Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
File: RNPMWRzro4YTDzyfdCZFi4iHwus.mft (raw, json)
Hash identifier: psJuNtzniosYjW/xkmDrqCWTJMoPQjFsDAqV47R+OEA=
Subject key identifier: 18:4C:60:E0:EA:9D:3D:70:E1:E6:8D:0B:4E:F2:7C:81:C7:39:40:F4
Authority key identifier: 44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
Certificate issuer: /CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Certificate serial: 01974C3214435396E62ED3C252F43A1A1BFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
Manifest number: 05A8
Signing time: Sat 07 Jun 2025 21:00:39 +0000
Manifest this update: Sat 07 Jun 2025 21:00:39 +0000
Manifest next update: Sun 08 Jun 2025 21:00:39 +0000
Files and hashes: 1: 5_5ZxyaYymDkazwik4_YUJ_u6nk.roa (hash: 0ihJyb/8cvHev60hCuqr7j7mSBpvAI6EqaNQNOqgNHg=)
2: RNPMWRzro4YTDzyfdCZFi4iHwus.crl (hash: Ie6ja//ut0fQIMwKMsPLZd9U/u6UjZfHr9zX5rg5+7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:14:43:53:96:e6:2e:d3:c2:52:f4:3a:1a:1b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Validity
Not Before: Jun 7 21:00:39 2025 GMT
Not After : Jun 8 21:00:39 2025 GMT
Subject: CN=184c60e0ea9d3d70e1e68d0b4ef27c81c73940f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:16:95:9f:c9:6b:20:8c:e2:e2:5f:49:7d:
97:92:f0:22:2b:20:57:b7:b4:27:4c:32:0f:5d:d8:
54:fc:c7:f7:88:34:90:f0:d5:6d:13:c4:31:f8:e6:
0a:30:40:85:53:a9:e9:a2:e5:eb:e2:36:48:71:0b:
41:48:67:12:55:3b:3b:a0:6a:fd:c2:78:91:dd:d5:
6c:c0:48:33:d8:67:1d:3c:4c:8d:d0:29:d7:6b:aa:
34:05:d7:cc:a2:2e:04:96:83:d9:db:ba:90:55:23:
ac:38:4f:ff:9f:20:fc:c1:41:b2:20:be:16:ba:69:
94:b3:2b:78:32:09:47:9f:f7:eb:51:64:f8:7f:50:
cb:45:f2:e4:e1:70:66:d0:5f:b4:1f:36:d6:b3:72:
50:91:9a:ee:eb:46:2c:c7:86:03:61:0a:d7:02:fb:
60:d8:c0:16:7b:12:cc:82:29:44:4f:f2:82:45:8d:
42:e4:73:6b:46:5c:18:62:63:9e:1e:bf:68:58:df:
86:33:e7:1b:88:03:d4:91:18:3e:0b:82:b8:c1:2d:
21:7f:37:d8:58:d7:5e:3c:1c:6f:4d:f0:cf:7e:e3:
17:1c:fb:d8:1a:d1:43:3b:75:43:1a:e8:5f:1b:8d:
86:8c:56:40:d9:d0:58:15:9f:44:07:e1:87:9b:6d:
a2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4C:60:E0:EA:9D:3D:70:E1:E6:8D:0B:4E:F2:7C:81:C7:39:40:F4
X509v3 Authority Key Identifier:
keyid:44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:56:19:24:9b:9c:92:77:c7:1f:04:5d:dc:ee:c2:62:5b:5e:
8c:d5:4f:a9:42:37:f9:0b:a9:99:f6:dc:09:ab:b8:c0:d8:b2:
