Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
File: RmSgU4XAYmgVApGX6xUGSF09bRw.mft (raw, json)
Hash identifier: HIlL4Sj0GWSvX4eMRPLN4IoNfbpIQ999aqk6qQFHPo8=
Subject key identifier: 61:7C:A1:AF:E6:89:65:25:6E:F9:FF:79:9B:AB:75:FA:36:46:78:4C
Authority key identifier: 46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C
Certificate issuer: /CN=4664a05385c0626815029197eb1506485d3d6d1c
Certificate serial: 0199FD3454BA17EB3C82BD29CB513C2450F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
Manifest number: 0838
Signing time: Sun 19 Oct 2025 16:01:29 +0000
Manifest this update: Sun 19 Oct 2025 16:01:29 +0000
Manifest next update: Mon 20 Oct 2025 16:01:29 +0000
Files and hashes: 1: RmSgU4XAYmgVApGX6xUGSF09bRw.crl (hash: Xupo+uvvyxgJI5mIJ0G9idXGijwuf8p0Yti4yPw3pLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:54:ba:17:eb:3c:82:bd:29:cb:51:3c:24:50:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4664a05385c0626815029197eb1506485d3d6d1c
Validity
Not Before: Oct 19 16:01:29 2025 GMT
Not After : Oct 20 16:01:29 2025 GMT
Subject: CN=617ca1afe68965256ef9ff799bab75fa3646784c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:6e:40:50:60:6e:39:22:39:96:ee:db:95:
3c:b7:5a:d7:38:43:86:5b:45:f2:0c:a8:85:04:26:
91:48:98:a4:84:15:00:04:84:2e:e7:29:93:70:a2:
ed:f3:af:d7:ac:ad:5d:7d:a6:5e:9d:fb:f6:74:c0:
95:19:88:eb:80:08:ba:49:b1:5d:2b:a0:3c:8b:51:
76:a6:a6:85:00:56:04:11:69:6a:b0:b0:e6:8f:45:
6f:13:d8:d2:bd:60:1d:73:0e:0f:8b:9c:62:fb:35:
b2:b8:17:05:02:fc:f6:40:1d:cf:8e:53:e7:26:c6:
c1:5a:2b:77:4e:94:58:ad:dd:ad:b8:60:85:d9:9d:
7d:fc:74:db:f5:4d:62:1e:1f:90:1d:20:a9:12:ad:
4d:ca:bc:0f:69:20:cc:ce:7f:fe:38:0c:e0:db:44:
de:92:c9:2a:ec:df:21:a2:06:98:a8:72:e0:c4:2d:
d5:57:49:85:a9:6b:df:17:be:85:22:18:4c:23:f0:
85:20:7a:ac:02:35:88:05:ec:a7:84:8f:37:2c:fd:
3b:1d:e6:8e:67:53:51:e7:9f:a0:b3:6c:b2:e2:24:
c3:4b:d1:5d:4c:fd:53:44:de:bb:6b:1c:cd:67:85:
86:1e:cd:3f:52:be:ad:b7:e4:cc:06:ca:fe:09:a1:
81:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7C:A1:AF:E6:89:65:25:6E:F9:FF:79:9B:AB:75:FA:36:46:78:4C
X509v3 Authority Key Identifier:
keyid:46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:cf:4c:6b:78:e0:9b:8b:95:f6:11:62:b1:b2:6b:d4:d1:cc:
c8:03:32:a5:67:80:73:10:b6:a2:23:dd:64:ae:e4:ff:79:45:
2b:18:df:c1:88:9b:ce:81:a4:35:72:51:a4:68:f4:9e:fe:05:
