Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
File: RmSbV7gX7BQ93LfXcSwiux8orHU.mft (raw, json)
Hash identifier: qRBuHdAwAcC0CDd772w9xt/sYgpIDiOORNoRU+aTViA=
Subject key identifier: 63:E1:AD:9C:70:BB:46:2D:4C:CB:0E:D1:92:F7:CA:70:BF:92:7C:89
Authority key identifier: 46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
Certificate issuer: /CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Certificate serial: 019A71B83F253FFB617FF64F6A78A59CA517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
Manifest number: 16F9
Signing time: Tue 11 Nov 2025 07:01:31 +0000
Manifest this update: Tue 11 Nov 2025 07:01:31 +0000
Manifest next update: Wed 12 Nov 2025 07:01:31 +0000
Files and hashes: 1: E48fxMRuF9_usgkv-wBA_GtkkY8.roa (hash: TJ/B+8gZ2LSJEkkPcBk2s1l74WkEA3d0hjUzJQAQi8w=)
2: RmSbV7gX7BQ93LfXcSwiux8orHU.crl (hash: Rt4YsaH0DwSf+p3gfWOJIcV0+VhTxIaps5zuFaIybwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:3f:25:3f:fb:61:7f:f6:4f:6a:78:a5:9c:a5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Validity
Not Before: Nov 11 07:01:31 2025 GMT
Not After : Nov 12 07:01:31 2025 GMT
Subject: CN=63e1ad9c70bb462d4ccb0ed192f7ca70bf927c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2b:bf:ea:98:19:e5:69:fd:36:65:41:da:ff:
89:5c:7b:67:ff:f9:43:6b:f2:0c:ec:f5:d2:ba:07:
c3:3b:6f:c0:49:d1:73:0c:6b:08:7e:12:1a:ee:34:
84:9a:f6:2e:db:17:6b:26:25:45:7c:f4:84:84:12:
9d:f7:18:56:68:a0:f1:24:14:1b:dc:05:b8:da:6d:
32:01:18:36:33:c1:93:ca:17:2c:ef:d1:16:48:73:
a6:ea:1b:85:db:a5:38:29:d9:00:22:21:e6:3c:73:
1d:9b:7e:0a:f5:56:9a:ab:e9:e8:3b:dc:9a:92:6e:
3f:58:c0:0d:e9:e0:dd:82:f0:7e:1b:53:c6:d3:c9:
40:c2:23:3f:91:ea:05:07:ef:bd:d7:28:42:a2:01:
bc:4d:fa:75:9e:9c:7e:00:3a:9b:51:3e:32:13:e0:
ac:ad:79:73:83:45:c0:ab:8b:64:27:28:b0:e2:eb:
5d:95:b0:d6:91:5d:36:80:bd:56:9d:80:91:9c:be:
d5:03:6f:94:55:06:b0:52:c1:c5:7e:9d:0d:38:aa:
9f:2a:01:bf:ad:cb:6d:c6:aa:36:d7:b5:87:d2:8a:
98:fb:34:d9:44:e6:4a:fd:0b:92:35:2d:ad:32:84:
94:15:95:4b:02:ff:ee:95:c1:f2:44:bc:65:11:af:
d5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E1:AD:9C:70:BB:46:2D:4C:CB:0E:D1:92:F7:CA:70:BF:92:7C:89
X509v3 Authority Key Identifier:
keyid:46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:5f:90:b0:5a:c7:d3:93:ce:d6:0f:62:33:34:d1:48:a0:7e:
6b:9f:28:f3:97:3d:b6:3a:a2:39:46:1c:e4:67:b9:bb:90:ec:
a1:3a:22:44:72:71:9f:dd:2d:c6:7d:ec:2c:26:43:ff:3d:f5:
73:7d:77:cc:0e:3e:d7:6b:e4:a7:6f:5c:04:1c:ff:d3:d9:91:
e9:4e:18:79:95:89:f1:d8:30:17:16:93:b1:0f:4b:c2:5b:17:
66:10:d6:ee:82:51:7b:55:5f:7e:55:05:9b:2e:a6:3b:a8:ba:
79:e9:02:31:03:e9:4e:2a:64:47:a3:da:f0:d0:79:7f:2e:ed:
24:a5:85:29:99:70:79:fd:ac:bf:11:2d:01:f8:7d:51:e2:64:
9d:1e:73:06:81:8a:68:1d:42:20:8b:23:be:35:2d:ec:11:ba:
48:dc:34:9a:b0:34:bb:11:8d:44:bd:15:13:33:bd:1f:a8:05:
c1:72:ea:32:c4:c4:86:b4:54:19:d5:56:fb:c7:a3:72:c6:30:
f7:38:65:9b:c0:a7:7d:2b:50:bd:2b:f3:4d:4e:33:ef:e6:c5:
07:d7:19:74:64:f8:db:3e:80:bc:57:6f:ed:13:bd:50:24:6d:
9f:6c:e3:e7:0c:bd:e5:8f:1b:0e:6b:a6:1b:0d:af:60:cc:30:
80:60:c0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:39 2025 by rpki-client