64:d4:41:e2:9f:d6:f5:bc:e5:a9:90:88:3f:39:a6:1b:e2:d3:
bc:98:3f:7c:cf:f8:fa:82:66:9d:54:ad:0c:21:4e:2b:18:ec:
cc:29:81:47:2f:cd:6f:ac:43:0e:95:ec:75:41:83:08:b9:d0:
80:71:0e:f9:0d:47:99:e5:af:38:be:d5:33:71:e9:99:07:b5:
f2:99:1f:1f:8f:e4:b5:ce:65:b4:9b:1b:db:c3:22:49:b1:38:
49:9c:3e:a3:cb:22:76:9a:fb:f3:1d:99:e5:d2:d7:a6:7a:6f:
da:d0:8f:ae:cb:eb:c4:f3:d9:c6:cc:2b:c2:d4:cf:c7:3c:52:
d1:4c:0d:c6:61:50:bb:17:0b:97:d4:bc:3f:db:81:d0:70:2a:
8d:00:ca:78:6b:0a:89:af:93:63:68:45:e9:29:7f:97:2c:5f:
bc:1d:cc:03:e1:3c:d9:c8:a7:73:81:c5:a3:61:db:2a:bc:57:
9c:20:3f:5a:cf:f8:5c:23:78:27:c0:63:65:b7:d0:c8:08:53:
e5:4d:a5:94:1f:2f:f8:dc:9a:ff:71:87:9c:e6:35:37:2b:51:
1e:08:5b:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMMhRDU5bmLtPCUvQ6Ghv7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZDNjYzU5MWNlYmEzODYxMzBmM2M5Zjc0MjY0NThiODg4
N2MyZWIwHhcNMjUwNjA3MjEwMDM5WhcNMjUwNjA4MjEwMDM5WjAzMTEwLwYDVQQD
EygxODRjNjBlMGVhOWQzZDcwZTFlNjhkMGI0ZWYyN2M4MWM3Mzk0MGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh8WlZ/JayCM4uJfSX2XkvAiKyBX
t7QnTDIPXdhU/Mf3iDSQ8NVtE8Qx+OYKMECFU6npouXr4jZIcQtBSGcSVTs7oGr9
wniR3dVswEgz2GcdPEyN0CnXa6o0BdfMoi4EloPZ27qQVSOsOE//nyD8wUGyIL4W
ummUsyt4MglHn/frUWT4f1DLRfLk4XBm0F+0HzbWs3JQkZru60Ysx4YDYQrXAvtg
2MAWexLMgilET/KCRY1C5HNrRlwYYmOeHr9oWN+GM+cbiAPUkRg+C4K4wS0hfzfY
WNdePBxvTfDPfuMXHPvYGtFDO3VDGuhfG42GjFZA2dBYFZ9EB+GHm22i0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhMYODqnT1w4eaNC07yfIHHOUD0MB8GA1UdIwQY
MBaAFETTzFkc66OGEw88n3QmRYuIh8LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk5QTVdSenJvNFlURHp5ZmRDWkZpNGlId3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My80MzYyOWEtNWE0ZC00YmRmLTk5Zjgt
MmJiNjU0MDhkZjc0LzEvUk5QTVdSenJvNFlURHp5ZmRDWkZpNGlId3VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My80MzYyOWEtNWE0ZC00YmRmLTk5ZjgtMmJiNjU0MDhkZjc0
LzEvUk5QTVdSenJvNFlURHp5ZmRDWkZpNGlId3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr1YZJJuc
knfHHwRd3O7CYltejNVPqUI3+QupmfbcCau4wNiyZNRB4p/W9bzlqZCIPzmmG+LT
vJg/fM/4+oJmnVStDCFOKxjszCmBRy/Nb6xDDpXsdUGDCLnQgHEO+Q1HmeWvOL7V
M3HpmQe18pkfH4/ktc5ltJsb28MiSbE4SZw+o8sidpr78x2Z5dLXpnpv2tCPrsvr
xPPZxswrwtTPxzxS0UwNxmFQuxcLl9S8P9uB0HAqjQDKeGsKia+TY2hF6Sl/lyxf
vB3MA+E82cinc4HFo2HbKrxXnCA/Ws/4XCN4J8BjZbfQyAhT5U2llB8v+Nya/3GH
nOY1NytRHghb2A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:25:45 2025 by rpki-client