Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
File: RNPMWRzro4YTDzyfdCZFi4iHwus.mft (raw, json)
Hash identifier: T3uPpfF1dA2ISghdQRvMoMi9uEHolje4etLcuMqcCEI=
Subject key identifier: 2E:D6:22:32:15:1E:F5:0D:A6:4F:47:73:F7:AA:37:2A:CE:FF:43:01
Authority key identifier: 44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
Certificate issuer: /CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Certificate serial: 0197B6A047012A959E8C6D9514B39D89C185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
Manifest number: 05DF
Signing time: Sat 28 Jun 2025 13:00:46 +0000
Manifest this update: Sat 28 Jun 2025 13:00:46 +0000
Manifest next update: Sun 29 Jun 2025 13:00:46 +0000
Files and hashes: 1: 5_5ZxyaYymDkazwik4_YUJ_u6nk.roa (hash: 0ihJyb/8cvHev60hCuqr7j7mSBpvAI6EqaNQNOqgNHg=)
2: RNPMWRzro4YTDzyfdCZFi4iHwus.crl (hash: ScnW1/bs9YlInue4/bsuKpzbaGKBR/FB9RCecLtPFxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:47:01:2a:95:9e:8c:6d:95:14:b3:9d:89:c1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Validity
Not Before: Jun 28 13:00:46 2025 GMT
Not After : Jun 29 13:00:46 2025 GMT
Subject: CN=2ed62232151ef50da64f4773f7aa372aceff4301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1e:8a:1b:c6:4d:8f:ec:29:76:e3:8a:80:50:
24:8e:b1:29:91:01:94:1f:61:34:cb:8e:90:62:cf:
0c:cb:1b:7e:8c:f5:71:f2:99:82:50:2d:8f:48:5e:
f8:82:f0:b1:24:ad:ce:aa:d0:18:ae:7f:30:9e:45:
51:fe:45:be:cc:28:dd:7f:99:8d:3e:4d:1a:8e:16:
e6:49:29:20:35:a5:a3:30:bb:bd:2f:bf:50:c6:7c:
e1:20:d2:57:7b:6d:c6:e1:65:35:b0:b5:94:00:5e:
24:c1:f8:91:7d:54:9f:4e:d1:a2:db:28:b4:85:ff:
f3:39:b2:a3:6d:1f:da:1d:ae:d1:bc:ea:44:2d:f8:
29:84:21:22:05:b7:d1:b8:6d:f8:e9:4a:5b:01:7c:
e7:76:c6:89:b7:ed:6f:5b:90:31:8e:33:07:26:a6:
03:e1:b1:04:7a:ee:3f:29:5b:7c:52:98:fa:a3:f8:
b3:56:0b:16:42:41:c5:22:21:02:0b:00:db:4f:82:
01:01:ae:8a:c6:4c:c5:c9:cd:5d:7f:d8:7f:bd:71:
a8:d6:12:68:93:c6:57:09:54:40:8d:3d:92:ba:7d:
ae:5f:9a:82:b1:3c:46:70:d7:2e:f2:49:36:05:a5:
76:c1:92:42:e4:16:12:ab:64:73:21:2c:26:db:a7:
dd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D6:22:32:15:1E:F5:0D:A6:4F:47:73:F7:AA:37:2A:CE:FF:43:01
X509v3 Authority Key Identifier:
keyid:44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:97:24:85:f9:f6:57:49:b9:04:97:cf:62:3a:6b:8f:8e:96:
53:dc:cb:fb:74:94:88:e4:bb:5f:66:34:18:6c:4d:ec:42:dd:
36:6e:c4:ed:4a:15:92:0b:ee:05:28:88:11:a0:a8:20:26:79:
a9:08:f7:f0:9f:6c:2a:06:88:1a:e6:5a:75:fd:59:eb:03:c1:
31:ed:ec:ed:54:5b:c1:54:55:f4:82:cc:f6:67:14:f7:5d:a5:
6d:e6:cf:0a:78:f6:23:40:0e:11:82:44:b4:ab:21:37:83:a2:
b8:42:2c:c5:89:b1:04:44:d8:73:c6:b5:32:3f:f0:00:35:66:
20:9e:32:8d:5a:c0:60:67:5d:c1:bb:01:70:38:29:54:a8:ac:
1e:f7:70:86:04:0e:31:9c:99:e2:c3:d3:cf:87:65:71:6b:52:
9d:80:78:53:9f:f6:c1:ae:db:1a:ae:c3:88:75:a6:72:67:ad:
99:9b:76:cb:54:f8:98:6a:f1:f6:86:e9:e9:c3:2f:1c:4f:ea:
4b:6e:53:cb:55:03:ac:54:b2:6b:82:1f:21:2f:7d:55:d6:a6:
99:56:e3:d9:10:13:61:2c:d4:84:43:93:75:56:b8:16:93:a1:
d7:72:c0:2d:fa:42:11:a3:1c:1a:e9:2f:be:f9:e0:38:a1:d7:
b9:66:a9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:43 2025 by rpki-client