Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.mft
File: RmSWpNugTX71InAAYXQ8bF0K5ZA.mft (raw, json)
Hash identifier: nO9vZv+zoM8fvR9+7MU4CVsGyhFipxT2vlkUUOzdsWw=
Subject key identifier: F3:4B:15:A0:E1:0E:7B:CB:DF:E4:AD:86:59:0B:B4:2C:7F:F2:D1:45
Authority key identifier: 46:64:96:A4:DB:A0:4D:7E:F5:22:70:00:61:74:3C:6C:5D:0A:E5:90
Certificate issuer: /CN=466496a4dba04d7ef522700061743c6c5d0ae590
Certificate serial: 019A71B7C48B12AA28C2E0F8FDD3A7123FFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmSWpNugTX71InAAYXQ8bF0K5ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.mft
Manifest number: FF
Signing time: Tue 11 Nov 2025 07:01:00 +0000
Manifest this update: Tue 11 Nov 2025 07:01:00 +0000
Manifest next update: Wed 12 Nov 2025 07:01:00 +0000
Files and hashes: 1: 3cYwGEYRvz1yKJhsQiVSnoCXk2c.roa (hash: 7LKNIki25we3oiggzy3/a1vHXwiHcC9D9HO/l5A+7h0=)
2: RmSWpNugTX71InAAYXQ8bF0K5ZA.crl (hash: oamOyo5XLNPSG5hWFc9/m3/+riNcfX+ZvZSSlMkMh80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmSWpNugTX71InAAYXQ8bF0K5ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c4:8b:12:aa:28:c2:e0:f8:fd:d3:a7:12:3f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=466496a4dba04d7ef522700061743c6c5d0ae590
Validity
Not Before: Nov 11 07:01:00 2025 GMT
Not After : Nov 12 07:01:00 2025 GMT
Subject: CN=f34b15a0e10e7bcbdfe4ad86590bb42c7ff2d145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6f:fd:70:0a:14:b5:7d:99:01:48:17:2c:6a:
45:72:ee:58:10:6a:98:a9:f2:92:9e:e7:9f:ea:35:
3f:28:ab:7a:d3:8a:c4:c2:f6:5f:60:3f:b4:68:e7:
df:52:7d:07:0a:bd:de:25:5d:7f:32:d4:ae:ae:46:
5d:9d:e1:21:3c:b6:99:c8:1a:66:eb:84:f8:fc:5d:
32:f5:b5:9f:02:60:d5:58:5b:80:96:7a:40:73:ef:
46:5a:3b:d3:67:c2:98:35:50:fa:ba:41:10:4e:3f:
7f:3d:40:59:6b:af:e5:d6:e4:39:50:62:99:cd:06:
19:78:b7:90:b7:c4:f0:50:13:69:e3:8f:d1:6d:ab:
77:47:1b:87:4c:1e:4c:fc:bb:91:c2:a8:6d:cf:fd:
45:b7:f0:20:7a:8e:d2:6b:9c:4d:4e:59:33:81:01:
5a:d6:73:00:2c:73:ef:30:b7:45:7f:7c:82:2f:66:
4c:d5:b0:1f:41:69:82:85:7d:86:fe:c3:f4:f4:d5:
89:95:8f:af:20:a1:51:78:d6:12:33:bd:20:af:09:
a3:4a:9c:1c:17:b3:3d:8e:4f:db:62:32:60:55:49:
d2:c5:b8:a8:08:25:00:77:3f:8d:a5:90:ed:96:4f:
88:de:59:44:cb:35:6b:da:bd:8d:c4:86:0d:11:31:
40:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4B:15:A0:E1:0E:7B:CB:DF:E4:AD:86:59:0B:B4:2C:7F:F2:D1:45
X509v3 Authority Key Identifier:
keyid:46:64:96:A4:DB:A0:4D:7E:F5:22:70:00:61:74:3C:6C:5D:0A:E5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSWpNugTX71InAAYXQ8bF0K5ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:25:37:77:cf:f5:dd:2c:e8:81:0f:60:09:04:83:d5:0f:da:
91:a4:88:6a:0a:f5:3f:b9:6b:06:cf:9b:1b:0f:47:d2:19:78:
b4:1f:a0:2e:bc:64:91:27:df:0a:9e:56:e4:3e:8b:da:0f:37:
6c:a2:33:8f:20:7f:c8:2c:eb:db:10:89:4f:ae:b0:33:aa:9f:
09:5f:16:08:85:bb:63:97:7a:94:2d:46:0e:65:21:04:24:98:
58:29:75:8d:38:b8:97:ca:c1:94:c5:55:61:c8:92:72:3a:92:
08:c0:3b:79:91:2c:40:8b:bd:df:4f:37:7f:c8:87:3c:2d:3b:
2e:5b:0f:e5:38:d8:53:f2:b0:32:fc:58:86:21:ed:32:17:04:
5b:82:e8:a0:1c:bc:22:b4:75:6e:77:07:7c:77:e4:f2:78:cc:
43:46:4d:9b:ed:32:bc:a9:d0:02:b6:6c:36:0d:39:4f:ef:95:
6a:1d:6d:68:e7:94:c7:05:a2:62:fc:0d:c4:5a:d0:d7:df:02:
6a:a5:97:3b:3b:2a:41:5a:6b:23:03:2e:94:8a:7b:ce:f9:b7:
dc:79:c6:50:3b:1f:f8:3b:b9:fd:b1:17:e2:a5:2e:b1:55:4a:
68:24:2a:6c:7c:0b:81:62:83:a6:bb:4e:37:49:57:aa:b3:22:
fa:45:19:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:02 2025 by rpki-client