Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
File: RNPMWRzro4YTDzyfdCZFi4iHwus.mft (raw, json)
Hash identifier: zAr3kGCiPF8kLnPsPGiBxBZc8ZFYy5Hu1tvcrLnpwNU=
Subject key identifier: 50:0B:95:39:A7:21:21:58:12:97:C8:FE:93:5B:7C:88:82:C8:2D:C3
Authority key identifier: 44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
Certificate issuer: /CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Certificate serial: 0198D65FDD9B9BF257E946C7C552DC1CDE9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
Manifest number: 0674
Signing time: Sat 23 Aug 2025 10:01:03 +0000
Manifest this update: Sat 23 Aug 2025 10:01:03 +0000
Manifest next update: Sun 24 Aug 2025 10:01:03 +0000
Files and hashes: 1: 5_5ZxyaYymDkazwik4_YUJ_u6nk.roa (hash: 0ihJyb/8cvHev60hCuqr7j7mSBpvAI6EqaNQNOqgNHg=)
2: RNPMWRzro4YTDzyfdCZFi4iHwus.crl (hash: f5F3KcyzYZ3XYsBu7kIgmiMaxcRqehbNFdD+qJQqtDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:dd:9b:9b:f2:57:e9:46:c7:c5:52:dc:1c:de:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Validity
Not Before: Aug 23 10:01:03 2025 GMT
Not After : Aug 24 10:01:03 2025 GMT
Subject: CN=500b9539a72121581297c8fe935b7c8882c82dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e8:7c:0d:04:19:18:80:55:a5:71:9a:af:e8:
25:81:75:78:dd:09:05:34:50:bb:b3:ac:1a:5b:34:
1f:83:5a:26:75:0f:b7:03:e9:97:96:a1:10:8e:67:
ae:6b:d9:80:2f:b4:07:e2:0d:5b:b5:5a:d7:dd:df:
f2:b8:a5:00:28:84:01:39:9f:91:67:d3:d2:f6:12:
d9:1f:1a:38:75:18:a7:92:cb:8a:7e:57:fb:8d:65:
de:5f:e2:6d:66:95:21:1c:37:5a:4a:87:3f:e2:8d:
39:ff:81:e5:96:67:b5:0a:c5:77:d0:c7:78:0a:54:
77:10:26:22:9a:c0:a4:97:4a:77:31:d0:e2:0b:de:
a8:da:40:ed:aa:9a:fb:d9:89:31:46:cb:74:b9:74:
f7:01:9c:3d:73:2a:43:16:c8:5c:58:62:92:27:08:
26:cb:df:2d:73:54:3a:21:3a:62:cb:08:af:a8:1d:
12:23:27:a1:21:29:c7:c4:c4:60:24:a8:be:c7:13:
c6:c6:1c:83:a3:e3:23:88:db:f0:1e:09:9e:97:ca:
ed:85:e3:09:d4:3c:26:9c:fa:98:57:c7:d5:95:be:
2d:98:da:5d:a6:b5:a2:61:e1:49:3b:e0:f1:cf:95:
70:e0:06:9c:95:78:d5:34:90:09:a8:ad:38:ae:c6:
31:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0B:95:39:A7:21:21:58:12:97:C8:FE:93:5B:7C:88:82:C8:2D:C3
X509v3 Authority Key Identifier:
keyid:44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c6:5f:a1:27:b2:ab:1f:d0:55:f0:f1:6f:c0:92:e5:b7:24:
fd:75:68:d3:57:8f:41:95:cb:a6:5d:71:a7:e0:92:0c:06:97:
55:ef:59:f5:99:24:53:f5:1b:59:5c:25:a3:5e:bf:cb:b3:91:
c0:ed:a8:bb:35:07:ac:3c:4d:eb:4c:86:ad:e0:3e:b6:13:dd:
56:1b:d1:af:39:a3:0a:a3:7d:49:78:bb:65:5a:06:01:13:06:
ba:89:1b:eb:94:3e:6c:51:74:23:0f:61:99:83:e8:68:81:16:
11:38:d7:61:f3:4b:72:51:cb:30:ea:25:ee:be:e6:75:80:50:
5c:8b:d7:81:00:88:ae:a5:be:a3:92:e5:76:28:5d:e1:4a:ff:
c3:e4:b6:2c:70:40:c3:31:85:e8:2a:f1:34:a1:c0:4d:ae:d4:
7b:55:5d:9e:65:3a:73:64:92:22:54:11:43:5c:b4:6e:91:a8:
7d:07:b9:38:ec:d0:87:41:c2:25:43:f2:4e:14:52:a2:d6:0c:
63:31:17:2b:6d:4d:80:fa:a9:a2:53:18:63:c5:b4:f1:cb:39:
d8:bc:54:d1:92:3f:b8:5a:6c:aa:cc:c9:14:3f:42:70:c8:4f:
a0:44:04:1f:27:da:37:6e:83:53:ee:f7:bf:04:ab:f8:a1:b8:
0e:9c:d2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:44:26 2025 by rpki-client