Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
File: RmSgU4XAYmgVApGX6xUGSF09bRw.mft (raw, json)
Hash identifier: 4KlhBU6Ea4RblTCfx0e0Q7YciE6k+tXLfXLJKxPKHT0=
Subject key identifier: 3E:E1:1E:E2:AA:5F:8A:31:DF:50:86:E2:DF:BB:82:9B:18:48:A6:4E
Authority key identifier: 46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C
Certificate issuer: /CN=4664a05385c0626815029197eb1506485d3d6d1c
Certificate serial: 0198D5BC29131D03B6A123D84CC20BAEB00D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
Manifest number: 079F
Signing time: Sat 23 Aug 2025 07:02:14 +0000
Manifest this update: Sat 23 Aug 2025 07:02:14 +0000
Manifest next update: Sun 24 Aug 2025 07:02:14 +0000
Files and hashes: 1: RmSgU4XAYmgVApGX6xUGSF09bRw.crl (hash: T8USsnDludgLQjAW9/suP26K/eU/9MfTmZlelJZ1Kb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:29:13:1d:03:b6:a1:23:d8:4c:c2:0b:ae:b0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4664a05385c0626815029197eb1506485d3d6d1c
Validity
Not Before: Aug 23 07:02:14 2025 GMT
Not After : Aug 24 07:02:14 2025 GMT
Subject: CN=3ee11ee2aa5f8a31df5086e2dfbb829b1848a64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:30:c4:d6:d2:03:12:ae:90:48:eb:66:1e:
d5:62:ef:d2:d0:71:d8:a4:9c:ee:83:26:fe:32:f4:
c1:e0:69:cd:9e:39:76:6c:19:8e:3d:3f:54:ef:b6:
61:31:3e:77:76:6e:8f:67:62:d6:26:11:81:8a:d6:
e1:5b:f6:d5:05:8f:fd:a7:22:1e:2d:ac:9b:97:d8:
98:66:55:53:5e:4c:4f:03:51:94:18:cf:73:44:a0:
0c:16:b2:9f:88:cd:5d:8a:dc:93:56:12:b5:6b:19:
5f:3f:8c:5e:96:0d:ed:e5:98:3c:3f:0c:4b:6a:7d:
e7:a8:76:98:35:61:39:f3:b1:86:8a:79:9c:53:92:
1b:29:d0:c8:97:2a:52:41:e8:05:d4:2a:17:19:f1:
ac:76:a6:ff:71:4c:30:7d:0e:c9:86:0b:03:53:5e:
ac:dc:91:8a:39:cd:06:0a:f3:77:43:78:88:cb:f2:
ca:f8:6e:96:d4:02:c3:07:35:cf:c1:77:aa:03:0b:
6b:df:d9:64:d5:ba:a6:08:69:b7:d6:9d:b6:93:2d:
b0:86:35:93:91:7e:62:21:dd:8d:5d:41:27:1a:3e:
b5:cf:2a:53:d1:c2:04:3b:75:63:c8:de:b0:2b:77:
fd:f7:8d:85:09:09:27:d0:ca:0c:3d:49:85:6a:c4:
48:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E1:1E:E2:AA:5F:8A:31:DF:50:86:E2:DF:BB:82:9B:18:48:A6:4E
X509v3 Authority Key Identifier:
keyid:46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d6:f8:31:ae:6d:b2:45:02:b5:4e:ed:96:28:67:1e:7a:a0:
b6:68:47:02:17:d5:f0:52:cc:f7:48:b1:92:1e:f9:85:4d:d4:
e8:1c:24:85:84:4c:43:aa:c2:16:7e:b6:ae:e5:ef:05:17:5d:
fc:7a:c3:de:75:07:d4:11:ce:49:6d:fe:c0:9d:9b:b3:ce:aa:
3b:51:b2:4e:e1:32:b6:93:82:1f:81:41:c0:f4:df:c8:b0:42:
33:da:d2:27:5b:35:28:e5:c7:3d:ec:5a:54:39:33:24:60:e5:
c4:fe:a6:f2:53:0c:1f:b7:95:31:2b:b0:f4:e2:01:c8:1c:e4:
80:c3:e7:3a:d5:a7:45:bf:c1:08:14:0b:ae:43:b8:75:15:35:
f1:c9:4c:75:de:cd:00:af:63:e2:7b:fb:2a:d6:99:e4:88:7a:
62:85:85:14:45:fa:92:7b:56:3e:cc:24:f7:42:cf:5c:41:5e:
df:25:58:60:a8:39:6c:aa:e5:24:5c:a4:96:14:4f:5d:be:d1:
c0:36:93:0c:95:a3:be:bd:ba:cb:dc:80:d0:77:4f:de:66:61:
d5:43:72:59:33:56:f4:43:ad:6c:e3:23:8c:d2:5b:cd:23:b9:
ff:77:5b:52:d2:34:a3:cd:7c:98:4d:93:f4:0b:8e:1f:01:b9:
64:53:08:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:11 2025 by rpki-client