Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
File: RMKVym7oyucAa1d69U43ZiPfd5k.mft (raw, json)
Hash identifier: Svet0QQeRjHqqtBDh5oSSQFduHoAbLaGMJsgnRTJz5k=
Subject key identifier: 42:E8:D9:BB:7B:3E:7C:B6:97:AE:33:37:0B:79:FF:57:92:EF:DE:FD
Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799
Certificate serial: 0198D4E0DD2CE9E106F27F93C1B3404F908D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
Manifest number: 1418
Signing time: Sat 23 Aug 2025 03:02:43 +0000
Manifest this update: Sat 23 Aug 2025 03:02:43 +0000
Manifest next update: Sun 24 Aug 2025 03:02:43 +0000
Files and hashes: 1: 1-a4x5OOX4iisCDf6ed1yjE-GXUQ.roa (hash: sw8ry0bOHDndmxXW/2FyYZ7exmAZ4VvNy12eeZpqa3o=)
2: RMKVym7oyucAa1d69U43ZiPfd5k.crl (hash: lZX/NMdi1aCaSYEE9NUBjonz6UDmuNcr1KM7/rvU/gY=)
3: UTTLqXMtJUxFPASsyV3j9mlbrsU.roa (hash: 2XJm8gYnzGZQLzDIfSf2GHQMXAHNk+qtN5YEcj0V9ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:dd:2c:e9:e1:06:f2:7f:93:c1:b3:40:4f:90:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799
Validity
Not Before: Aug 23 03:02:43 2025 GMT
Not After : Aug 24 03:02:43 2025 GMT
Subject: CN=42e8d9bb7b3e7cb697ae33370b79ff5792efdefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fe:2d:d3:6e:00:4f:55:c6:b4:b5:25:12:43:
a7:44:e0:71:74:d0:1f:32:d1:1a:c3:c4:1b:3b:60:
45:05:18:f4:7c:68:53:07:ba:a4:c1:7d:88:08:58:
58:7d:0a:54:29:b3:df:37:89:5f:f2:c9:76:8d:ec:
01:eb:18:9a:10:5c:83:8e:86:e8:b0:a7:72:fc:1d:
43:81:01:03:37:53:19:f3:40:7c:7b:ad:7c:10:e4:
74:f2:62:b1:c7:5d:12:cf:29:b2:57:3b:b9:28:a7:
38:7d:89:e5:33:aa:1a:ba:1d:3a:4f:7b:4f:fd:d0:
7f:6b:8b:ca:09:20:89:c6:b7:3d:56:a4:29:87:85:
3f:ba:90:49:ee:01:60:33:45:ad:17:3a:e7:14:de:
bd:23:0b:66:11:ba:0e:69:01:f9:97:47:84:ce:07:
f1:02:42:06:5d:a3:7b:d2:ca:24:e2:05:76:98:86:
1a:55:15:6d:c1:ea:d2:ef:0e:bd:b9:ca:b3:70:d8:
1e:b6:e2:e4:a9:14:49:08:b4:d3:fe:41:ad:e3:ed:
c5:18:58:fa:94:9b:50:e2:70:e8:c4:53:fa:7d:3c:
ba:ab:ce:03:c0:2c:07:1b:48:af:5a:2c:c7:3b:a0:
a0:6d:9b:bc:56:b6:82:a5:24:32:6d:bf:8f:6f:d4:
7e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E8:D9:BB:7B:3E:7C:B6:97:AE:33:37:0B:79:FF:57:92:EF:DE:FD
X509v3 Authority Key Identifier:
keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:14:ee:71:fd:0c:23:5f:2f:ac:06:37:fa:ad:dc:42:d9:b9:
1b:4b:83:f4:95:1d:d3:a2:d2:b5:d5:77:45:1b:81:a9:e0:2e:
d3:1f:65:52:74:34:d9:42:82:90:1b:e5:20:02:7f:51:16:0d:
bf:25:bf:6d:fd:ed:b8:2b:90:2b:7c:9a:be:01:85:7f:59:5a:
b7:0c:c9:3b:9b:80:3e:52:82:56:9a:60:82:fc:de:78:9e:43:
59:2d:aa:b2:59:8e:02:c5:69:e2:7e:a0:80:e0:81:af:b4:f8:
17:e1:ce:c5:2e:75:c4:d7:48:2e:74:0d:e7:b7:0c:7d:91:c8:
c5:5e:35:03:4f:d4:ee:a9:db:79:63:86:f4:71:37:88:af:a3:
7a:05:78:08:68:c1:6a:da:23:59:de:98:10:a3:10:8b:d2:25:
cc:4a:06:76:7b:ee:f0:6d:ea:cc:4b:1a:2f:e2:d3:32:e5:02:
3d:ad:f7:ff:f3:14:03:75:64:f2:18:02:4d:b6:33:b3:18:88:
b1:f8:ab:e2:53:de:40:22:8f:0a:48:1e:6e:d9:e7:ab:5e:12:
86:6b:88:05:ad:c6:bb:7a:f4:8d:06:8f:a1:3d:5d:c4:a7:8c:
30:19:93:98:d3:b7:8e:a1:0f:e4:49:65:79:28:fd:39:dc:c6:
3a:3f:21:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:23 2025 by rpki-client