Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.mft
File: RmSWpNugTX71InAAYXQ8bF0K5ZA.mft (raw, json)
Hash identifier: IJ7uguoyWrqEjQh9mUVxPpEwAm+glTszLBa/n0A2Lco=
Subject key identifier: F4:0C:00:13:29:0B:85:5F:70:5B:AA:A2:0D:4D:72:F9:5F:FB:ED:7F
Authority key identifier: 46:64:96:A4:DB:A0:4D:7E:F5:22:70:00:61:74:3C:6C:5D:0A:E5:90
Certificate issuer: /CN=466496a4dba04d7ef522700061743c6c5d0ae590
Certificate serial: 0198D65F53F1290D93DD66DA57FEABDFA108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmSWpNugTX71InAAYXQ8bF0K5ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.mft
Manifest number: 2A
Signing time: Sat 23 Aug 2025 10:00:28 +0000
Manifest this update: Sat 23 Aug 2025 10:00:28 +0000
Manifest next update: Sun 24 Aug 2025 10:00:28 +0000
Files and hashes: 1: 3cYwGEYRvz1yKJhsQiVSnoCXk2c.roa (hash: 7LKNIki25we3oiggzy3/a1vHXwiHcC9D9HO/l5A+7h0=)
2: RmSWpNugTX71InAAYXQ8bF0K5ZA.crl (hash: O89hJIGhNd8UOi6cpNr8YjgS9Pphzy1S0TcSADMSL7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmSWpNugTX71InAAYXQ8bF0K5ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:53:f1:29:0d:93:dd:66:da:57:fe:ab:df:a1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=466496a4dba04d7ef522700061743c6c5d0ae590
Validity
Not Before: Aug 23 10:00:28 2025 GMT
Not After : Aug 24 10:00:28 2025 GMT
Subject: CN=f40c0013290b855f705baaa20d4d72f95ffbed7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8c:57:41:81:9d:c8:ae:23:1a:80:bd:15:5a:
ef:4c:02:b6:6a:5a:6b:1a:65:fa:dc:d8:b9:2f:70:
ea:3a:3a:94:f3:c2:42:f0:7c:a7:c9:34:26:5a:bc:
7e:96:3e:55:cb:08:c5:92:54:65:3a:8c:49:48:d8:
ef:b5:ef:6f:58:2d:23:f8:8b:92:d3:6c:57:d0:42:
d1:df:f0:2a:77:cb:05:94:d8:77:b5:08:3f:fc:b1:
3b:20:13:eb:4e:35:7a:b8:3a:fa:03:5b:9d:9b:28:
00:1e:a5:17:da:09:fb:05:20:e6:97:dd:9c:36:b4:
5f:7d:bc:a6:0f:22:57:03:a9:ac:fb:77:b9:88:6d:
ba:55:5f:d8:fd:e2:a1:fc:60:bc:e8:58:7d:f8:ed:
4e:87:a0:94:78:1a:62:af:14:2e:07:a1:1b:68:0f:
b4:cb:98:00:11:a6:de:ef:c7:5d:24:a2:6e:b1:5e:
55:3f:fe:4b:b9:f9:65:23:bf:d9:38:cf:c1:7e:e7:
ce:8f:99:2f:51:e7:81:98:9c:45:98:4a:dc:22:ce:
11:7f:55:3d:02:0a:2d:aa:a9:19:31:31:01:0c:6c:
c5:68:5a:98:86:bd:72:30:b5:fc:ce:8e:4c:98:f0:
33:30:f4:1a:9f:51:09:4a:f2:6e:19:cb:93:94:92:
fd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0C:00:13:29:0B:85:5F:70:5B:AA:A2:0D:4D:72:F9:5F:FB:ED:7F
X509v3 Authority Key Identifier:
keyid:46:64:96:A4:DB:A0:4D:7E:F5:22:70:00:61:74:3C:6C:5D:0A:E5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSWpNugTX71InAAYXQ8bF0K5ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/a60fe9-858d-4662-80cc-e89e02659100/1/RmSWpNugTX71InAAYXQ8bF0K5ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a7:95:0a:57:63:92:5d:8a:f0:92:c3:26:7c:e2:cb:34:ab:
32:fa:3b:0b:5e:9d:13:f1:e2:b4:75:52:0e:95:af:86:10:ce:
d6:ff:47:a8:76:e7:39:a0:c5:3e:ec:54:e3:0d:9c:1c:5c:15:
b4:73:10:51:7e:e6:b6:4b:c9:32:88:06:19:d4:c5:d6:f2:dc:
1e:da:5d:2d:b6:af:ec:7c:c4:72:b5:81:43:cc:34:b1:55:c2:
fd:7a:99:c9:c7:c0:0c:16:65:1f:d5:12:2a:2b:20:dd:ba:97:
35:2d:36:4f:e1:90:4e:48:11:8c:b4:a6:a0:2c:68:96:44:38:
53:1d:23:5e:34:9a:fc:5a:13:47:9a:aa:5e:0d:0e:3b:5a:b9:
49:60:8a:f3:6e:8f:d0:04:38:29:31:0e:cd:25:d0:2f:73:3c:
63:c1:0b:7e:29:b0:db:9e:75:ec:05:d1:d8:db:bb:b5:dc:f2:
26:bd:fd:7c:00:a7:37:fc:6d:91:de:b5:7b:f8:e8:8e:e2:0d:
ef:26:fc:35:10:5d:12:3c:99:b4:f7:d4:85:91:29:c2:a5:e7:
51:a9:a5:69:f9:c9:ad:9d:bf:45:5b:65:eb:68:ad:3e:f9:da:
ac:81:e7:32:a9:42:fd:b0:15:00:76:6b:d3:ec:8b:f1:8c:d0:
e3:b7:af:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:12 2025 by rpki-client