Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
File: RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json)
Hash identifier: A2d9h/90F6lWh70IurYxmtwhvIM9q6FcyY1b21sVMJE=
Subject key identifier: B6:0E:56:7C:2D:37:62:88:69:F9:C3:9A:80:FB:B0:79:54:50:DE:96
Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799
Certificate serial: 0197B70EA81262909C28A79C9EF79321919C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
Manifest number: 1383
Signing time: Sat 28 Jun 2025 15:01:20 +0000
Manifest this update: Sat 28 Jun 2025 15:01:20 +0000
Manifest next update: Sun 29 Jun 2025 15:01:20 +0000
Files and hashes: 1: 1-a4x5OOX4iisCDf6ed1yjE-GXUQ.roa (hash: sw8ry0bOHDndmxXW/2FyYZ7exmAZ4VvNy12eeZpqa3o=)
2: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: ggf55U1v45HdilDiY03PErb69sFVO/bq55NT4FBQ2+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a8:12:62:90:9c:28:a7:9c:9e:f7:93:21:91:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799
Validity
Not Before: Jun 28 15:01:20 2025 GMT
Not After : Jun 29 15:01:20 2025 GMT
Subject: CN=b60e567c2d37628869f9c39a80fbb0795450de96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ea:51:c1:9b:fc:24:e5:3d:b9:4b:a1:77:c4:
63:cc:d8:a4:c6:9f:ff:71:81:2e:3a:33:b5:11:1f:
82:c8:ce:02:f3:93:33:48:c8:24:08:61:7c:77:c5:
4f:6c:82:e4:5f:b2:56:2c:79:8e:6c:e6:57:f0:c4:
6a:0e:ae:1d:f9:1b:bb:8d:7c:17:8d:d1:b7:7e:65:
a8:fd:6a:c9:1f:d6:0b:7d:f6:94:ff:2a:5e:de:5c:
bd:3a:a1:99:45:a4:94:77:58:09:6d:fe:26:a5:60:
f0:4d:34:ae:44:dd:e6:3b:b3:cf:4c:be:28:ba:5c:
a1:68:a3:d9:a4:e2:70:5f:87:f1:62:1c:77:a3:21:
0a:65:39:56:52:25:75:1c:e9:f0:db:69:33:ad:8c:
71:48:40:03:dc:77:62:f9:41:16:3b:69:2b:48:b3:
a3:66:a7:fd:b9:e3:ad:49:e5:67:9b:e7:20:2c:c9:
08:7a:53:a5:13:e9:e4:a2:c6:d0:d4:68:d1:f3:79:
fb:4d:27:0c:f6:18:21:4c:e1:80:b7:dc:f0:9f:fc:
de:fa:4e:65:a9:a9:b2:af:e5:66:7e:13:8f:de:a4:
06:32:8f:8f:24:98:19:ae:12:a5:eb:f3:49:98:ba:
35:b8:04:d0:79:9f:a7:d2:7c:59:cc:03:f0:83:e4:
aa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0E:56:7C:2D:37:62:88:69:F9:C3:9A:80:FB:B0:79:54:50:DE:96
X509v3 Authority Key Identifier:
keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a0:2a:6b:5b:fe:69:5c:91:7b:62:02:52:3c:26:ce:35:f2:
43:99:8b:fb:b3:80:70:9e:db:13:e1:2b:a8:be:d6:4d:d6:31:
1c:19:96:f9:89:37:c7:be:9d:9f:43:87:95:40:76:17:b2:fe:
01:62:ae:61:c3:66:92:6e:6c:f8:39:08:33:f8:01:4c:c0:c1:
3a:51:b2:f9:cb:1d:c2:f6:d5:91:3d:15:18:44:19:42:4d:8e:
5d:72:a0:b3:a9:1b:42:03:fe:89:81:f1:ae:a7:49:92:70:84:
27:ed:9a:b9:2d:5b:eb:59:55:70:00:70:94:bd:87:eb:d0:91:
a6:f6:3d:e5:c0:cf:f8:77:22:2a:cd:0c:4a:a8:a1:42:b5:15:
46:6a:cf:49:2c:42:17:a8:96:53:eb:56:14:0a:75:d2:2b:79:
4c:4b:79:ab:c5:41:67:d8:68:48:a4:80:47:a5:f9:b0:5a:90:
7a:99:6d:92:fc:dd:ca:f5:b2:a1:52:7d:66:ff:53:de:84:79:
c0:5d:7e:56:6e:21:b9:88:24:bb:0c:9b:0b:66:4b:c8:95:d3:
5b:8a:1b:ff:b3:97:b6:4f:39:a9:2e:8d:62:3b:e3:05:13:25:
06:7a:b6:8b:d8:ef:4b:21:44:b8:d3:17:bd:e5:76:73:18:9b:
c3:13:5d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:30 2025 by rpki-client