:56:06:a2:92:19:84:91:cb:
48:82:6a:4f:92:93:a8:5f:5b:b5:8d:5b:76:4b:96:1c:21:5a:
06:46:17:6c:43:fe:1c:d1:3e:a6:f5:de:6b:32:55:0f:76:ca:
0a:10:00:b2:90:d3:68:47:8e:f1:6e:4e:b9:46:2b:66:90:aa:
cc:72:bb:18:fd:f7:ee:e3:ad:51:50:8c:51:11:52:7f:cf:5a:
4b:1a:e6:3d:0e:78:39:5d:3d:70:cb:29:a4:f2:23:16:ba:bb:
ba:74:51:0c:5e:83:1a:fc:1c:93:d0:a9:26:44:65:2c:5b:4e:
eb:91:7c:50:de:94:2c:ea:f1:d8:2b:68:22:92:25:58:ab:61:
5a:9c:da:7d:c7:2a:ad:c4:a3:b3:56:aa:0a:89:de:54:79:7e:
4d:8c:47:ba:6a:ec:ca:62:58:b5:39:9a:6b:8e:75:be:28:41:
47:80:60:5c:13:38:2c:db:fb:32:79:36:45:70:10:f7:fa:1c:
7e:70:e7:99:ea:81:cb:27:69:db:52:9a:7b:1b:01:db:95:0f:
4d:11:8f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:10:26 2025 by rpki-client