Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
File: RmJSHrWLRbDFosy-ODMVznnX7qU.mft (raw, json)
Hash identifier: R55YqF2g3IlYmDI/FVgbjOMf/L/OvMzkFae56oFOMoo=
Subject key identifier: 6B:60:49:A5:4F:0C:AE:46:05:99:33:FE:9B:DA:AB:69:B4:F0:4A:68
Authority key identifier: 46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
Certificate issuer: /CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Certificate serial: 019A72258242515E7164D0D8B464F27238DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
Manifest number: 0577
Signing time: Tue 11 Nov 2025 09:00:51 +0000
Manifest this update: Tue 11 Nov 2025 09:00:51 +0000
Manifest next update: Wed 12 Nov 2025 09:00:51 +0000
Files and hashes: 1: FMOrAvuXC1st0AxiGEbiYaRYpDg.roa (hash: OmIWmIcqWrtJmv8GjH0kjZnCnt6Sjb2fVpbncWqIDDs=)
2: RmJSHrWLRbDFosy-ODMVznnX7qU.crl (hash: rP/vgB/GOIbTWBgtELjAWwMYa8idEGuER2Y9232z1Ck=)
3: Rn8OIh8zHAwmG50kXHn-kNbTEto.roa (hash: RiLsXz+R4XXCz86+60MDV16LzwORDjEzlHMC7VSLj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:82:42:51:5e:71:64:d0:d8:b4:64:f2:72:38:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Validity
Not Before: Nov 11 09:00:51 2025 GMT
Not After : Nov 12 09:00:51 2025 GMT
Subject: CN=6b6049a54f0cae46059933fe9bdaab69b4f04a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6f:6d:c7:4e:e0:8d:e5:f5:36:05:b7:79:11:
53:a1:dd:c8:a1:06:59:77:bb:66:1c:41:80:b4:69:
a8:ec:1b:5e:87:9e:25:35:38:1f:3c:69:10:61:11:
a4:76:f5:6b:17:7d:43:c2:1f:e2:79:6e:fe:a7:d7:
8e:3f:1c:ab:a9:fb:70:0f:0d:42:f9:ce:fd:9b:fd:
1e:d1:25:2a:da:03:bb:71:a7:c2:ae:0b:5f:bf:3a:
28:bf:e5:f3:03:a0:0e:14:24:58:5e:d5:65:f6:fe:
e4:ba:bf:b1:9e:d2:82:26:94:40:d5:d5:64:ed:d7:
b2:53:f6:6d:16:92:85:ba:bf:af:bb:2b:46:ac:69:
2b:33:44:92:65:80:c7:ce:9f:d6:ad:2e:71:a4:d1:
67:35:02:0a:93:2c:b3:68:1b:be:1a:32:5b:9c:a7:
b9:6e:5b:4e:b9:b2:9c:7a:16:a1:bc:af:d7:25:1f:
b2:e9:f2:f6:98:34:a1:7a:39:1a:df:14:c0:59:5c:
5c:84:b1:79:34:d0:11:16:83:41:7d:ed:2a:04:37:
96:08:c2:b8:c2:01:23:a7:3b:7d:bc:d3:24:26:14:
d2:98:3a:74:05:f4:48:bb:69:11:66:29:73:39:e1:
a4:33:0d:a4:fa:c2:48:9f:7f:ba:4e:4c:90:31:c6:
e7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:60:49:A5:4F:0C:AE:46:05:99:33:FE:9B:DA:AB:69:B4:F0:4A:68
X509v3 Authority Key Identifier:
keyid:46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4d:1b:57:1f:b3:5d:cf:36:01:fd:9d:56:44:94:ee:99:af:
