Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
File: RMO0TLvE89paS0KFyW6jy1DU0HM.mft (raw, json)
Hash identifier: V2GckclWBuovre/xNpyOFjdg1TmZEkzNyxVu5qYI4mI=
Subject key identifier: 0A:85:CC:CD:C0:47:66:61:15:46:7D:74:AC:8D:66:65:AF:AD:37:73
Authority key identifier: 44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
Certificate issuer: /CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Certificate serial: 019841E2D935C9BD6A5C946CAAA5732A7866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
Manifest number: 0C7B
Signing time: Fri 25 Jul 2025 14:00:42 +0000
Manifest this update: Fri 25 Jul 2025 14:00:42 +0000
Manifest next update: Sat 26 Jul 2025 14:00:42 +0000
Files and hashes: 1: Bfc7EUchdTgGElUv3uM8P6L_JN4.roa (hash: zmd7LnQJEMvAXNDrVc3GmLiOfsPuEL2IoD+oEByUhjA=)
2: RMO0TLvE89paS0KFyW6jy1DU0HM.crl (hash: SHDypfqzq3yLv3I2sYbZY7tqV4bx8Xx9NXrPtS4HA/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:e2:d9:35:c9:bd:6a:5c:94:6c:aa:a5:73:2a:78:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Validity
Not Before: Jul 25 14:00:42 2025 GMT
Not After : Jul 26 14:00:42 2025 GMT
Subject: CN=0a85cccdc047666115467d74ac8d6665afad3773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:da:fc:a8:59:08:b8:81:9d:41:77:aa:07:
69:12:de:b5:ea:84:f0:f8:13:05:60:96:3f:ee:93:
ea:b5:6d:d5:5a:f5:9f:27:30:47:79:ea:cd:59:2e:
66:fa:1f:0e:cf:d8:5a:02:dd:18:2a:19:2b:d9:73:
74:76:b1:ee:35:d1:dd:c1:e5:2e:f3:49:0d:c6:ab:
72:bb:7a:a4:bd:70:c9:2e:0f:cf:5e:05:6d:c0:cf:
8f:00:d9:c5:91:7f:c0:b6:b9:97:b3:99:62:e4:4b:
cc:b3:08:8b:f1:ff:38:d8:e7:10:06:2a:12:29:21:
3b:10:49:da:be:ae:2d:70:44:a7:05:e2:54:df:09:
a1:c1:34:84:33:d8:54:c8:7e:5c:9f:40:51:cd:5c:
0d:61:dc:5c:cb:0c:5d:df:af:52:f3:0f:f2:84:83:
40:cf:77:c8:8f:59:91:89:14:18:e6:1b:61:ec:90:
d9:4b:ed:06:c2:de:3e:c4:9a:37:8c:81:74:7c:4d:
7f:89:93:3b:36:2e:e5:68:1b:d5:99:26:59:92:75:
99:26:8a:d7:9e:38:81:29:57:81:f3:ad:af:d7:5f:
cc:b1:ab:90:b1:34:a5:fc:34:4d:50:61:39:08:d0:
4c:12:9e:4b:e4:70:6e:57:a0:a5:f4:66:3c:6c:fb:
3c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:85:CC:CD:C0:47:66:61:15:46:7D:74:AC:8D:66:65:AF:AD:37:73
X509v3 Authority Key Identifier:
keyid:44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:00:9b:bc:4e:e5:3d:41:a8:36:44:3b:d8:c3:ab:99:f0:b6:
64:35:ab:c9:2e:26:4b:e5:8b:b5:4c:f0:59:ae:ba:41:02:ad:
ab:51:ec:1a:39:6b:95:e4:16:05:6a:57:e4:73:45:86:80:31:
22:69:c7:ba:a3:a3:e3:e5:09:06:93:19:58:07:f6:36:cb:49:
fc:96:f8:2c:51:eb:e6:90:f0:dc:89:0e:98:8f:58:41:98:8d:
c0:b1:3d:5b:20:a5:98:f2:aa:3f:5a:7f:b1:33:0d:c3:1f:54:
22:52:a2:62:33:db:46:06:91:a9:cd:1d:94:5b:45:a7:e6:a9:
bd:44:5c:06:99:6a:8a:61:5e:8a:4f:6d:54:ab:38:39:3a:b7:
54:c2:3b:25:b8:3c:9d:30:98:ac:ce:55:02:64:7d:8d:8e:a5:
22:c1:26:f1:17:ad:2a:36:18:af:96:9a:a2:3b:b6:77:bf:b7:
e8:7e:ea:f9:5e:8b:01:66:53:98:7a:18:76:ca:68:4a:69:de:
5b:d0:ea:1f:10:b1:ee:d1:4c:09:bc:3c:7d:8b:75:64:45:98:
e4:90:10:6e:bf:80:55:7e:1b:a2:76:c2:08:9d:70:d2:35:5e:
d1:f5:5a:32:d7:aa:36:3d:b3:ac:ab:1d:3b:a6:3f:1e:2d:be:
6f:ad:75:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 20:57:00 2025 by rpki-client