Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
File: RMDyoqVgB-TEXMxx59oJKGEwWyA.mft (raw, json)
Hash identifier: Mm5/PwNslsiENiPD+1kEPar9Ma7R8ONTyptdhEGNyvk=
Subject key identifier: 6D:2A:FC:1C:AD:93:CC:8B:F1:AB:8E:20:58:2C:9A:82:DF:1B:82:7F
Authority key identifier: 44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
Certificate issuer: /CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Certificate serial: 019933B7814F83DE6A47C221289691E93119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 13:01:28 +0000
Manifest this update: Wed 10 Sep 2025 13:01:28 +0000
Manifest next update: Thu 11 Sep 2025 13:01:28 +0000
Files and hashes: 1: AaeTZJ_Mx4pF3TF16wEEVAdeKg4.roa (hash: uC6UcXyt2Kmfls1QdacCrz5Tf6o/T5Y+fDQ00/99ycM=)
2: RMDyoqVgB-TEXMxx59oJKGEwWyA.crl (hash: bENF0KKlfuv1ZA5062h+G47S4cnUPYegJIptRZoLVnc=)
3: j-Ifej8p6sYfHH1KeQ_QH-keweY.roa (hash: iVB6o7qwOuA1Lj9sG4cTIYUNVhckFRweng10RlAwHI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b7:81:4f:83:de:6a:47:c2:21:28:96:91:e9:31:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Validity
Not Before: Sep 10 13:01:28 2025 GMT
Not After : Sep 11 13:01:28 2025 GMT
Subject: CN=6d2afc1cad93cc8bf1ab8e20582c9a82df1b827f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:94:2a:8d:a1:0d:0e:46:84:4d:88:2c:45:
07:ef:86:53:19:aa:df:d0:45:68:c6:93:0c:ba:cf:
68:3e:dd:2a:ce:5b:dc:06:eb:98:f9:12:2e:1f:d4:
4d:98:d5:01:04:66:5d:b5:32:91:5d:02:a4:87:84:
c8:e6:44:a5:d6:c5:eb:3d:11:b5:4e:d1:4f:be:c0:
1b:15:cf:e0:12:fb:f2:7b:44:40:f7:fd:56:89:aa:
56:12:d7:e9:ab:9a:8d:7b:50:81:66:dc:50:81:e5:
55:e2:b9:c9:c7:2c:af:1b:e5:29:de:96:c7:ef:65:
71:52:15:fa:3c:03:75:c6:fb:7c:9e:f1:64:6f:2e:
a7:16:df:bb:60:f3:61:59:f3:1a:7a:80:28:2b:e3:
bd:3d:44:92:2a:d6:b2:20:15:57:be:3e:5b:3e:74:
70:b5:29:fb:22:56:4a:0c:97:c0:3c:0a:e6:f1:07:
b9:08:51:27:c9:3c:10:fe:1b:79:f2:55:b1:1f:6f:
25:e9:30:ca:4f:a0:34:10:f5:79:12:44:22:d1:d7:
a8:6c:87:b1:ca:43:1c:55:32:f8:7f:ce:9c:3e:ed:
a4:c7:25:31:71:e8:3b:be:6c:7a:2e:e7:79:a6:5f:
f2:73:d9:39:0c:ef:16:00:7c:4b:c8:81:02:ef:24:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2A:FC:1C:AD:93:CC:8B:F1:AB:8E:20:58:2C:9A:82:DF:1B:82:7F
X509v3 Authority Key Identifier:
keyid:44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:06:02:79:1b:f5:2a:82:d9:a6:64:32:09:75:9b:ef:98:b2:
0b:12:87:b8:48:6d:0a:30:9b:9e:72:e5:9d:1d:11:4f:95:34:
ca:74:97:f3:5c:b9:89:be:b3:f8:7c:ce:84:da:6c:99:f3:50:
9f:12:db:85:c1:98:07:ed:c7:18:ef:90:45:1e:80:e3:3e:3a:
e4:21:ea:a4:a0:a6:d1:e7:8a:f7:e7:d6:a8:70:e7:e4:a4:39:
09:28:19:4e:c1:e7:d7:dc:1c:07:79:61:15:7b:32:ca:de:32:
fa:42:f1:ef:15:be:2c:4d:9c:42:07:6d:f8:1a:c0:c6:16:44:
ab:7b:d9:5c:ce:be:65:ba:ea:bd:67:79:09:0c:63:5d:0e:91:
2f:19:93:f5:c1:c5:e6:f3:3a:6d:f4:87:4c:c2:f2:43:20:f0:
b7:35:2e:4e:b4:8b:c0:b6:7d:5b:c2:26:7f:8c:cc:cb:79:2a:
8f:80:95:66:3c:66:79:66:9e:f3:c3:23:ae:16:1c:74:8a:53:
29:56:42:88:b7:23:e9:e9:8f:fc:19:6d:b0:fb:fa:8a:1c:80:
32:5c:ce:6f:90:4f:2a:73:79:86:e9:4f:97:5e:d5:40:b3:8b:
14:2f:7e:83:0e:fe:6f:d3:3b:f1:57:da:10:2e:c7:02:cf:f5:
3d:e6:13:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:12:02 2025 by rpki-client