3a:5e:92:36:5a:f2:52:0c:99:9c:40:da:06:c0:9e:55:46:e9:
6f:0f:ef:0e:d8:41:c7:51:0e:64:94:fa:05:80:23:fa:ae:28:
4a:dc:57:aa:80:dc:f4:d4:ed:be:e8:53:72:d2:4c:ad:1e:ee:
3d:86:6e:97:91:95:9e:81:07:7c:da:ba:1b:6c:45:92:14:18:
e6:44:98:0a:1f:72:d0:90:16:41:22:d3:5a:73:25:d5:73:2a:
35:87:ae:ce:93:17:06:2c:1c:f1:61:a5:32:dd:f5:f2:d8:d8:
e3:7b:d2:63:c9:cd:01:f0:fe:66:b1:77:e2:21:3f:61:81:bc:
07:8d:ba:50:86:50:a3:4a:2a:3c:d0:79:c6:5d:15:c9:10:8c:
14:7d:b4:73:aa:20:8c:16:b3:a7:66:b7:7b:da:54:8a:b3:40:
a1:0e:66:1e:85:85:c7:78:a6:5d:70:90:4b:d4:f3:4f:cc:eb:
b5:d6:33:02:d5:21:e8:0e:e9:9f:f9:02:ec:3e:44:58:12:ef:
7a:7a:62:28:ef:0c:18:4e:3d:fd:ab:5e:52:b9:75:07:3a:03:
0c:13:c5:a7:16:82:1d:48:cc:6b:05:35:9c:47:9e:a2:1f:b2:
02:b3:89:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJYJCUV5xZNDYtGTycjjbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NjI1MjFlYjU4YjQ1YjBjNWEyY2NiZTM4MzMxNWNlNzlk
N2VlYTUwHhcNMjUxMTExMDkwMDUxWhcNMjUxMTEyMDkwMDUxWjAzMTEwLwYDVQQD
Eyg2YjYwNDlhNTRmMGNhZTQ2MDU5OTMzZmU5YmRhYWI2OWI0ZjA0YTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA029tx07gjeX1NgW3eRFTod3IoQZZ
d7tmHEGAtGmo7Bteh54lNTgfPGkQYRGkdvVrF31Dwh/ieW7+p9eOPxyrqftwDw1C
+c79m/0e0SUq2gO7cafCrgtfvzoov+XzA6AOFCRYXtVl9v7kur+xntKCJpRA1dVk
7deyU/ZtFpKFur+vuytGrGkrM0SSZYDHzp/WrS5xpNFnNQIKkyyzaBu+GjJbnKe5
bltOubKcehahvK/XJR+y6fL2mDShejka3xTAWVxchLF5NNARFoNBfe0qBDeWCMK4
wgEjpzt9vNMkJhTSmDp0BfRIu2kRZilzOeGkMw2k+sJIn3+6TkyQMcbnqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtgSaVPDK5GBZkz/pvaq2m08EpoMB8GA1UdIwQY
MBaAFEZiUh61i0WwxaLMvjgzFc551+6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83MmM5ODQtMTQxMC00NWVjLTg2YzUt
OGFiODY5Mzc0MTBhLzEvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi83MmM5ODQtMTQxMC00NWVjLTg2YzUtOGFiODY5Mzc0MTBh
LzEvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIk0bVx+z
Xc82Af2dVkSU7pmvOl6SNlryUgyZnEDaBsCeVUbpbw/vDthBx1EOZJT6BYAj+q4o
StxXqoDc9NTtvuhTctJMrR7uPYZul5GVnoEHfNq6G2xFkhQY5kSYCh9y0JAWQSLT
WnMl1XMqNYeuzpMXBiwc8WGlMt318tjY43vSY8nNAfD+ZrF34iE/YYG8B426UIZQ
o0oqPNB5xl0VyRCMFH20c6ogjBazp2a3e9pUirNAoQ5mHoWFx3imXXCQS9TzT8zr
tdYzAtUh6A7pn/kC7D5EWBLvenpiKO8MGE49/ateUrl1BzoDDBPFpxaCHUjMawU1
nEeeoh+yArOJtA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:53 2025 by rpki-client