Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
File: RMRFXrsJGC1PvrO0Vg4giYbhriE.mft (raw, json)
Hash identifier: rUxyDELW2jSaPqd7NMElPnObUJ16BchN8jjYdHKNkYE=
Subject key identifier: B5:A9:4D:F5:6C:45:68:9D:54:7B:15:FA:D4:88:4E:59:74:D9:FA:06
Authority key identifier: 44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
Certificate issuer: /CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Certificate serial: 019A72936667A2639E854271EC3F8522FE0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 11:00:53 +0000
Manifest this update: Tue 11 Nov 2025 11:00:53 +0000
Manifest next update: Wed 12 Nov 2025 11:00:53 +0000
Files and hashes: 1: RMRFXrsJGC1PvrO0Vg4giYbhriE.crl (hash: 7PKu5FutUtepPuFNHj+1CDVi9qGdjPma1rUzFbxK/kg=)
2: W1HT74Ti-eehsN9aFk8FhX6Amk0.roa (hash: 3zzhU0Zo0DbhPnuXcPDdzKBUW4Glv+sVBLV3Zhd2+lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:66:67:a2:63:9e:85:42:71:ec:3f:85:22:fe:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Validity
Not Before: Nov 11 11:00:53 2025 GMT
Not After : Nov 12 11:00:53 2025 GMT
Subject: CN=b5a94df56c45689d547b15fad4884e5974d9fa06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:52:bb:21:e4:59:25:88:80:b1:42:be:76:0b:
a7:78:ac:23:e4:d6:af:2c:77:c1:61:33:91:c2:8c:
fe:38:b1:dd:85:82:50:4a:77:8e:5b:84:d1:24:0d:
75:45:c3:fb:c2:fe:b3:c6:9f:31:60:67:1c:36:d3:
d5:e3:05:04:db:e4:54:36:ef:0c:2a:a7:46:a5:4d:
6e:00:f6:96:c7:a5:b6:08:0a:49:08:89:bd:a9:db:
67:fa:2e:71:2f:e1:b0:d1:9f:8c:1a:99:0a:6a:78:
2c:76:7f:88:26:25:bf:f5:59:4c:78:df:72:37:15:
a5:fb:6a:42:11:ef:bd:50:89:80:ed:c1:7b:81:d0:
fb:e7:1a:c0:09:c2:4d:75:3d:89:ef:53:15:1f:05:
6c:7e:20:53:b1:31:66:88:c3:7f:ea:39:a7:68:f1:
2e:df:39:cf:bb:11:a7:ae:c3:19:dd:2c:72:68:d9:
29:de:64:bc:66:92:7e:72:59:ef:59:a1:47:b6:8f:
4e:c8:47:09:40:97:15:12:61:a0:25:50:af:38:53:
e8:be:49:7c:51:eb:a6:ca:1f:61:4a:19:e0:f9:13:
48:31:33:e9:16:81:37:d4:e7:8f:a1:5b:3d:b8:28:
77:7c:fa:28:1c:4e:07:a2:cf:b6:eb:bf:5d:a6:8d:
1e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A9:4D:F5:6C:45:68:9D:54:7B:15:FA:D4:88:4E:59:74:D9:FA:06
X509v3 Authority Key Identifier:
keyid:44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9c:85:92:08:46:9a:3b:c7:99:80:62:5b:67:81:c7:5c:d8:
5d:4f:02:9a:15:14:cf:7f:39:96:6f:0f:fa:ab:ac:bf:92:b6:
46:42:36:36:6a:4b:42:f9:6a:4f:0d:cd:31:2b:2f:fd:ff:20:
66:57:84:f6:3d:c9:01:d4:02:ef:8d:40:e3:3e:cc:9f:eb:4d:
d2:8a:26:c0:c3:74:57:ef:9e:9f:1f:97:01:f8:ea:15:54:0b:
bf:db:94:d0:77:90:86:ba:e7:46:6c:2a:70:d1:15:a7:23:3d:
94:8f:f3:bc:ef:84:3d:1f:2c:30:00:c4:ed:67:32:59:a4:8b:
c7:b9:d5:1e:d1:ec:60:c5:9d:f9:5a:9c:67:11:ef:60:b3:6b:
65:82:e3:a5:5a:e8:ab:db:4d:6b:7c:f3:db:81:26:c0:c7:ac:
f3:5a:40:a4:54:f6:7a:31:91:a4:48:ef:6e:35:3c:a5:f5:5c:
3a:73:8b:fd:fc:5f:30:a0:59:a9:db:1b:85:c6:2c:60:1d:17:
a0:32:7f:b8:42:f0:39:0c:7a:16:40:aa:fb:52:d0:3f:67:15:
27:69:de:7e:03:d0:87:3f:d7:d1:e2:2d:c4:ed:2d:a1:ab:77:
b6:2e:d4:ab:f7:2b:fc:d1:91:8a:31:26:5e:08:86:7b:75:60:
8b:79:6f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:17 2025 by rpki-client