
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
File: RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json)
Hash identifier: Fie9uyCJuaizm5f4hNmnEQGUfDX5JjD7Xfz/EfMReMo=
Subject key identifier: 65:00:DE:A6:F9:EF:F7:62:B1:FC:36:21:E4:37:76:4D:1E:D5:45:69
Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799
Certificate serial: 019A02229D9FC1FB93D1CA8F1388E6CE16D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
Manifest number: 14B4
Signing time: Mon 20 Oct 2025 15:00:14 +0000
Manifest this update: Mon 20 Oct 2025 15:00:14 +0000
Manifest next update: Tue 21 Oct 2025 15:00:14 +0000
Files and hashes: 1: 1-a4x5OOX4iisCDf6ed1yjE-GXUQ.roa (hash: sw8ry0bOHDndmxXW/2FyYZ7exmAZ4VvNy12eeZpqa3o=)
2: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: /6fM8HRVklmiGkNwi/752XGDyR+domRUDHnatuWFHe0=)
3: UTTLqXMtJUxFPASsyV3j9mlbrsU.roa (hash: 2XJm8gYnzGZQLzDIfSf2GHQMXAHNk+qtN5YEcj0V9ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:9d:9f:c1:fb:93:d1:ca:8f:13:88:e6:ce:16:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799
Validity
Not Before: Oct 20 15:00:14 2025 GMT
Not After : Oct 21 15:00:14 2025 GMT
Subject: CN=6500dea6f9eff762b1fc3621e437764d1ed54569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5b:c1:9c:8c:b8:88:b9:5d:31:dc:46:f3:95:
7e:5a:96:9f:ca:2c:49:d3:df:57:71:cd:11:28:fc:
e3:28:40:df:fa:68:1e:ce:27:79:6f:5b:48:84:71:
81:cc:8e:ee:28:77:e8:67:6c:11:42:59:23:15:40:
60:10:09:17:b9:1f:df:e4:8e:47:7c:ef:cb:c1:fd:
7d:50:92:bf:08:48:bf:06:1f:b9:bb:54:e2:81:bc:
e6:59:00:97:b5:a6:c5:d5:54:2d:13:aa:ae:2d:ec:
2f:e8:ec:64:26:fe:5c:fb:49:95:31:df:5b:40:0e:
b6:d6:fe:6d:35:b1:7f:a3:d7:7a:22:d1:5d:5a:8f:
e6:76:9b:a5:e9:4a:d4:97:28:33:c1:17:6a:25:3a:
e7:ee:3b:5b:c3:ab:0f:31:09:18:be:63:9c:fc:4e:
e3:77:e1:96:30:aa:9a:ed:26:35:7c:7d:e9:3f:71:
9a:ec:8f:dd:87:c9:a0:96:75:fc:4a:a5:43:81:1a:
54:a8:b3:b0:53:4c:95:4e:f6:4e:a6:5d:75:af:46:
55:d8:c8:29:64:05:57:fe:34:71:06:e1:7b:0e:3c:
ec:32:5b:cd:ef:dc:9b:e7:09:98:79:7c:5e:f4:43:
03:e2:5f:d8:dd:29:5e:74:a2:9d:f0:47:a5:89:8d:
26:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:00:DE:A6:F9:EF:F7:62:B1:FC:36:21:E4:37:76:4D:1E:D5:45:69
X509v3 Authority Key Identifier:
keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:31:13:ef:84:90:04:d8:81:54:a2:ae:41:95:10:93:a0:66:
7c:fa:bc:67:d7:de:74:5d:44:13:7f:45:8d:65:9b:16:23:d6:
30:ca:c9:23:f6:f6:ad:af:d2:ec:1e:59:42:ba:31:a8:6f:cc:
9e:68:d1:6f:20:b2:5a:6c:03:a9:eb:68:2a:62:73:06:d3:9d:
34:ea:bf:b3:1b:90:04:f8:74:50:1c:5a:83:3d:9d:40:f9:2a:
79:de:cb:51:dd:fd:fb:fc:34:cb:58:b8:5b:ee:d6:90:aa:0e:
89:01:ef:86:94:10:de:9e:57:10:2f:c2:e3:6e:6d:7f:ca:99:
4c:bc:2a:1b:56:d1:76:8b:32:81:c7:f5:a5:60:e8:5a:06:11:
b6:29:44:ab:6d:82:b3:c8:06:56:90:ae:d4:f0:02:73:84:12:
32:0e:15:a3:df:6b:f4:2a:84:a9:3e:c9:fa:05:f0:e8:9a:05:
ee:9f:91:e5:4b:ed:a3:94:ac:ff:58:7f:ad:df:77:5d:f6:58:
fc:4a:c5:8a:80:63:37:c3:2f:3f:35:b6:71:95:52:0a:15:15:
d9:68:c7:e9:dd:9d:27:00:2d:f7:db:a5:8b:8b:6e:8d:49:4e:
a2:3e:ce:6d:1b:b2:15:d1:e4:0d:7c:36:13:45:29:bf:aa:7c:
5e:38:09:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoCIp2fwfuT0cqPE4jmzhbUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YzI5NWNhNmVlOGNhZTcwMDZiNTc3YWY1NGUzNzY2MjNk
Zjc3OTkwHhcNMjUxMDIwMTUwMDE0WhcNMjUxMDIxMTUwMDE0WjAzMTEwLwYDVQQD
Eyg2NTAwZGVhNmY5ZWZmNzYyYjFmYzM2MjFlNDM3NzY0ZDFlZDU0NTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1vBnIy4iLldMdxG85V+WpafyixJ
099Xcc0RKPzjKEDf+mgezid5b1tIhHGBzI7uKHfoZ2wRQlkjFUBgEAkXuR/f5I5H
fO/Lwf19UJK/CEi/Bh+5u1TigbzmWQCXtabF1VQtE6quLewv6OxkJv5c+0mVMd9b
QA621v5tNbF/o9d6ItFdWo/mdpul6UrUlygzwRdqJTrn7jtbw6sPMQkYvmOc/E7j
d+GWMKqa7SY1fH3pP3Ga7I/dh8mglnX8SqVDgRpUqLOwU0yVTvZOpl11r0ZV2Mgp
ZAVX/jRxBuF7DjzsMlvN79yb5wmYeXxe9EMD4l/Y3SledKKd8EeliY0myQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUA3qb57/disfw2IeQ3dk0e1UVpMB8GA1UdIwQY
MBaAFETClcpu6MrnAGtXevVON2Yj33eZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xN2E4OGQtMjM2ZC00ZmFkLTkwMzUt
NzU5OWI0NDFjZDFjLzEvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xN2E4OGQtMjM2ZC00ZmFkLTkwMzUtNzU5OWI0NDFjZDFj
LzEvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzET74SQ
BNiBVKKuQZUQk6BmfPq8Z9fedF1EE39FjWWbFiPWMMrJI/b2ra/S7B5ZQroxqG/M
nmjRbyCyWmwDqetoKmJzBtOdNOq/sxuQBPh0UBxagz2dQPkqed7LUd39+/w0y1i4
W+7WkKoOiQHvhpQQ3p5XEC/C425tf8qZTLwqG1bRdosygcf1pWDoWgYRtilEq22C
s8gGVpCu1PACc4QSMg4Vo99r9CqEqT7J+gXw6JoF7p+R5Uvto5Ss/1h/rd93XfZY
/ErFioBjN8MvPzW2cZVSChUV2WjH6d2dJwAt99uli4tujUlOoj7ObRuyFdHkDXw2
E0Upv6p8XjgJFg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:43:25 2025 by rpki-client