97:ec:82:d0:80:c2:a9:99:bf:2f:52:02:53:bf:03:ac:7b:86:
f0:d5:2d:6a:f6:d7:4f:35:e1:6e:e1:13:31:cb:17:dc:11:a6:
46:7a:73:8c:66:36:fe:e4:3a:52:b4:ae:b4:02:18:0a:b2:9a:
38:b4:60:73:cc:9d:c6:e0:be:4d:a3:45:2f:16:e0:6b:5a:89:
bd:79:5d:a2:a9:ec:35:0d:b7:e8:b3:0e:dc:62:3c:f8:a8:ad:
54:f2:b4:e4:59:93:ba:91:7d:5a:8f:03:23:a7:2d:76:5d:b4:
d3:04:23:7c:1e:10:0f:62:a4:b2:8d:fe:6c:26:9d:3a:24:e2:
d3:2a:d7:30:78:a8:04:63:b2:02:8f:e2:ae:62:5f:b5:91:73:
e7:67:92:82:d1:19:17:aa:88:60:5b:11:9c:71:a8:71:5f:32:
51:8d:96:e9:f9:0b:0d:91:22:f3:fc:12:df:e3:b9:3f:db:d9:
29:89:cc:c0:42:f8:16:2f:eb:17:78:fa:fd:c4:53:09:3c:e7:
c1:17:bf:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NFS6F+s8gr0py1E8JFDyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NjRhMDUzODVjMDYyNjgxNTAyOTE5N2ViMTUwNjQ4NWQz
ZDZkMWMwHhcNMjUxMDE5MTYwMTI5WhcNMjUxMDIwMTYwMTI5WjAzMTEwLwYDVQQD
Eyg2MTdjYTFhZmU2ODk2NTI1NmVmOWZmNzk5YmFiNzVmYTM2NDY3ODRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub5uQFBgbjkiOZbu25U8t1rXOEOG
W0XyDKiFBCaRSJikhBUABIQu5ymTcKLt86/XrK1dfaZenfv2dMCVGYjrgAi6SbFd
K6A8i1F2pqaFAFYEEWlqsLDmj0VvE9jSvWAdcw4Pi5xi+zWyuBcFAvz2QB3PjlPn
JsbBWit3TpRYrd2tuGCF2Z19/HTb9U1iHh+QHSCpEq1NyrwPaSDMzn/+OAzg20Te
kskq7N8hogaYqHLgxC3VV0mFqWvfF76FIhhMI/CFIHqsAjWIBeynhI83LP07HeaO
Z1NR55+gs2yy4iTDS9FdTP1TRN67axzNZ4WGHs0/Ur6tt+TMBsr+CaGBXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGF8oa/miWUlbvn/eZurdfo2RnhMMB8GA1UdIwQY
MBaAFEZkoFOFwGJoFQKRl+sVBkhdPW0cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm1TZ1U0WEFZbWdWQXBHWDZ4VUdTRjA5YlJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iZDc2NDYtYWRkOS00ODU5LTlkZTkt
OWM4NDg1NDgzZDU5LzEvUm1TZ1U0WEFZbWdWQXBHWDZ4VUdTRjA5YlJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9iZDc2NDYtYWRkOS00ODU5LTlkZTktOWM4NDg1NDgzZDU5
LzEvUm1TZ1U0WEFZbWdWQXBHWDZ4VUdTRjA5YlJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABs9Ma3jg
m4uV9hFisbJr1NHMyAMypWeAcxC2oiPdZK7k/3lFKxjfwYibzoGkNXJRpGj0nv4F
l+yC0IDCqZm/L1ICU78DrHuG8NUtavbXTzXhbuETMcsX3BGmRnpzjGY2/uQ6UrSu
tAIYCrKaOLRgc8ydxuC+TaNFLxbga1qJvXldoqnsNQ236LMO3GI8+KitVPK05FmT
upF9Wo8DI6ctdl200wQjfB4QD2Kkso3+bCadOiTi0yrXMHioBGOyAo/irmJftZFz
52eSgtEZF6qIYFsRnHGocV8yUY2W6fkLDZEi8/wS3+O5P9vZKYnMwEL4Fi/rF3j6
/cRTCTznwRe/uw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:10 2025 by rpki-client