Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
File: RMO0TLvE89paS0KFyW6jy1DU0HM.mft (raw, json)
Hash identifier: JiBXAn95e1MkVnf+aUp9wx2zOz87wYoWwtd6FhWpkSk=
Subject key identifier: FA:05:A3:A9:0A:3A:1F:F8:EF:0E:C9:38:61:DC:E0:A9:5A:7B:74:55
Authority key identifier: 44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
Certificate issuer: /CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Certificate serial: 019A0B93FD29EBD8B7DD18378B7BD37D9F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
Manifest number: 0D68
Signing time: Wed 22 Oct 2025 11:00:39 +0000
Manifest this update: Wed 22 Oct 2025 11:00:39 +0000
Manifest next update: Thu 23 Oct 2025 11:00:39 +0000
Files and hashes: 1: Bfc7EUchdTgGElUv3uM8P6L_JN4.roa (hash: zmd7LnQJEMvAXNDrVc3GmLiOfsPuEL2IoD+oEByUhjA=)
2: RMO0TLvE89paS0KFyW6jy1DU0HM.crl (hash: KhnwfJOLfv2nTV90OMrV2moDxDv+1KLMOS2VxJhnetk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:93:fd:29:eb:d8:b7:dd:18:37:8b:7b:d3:7d:9f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Validity
Not Before: Oct 22 11:00:39 2025 GMT
Not After : Oct 23 11:00:39 2025 GMT
Subject: CN=fa05a3a90a3a1ff8ef0ec93861dce0a95a7b7455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:3a:a5:df:87:00:9a:a6:95:0d:f8:87:06:
ff:9e:d5:12:58:65:10:67:30:b2:d9:d5:92:15:85:
8c:14:80:82:2d:98:54:94:36:4e:dd:0e:08:1a:ab:
83:9d:50:ba:d8:c4:e9:c3:4c:c5:ac:4b:f5:2b:f3:
c3:41:c4:a0:35:42:4b:16:c4:30:2e:63:7a:33:7e:
fa:3c:2f:a7:81:39:26:88:61:01:4d:4d:5e:e8:d2:
11:d1:d9:0d:7c:0c:aa:f4:0b:a4:2a:27:08:11:df:
73:1c:31:a2:e4:fa:b5:44:90:72:cb:ea:e4:ca:ce:
fc:37:eb:91:f4:53:18:38:4a:dc:17:4d:09:2d:e4:
29:32:a4:95:ad:e1:29:2b:e1:14:0e:cc:39:3b:f9:
6a:46:56:ee:7b:72:2e:72:a9:d1:96:56:a5:4c:0a:
f4:c9:81:44:40:c4:a5:10:aa:8f:37:0a:7f:dc:c3:
19:a7:b2:2d:c2:11:83:54:e9:bc:a2:47:cd:13:a9:
59:1f:0a:e2:c3:18:fa:06:c3:41:00:7e:d3:06:8c:
da:91:41:fd:af:52:b5:91:41:9f:09:7a:fa:1b:aa:
70:10:e4:2b:bd:4f:ca:0f:7c:ea:73:a9:24:b1:d5:
f1:58:04:75:6b:63:6c:f9:43:10:d3:ef:56:90:a3:
bc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:05:A3:A9:0A:3A:1F:F8:EF:0E:C9:38:61:DC:E0:A9:5A:7B:74:55
X509v3 Authority Key Identifier:
keyid:44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:bb:12:9f:da:89:7c:7b:77:77:94:f6:bd:5d:57:55:82:8f:
09:81:cb:ed:92:f5:93:4e:e5:6f:4c:08:0a:3e:53:e8:64:8b:
ae:c0:f5:00:b6:76:ea:5b:57:cb:55:9d:a7:56:0e:a9:ca:4c:
6a:53:54:7e:7d:bb:97:52:a6:9a:d3:4a:3e:b0:61:73:31:ba:
4d:e4:d9:c9:83:f0:fe:da:9e:5c:6a:cd:5a:78:cd:10:64:e2:
04:a4:f5:3e:81:76:fb:2a:17:24:e7:a0:e9:98:31:71:a4:dc:
8b:79:19:dd:6f:b0:fc:99:6d:fa:0d:75:c1:70:72:5c:f3:d6:
1d:4e:bb:a1:b7:5a:92:b7:06:e6:be:6a:8a:b4:90:7c:46:4f:
9d:78:52:c8:a4:c0:8a:0a:6a:1f:35:4d:d3:42:63:95:b7:33:
e0:4a:50:f9:db:eb:09:a3:c6:a5:ea:b8:f1:d2:78:c1:10:46:
95:11:13:1b:97:e9:24:cb:26:b2:c6:b1:e7:fe:66:b4:70:b3:
4a:00:87:18:37:15:53:29:41:f3:99:79:01:8c:51:ff:4b:45:
a0:de:9f:5d:2a:cf:5d:8a:eb:a0:44:ac:18:0c:36:41:b2:2a:
5e:b7:04:1a:91:b4:1d:44:60:f4:2c:6f:8b:a8:8c:94:7a:69:
50:cd:ce:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 19:50:22 2025 by rpki-client