Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.mft
File: RKMb41sydPLLhX5a81aLaFqJEn0.mft (raw, json)
Hash identifier: gnINTp1yY6xUi0N9LH3zMRffgiUr13p4sEmTglHQ09k=
Subject key identifier: 6D:02:FB:09:11:D7:9C:E2:F8:68:AB:87:60:39:95:C9:E4:C9:EE:E5
Authority key identifier: 44:A3:1B:E3:5B:32:74:F2:CB:85:7E:5A:F3:56:8B:68:5A:89:12:7D
Certificate issuer: /CN=44a31be35b3274f2cb857e5af3568b685a89127d
Certificate serial: 0198D404B36DB36B5796FE562EA29CA31D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKMb41sydPLLhX5a81aLaFqJEn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.mft
Manifest number: FD
Signing time: Fri 22 Aug 2025 23:02:14 +0000
Manifest this update: Fri 22 Aug 2025 23:02:14 +0000
Manifest next update: Sat 23 Aug 2025 23:02:14 +0000
Files and hashes: 1: RKMb41sydPLLhX5a81aLaFqJEn0.crl (hash: C0f8Fc7Et1ohGKW5fL9wVE2nZ2DlVsy5Z3qZUpy02H8=)
2: YFJicIZOsKffrZlgqGfXDM6-Vko.roa (hash: clBAf9+wIJJTmEssFM2b37Ghk44VkYVJfz08MTSBlTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKMb41sydPLLhX5a81aLaFqJEn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:b3:6d:b3:6b:57:96:fe:56:2e:a2:9c:a3:1d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a31be35b3274f2cb857e5af3568b685a89127d
Validity
Not Before: Aug 22 23:02:14 2025 GMT
Not After : Aug 23 23:02:14 2025 GMT
Subject: CN=6d02fb0911d79ce2f868ab87603995c9e4c9eee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:10:bf:27:21:f0:f3:a1:d6:d2:89:ec:43:03:
ff:8a:5c:bd:92:89:1f:08:a7:0e:bd:2d:ec:94:d6:
bd:ef:1e:26:34:ac:51:ac:6a:8d:20:69:c6:73:bd:
3a:a2:4c:90:8a:2e:81:66:0c:01:f6:b1:80:df:10:
70:ef:41:72:6c:f9:05:8a:0c:79:85:2e:a9:ca:23:
e8:e2:f0:e9:1b:4d:b9:d8:72:59:57:d9:95:cc:22:
6b:92:38:ec:bc:1a:74:1a:c3:37:89:e6:8d:3e:1d:
8e:02:1c:ee:8d:bf:e9:6e:5c:fb:a4:0f:43:07:a0:
f2:37:95:7a:5b:ee:4b:03:59:f4:37:d1:34:9a:94:
aa:0b:5f:5a:a6:13:75:29:6e:47:e4:5c:8b:13:5a:
cf:56:51:f7:30:ce:e8:a2:ac:c8:a0:80:17:28:a8:
b0:05:7f:fa:33:92:3b:f1:3a:55:1c:e7:a6:a9:f8:
36:a6:ee:9f:35:e1:0a:2f:06:2a:53:9b:92:cf:f4:
79:d6:73:70:50:fa:de:d5:bd:f8:d3:66:ea:93:42:
00:7d:8f:e8:d2:ec:eb:2a:2a:ea:25:d3:55:0f:31:
79:33:23:13:01:cb:95:8e:63:25:32:01:76:c4:5d:
16:b2:08:74:3e:bc:bc:e1:7d:84:1e:68:8b:62:01:
08:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:02:FB:09:11:D7:9C:E2:F8:68:AB:87:60:39:95:C9:E4:C9:EE:E5
X509v3 Authority Key Identifier:
keyid:44:A3:1B:E3:5B:32:74:F2:CB:85:7E:5A:F3:56:8B:68:5A:89:12:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKMb41sydPLLhX5a81aLaFqJEn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a86dfb-1204-47e3-ad76-ae7727949445/1/RKMb41sydPLLhX5a81aLaFqJEn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:98:3d:1c:cf:e2:4d:a7:da:ff:0f:f6:b0:ef:fe:06:c4:64:
56:5d:7c:a6:c1:28:92:07:cb:c5:be:f5:f9:2c:94:f1:f2:a3:
96:06:0a:91:f2:22:d7:6f:e4:89:a1:38:87:f5:c5:33:9f:63:
32:e2:4a:c6:5b:65:b6:d8:89:dd:26:85:81:07:16:9e:f9:00:
46:f3:65:68:3b:f7:4c:d2:2a:e3:82:e6:df:42:6d:9e:a8:80:
f9:f6:37:5e:e1:7b:b8:47:91:7f:c1:a2:ae:f0:fa:dd:22:f0:
81:a1:12:93:96:7e:07:6f:0d:f8:9a:7f:3f:ef:f6:44:46:e8:
01:31:7c:b4:31:1d:7e:0f:cf:5e:08:7e:a5:fb:d9:5b:4a:8b:
8c:04:a0:55:d5:c4:fc:a9:d5:54:ff:38:d1:38:12:a5:1a:54:
4a:e0:3b:15:63:60:a2:b4:fa:2a:ad:07:10:93:a5:3a:16:01:
c7:c8:71:b6:1b:46:74:a6:f1:05:b6:23:2b:fd:1c:5d:29:91:
f2:06:8e:15:e4:9d:bc:5a:4b:b4:33:9a:2e:ce:04:19:a3:ec:
82:a2:58:c9:23:77:65:a8:9f:79:89:66:a1:80:02:b9:f3:c2:
d9:57:c8:00:23:8b:0a:b4:7b:e2:44:91:fe:9a:2c:ea:2a:01:
3f:2f:18:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:38 2025 by rpki-client