
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
File: RNPMWRzro4YTDzyfdCZFi4iHwus.mft (raw, json)
Hash identifier: aroy3ZRp679SrK6XQFVLOsONf6Gc9v+Gla/AHkGQln8=
Subject key identifier: BE:EF:5F:86:50:41:B8:25:32:EC:B7:A5:F3:BF:7C:F0:0C:6F:A2:E5
Authority key identifier: 44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
Certificate issuer: /CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Certificate serial: 019933128E24A3868DA122F0E321F218CB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
Manifest number: 06A4
Signing time: Wed 10 Sep 2025 10:01:17 +0000
Manifest this update: Wed 10 Sep 2025 10:01:17 +0000
Manifest next update: Thu 11 Sep 2025 10:01:17 +0000
Files and hashes: 1: 5_5ZxyaYymDkazwik4_YUJ_u6nk.roa (hash: 0ihJyb/8cvHev60hCuqr7j7mSBpvAI6EqaNQNOqgNHg=)
2: RNPMWRzro4YTDzyfdCZFi4iHwus.crl (hash: 2ZfVL5vHZYi389Y1nSSbk1fnOJZuM2FgxCe19op1YRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:12:8e:24:a3:86:8d:a1:22:f0:e3:21:f2:18:cb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Validity
Not Before: Sep 10 10:01:17 2025 GMT
Not After : Sep 11 10:01:17 2025 GMT
Subject: CN=beef5f865041b82532ecb7a5f3bf7cf00c6fa2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a9:1e:36:c7:bd:16:15:cf:3d:02:60:48:92:
ce:3d:ba:19:f3:f3:4c:04:3e:a3:48:b6:d2:3a:79:
13:a4:6d:55:c1:f9:9c:6e:1c:64:d0:f9:af:f4:39:
f9:04:d1:ea:d2:62:8c:d4:17:cb:7e:ca:9f:bc:bf:
e6:d3:5a:37:40:a3:20:1f:da:13:f3:32:0e:6e:d5:
9a:dd:de:a2:5b:70:03:9a:0a:d7:25:92:50:8d:f1:
2f:1d:87:8a:44:34:9e:c8:bf:4a:77:38:02:b0:2c:
9d:e6:4b:01:fc:25:da:a4:9c:78:77:e3:37:d6:2d:
cd:8a:4f:f0:d8:a9:cc:b7:34:51:74:0a:7e:c5:09:
c1:4b:04:db:ca:8d:2b:ed:a6:c7:27:7f:5b:f9:c6:
58:51:c0:77:df:57:16:5a:d6:1e:a2:00:3f:31:e2:
7f:c5:d4:3c:8f:5e:61:ca:75:20:40:37:ef:1b:ab:
e1:90:cb:7a:d3:a1:bc:e6:0b:8c:2d:f1:47:71:71:
d6:e4:9c:f4:13:94:b4:58:a6:ec:d9:61:83:5c:58:
80:a8:8d:2d:a8:e8:23:31:93:6a:af:53:74:86:11:
85:c0:da:df:9b:88:00:7a:6d:c2:f3:68:f0:27:ba:
6f:30:4a:5c:40:fe:91:4b:35:4c:ce:27:75:92:58:
ae:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EF:5F:86:50:41:B8:25:32:EC:B7:A5:F3:BF:7C:F0:0C:6F:A2:E5
X509v3 Authority Key Identifier:
keyid:44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d8:9a:ae:84:53:86:f4:8a:81:03:a7:b1:b0:57:a5:26:95:
23:f2:db:cb:ae:ca:5e:62:c6:1e:7c:a9:d2:90:ae:90:7a:2d:
10:ca:d9:f9:d8:40:04:d6:fb:58:cc:e7:43:0f:ef:5c:fd:55:
d4:72:5a:e5:eb:5d:82:05:ac:fe:5d:2a:b6:93:1c:32:1a:f1:
01:7f:9b:22:73:ca:0c:f9:1a:6b:b0:84:74:14:c3:0d:cc:74:
32:e8:bf:24:c0:b7:cc:d5:6f:17:33:be:24:18:f0:6f:1a:4c:
98:1c:1e:12:11:e2:d6:99:e0:b2:b1:8f:2a:e7:da:d3:f2:98:
d8:3e:c3:73:dd:8d:f6:79:57:2c:f9:d5:b4:9d:e1:b8:8d:d5:
b9:9c:60:d2:bc:e1:72:ce:03:9f:f9:0a:8f:4a:e2:82:fb:68:
46:c8:92:23:fd:36:19:9c:c6:fb:08:5b:04:76:12:f7:77:f1:
44:3b:76:f3:c3:c3:93:33:d8:ed:20:c9:ef:15:a9:ff:ba:a1:
1f:f7:58:8f:08:fc:f3:de:8d:eb:a1:68:65:98:0b:7b:a6:5d:
05:d0:76:46:93:9a:2b:50:0e:27:db:67:f6:a3:c4:56:03:a8:
c7:78:f8:7f:35:1e:9c:e2:77:e3:91:eb:4a:a0:18:c3:22:9c:
2c:71:71:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:36:03 2025 by rpki-client