Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
File: RMRFXrsJGC1PvrO0Vg4giYbhriE.mft (raw, json)
Hash identifier: COyNvvs95qe2mVKTwBYMmk+Cu/ov+v3eHXB5nJgwFco=
Subject key identifier: F0:C5:59:24:23:17:EB:D4:68:F9:4B:62:D6:C2:08:21:D8:2B:E1:4C
Authority key identifier: 44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
Certificate issuer: /CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Certificate serial: 0199228C86803E9D99B481254BAAB0FF8B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 05:00:58 +0000
Manifest this update: Sun 07 Sep 2025 05:00:58 +0000
Manifest next update: Mon 08 Sep 2025 05:00:58 +0000
Files and hashes: 1: RMRFXrsJGC1PvrO0Vg4giYbhriE.crl (hash: 0/X/TrNsfOSfVbONAJibShysl3V6p8vsub78TKJjwqY=)
2: W1HT74Ti-eehsN9aFk8FhX6Amk0.roa (hash: 3zzhU0Zo0DbhPnuXcPDdzKBUW4Glv+sVBLV3Zhd2+lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:86:80:3e:9d:99:b4:81:25:4b:aa:b0:ff:8b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Validity
Not Before: Sep 7 05:00:58 2025 GMT
Not After : Sep 8 05:00:58 2025 GMT
Subject: CN=f0c559242317ebd468f94b62d6c20821d82be14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:47:20:e6:3e:5f:5a:c6:6e:46:80:b6:a7:e4:
ae:23:e0:f0:98:72:96:6b:ef:56:f0:4a:f6:e1:f7:
b4:b8:ad:b9:c2:3d:bd:3c:71:3d:62:04:c5:74:86:
fd:fd:7a:44:2e:1c:bc:8f:3b:00:c4:0d:9b:60:1d:
80:ff:ae:1e:79:bf:a5:93:cc:bb:dd:71:37:a8:28:
fb:af:2b:d6:df:1d:c1:28:a8:62:fa:c6:d2:ce:5d:
d0:53:ba:95:0e:36:bb:ef:96:56:66:df:61:83:ec:
43:5b:d5:ca:4d:fd:b9:51:b9:4a:d7:9c:ae:a8:9f:
40:9e:74:43:5e:a6:c8:8a:2d:76:97:42:a1:a6:26:
84:12:4f:60:5b:a5:df:34:f6:dc:20:ec:e6:13:47:
de:ae:fa:dd:69:5d:a6:6f:e9:df:d8:09:80:cb:19:
2b:ab:c4:9e:54:24:b5:03:a7:ae:d8:51:5c:36:bc:
31:8e:90:36:3e:30:25:ab:81:c4:f1:bf:d6:de:f0:
df:18:9a:ad:b9:df:a8:61:90:80:5c:b3:e5:31:df:
24:c8:75:f6:5b:ea:5c:c6:a6:55:29:79:3a:07:3b:
be:ed:84:ae:62:98:6e:46:e9:86:36:39:5e:20:30:
e8:42:3a:d3:5c:46:71:bf:97:72:e9:7d:fe:a7:c1:
c6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C5:59:24:23:17:EB:D4:68:F9:4B:62:D6:C2:08:21:D8:2B:E1:4C
X509v3 Authority Key Identifier:
keyid:44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:38:48:25:5b:6a:4c:a8:b5:69:02:a3:a4:84:ee:61:ed:7c:
6e:f1:df:8b:da:81:ac:46:93:cc:d6:61:7f:68:60:79:e4:59:
13:5f:70:e3:b8:f3:93:1f:01:b1:46:da:df:50:17:63:5e:4d:
b8:90:de:25:ca:c0:93:31:bd:12:ce:b1:21:3a:15:08:f8:77:
89:23:ae:8f:90:ba:d0:c7:fd:61:c9:b4:cb:82:dc:05:ea:01:
a2:26:b7:21:d2:e7:a5:00:63:da:62:a3:97:d3:96:6c:55:5f:
9b:b0:b7:4c:0e:68:65:a9:be:dd:bc:56:aa:ab:c3:79:84:e8:
e5:d1:45:70:e7:6b:1d:c8:5b:e6:d2:fd:07:e6:70:06:d0:1d:
89:b8:a7:7a:90:cf:e8:ab:6d:e0:bc:32:f7:ac:c2:0c:f7:cf:
cc:44:67:66:94:44:53:bf:07:3c:68:d8:6c:46:74:4f:42:04:
81:7f:66:d9:c6:12:e2:4f:47:32:95:27:df:40:a2:b7:10:32:
4a:e5:60:b2:c5:19:69:d4:d8:be:01:40:ce:6f:81:73:c5:f7:
ab:f9:33:90:da:8b:74:64:00:f6:7e:8c:0f:4c:50:91:17:0b:
d9:0c:30:b4:e5:ca:0d:35:0d:b8:7a:d6:1f:d8:a8:6c:a7:75:
43:f2:56:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:05 2025 by rpki-client