Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
File: RMO0TLvE89paS0KFyW6jy1DU0HM.mft (raw, json)
Hash identifier: qCczkiWVXFOsnQW6Kc3wIzsUnes/DT0NbgdFmhMdlYA=
Subject key identifier: 03:4F:89:02:87:AC:ED:F2:25:F2:95:45:8A:57:8B:CA:CD:14:05:49
Authority key identifier: 44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
Certificate issuer: /CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Certificate serial: 0197B6D7AA91911128D21B63D41BE5428C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
Manifest number: 0C33
Signing time: Sat 28 Jun 2025 14:01:16 +0000
Manifest this update: Sat 28 Jun 2025 14:01:16 +0000
Manifest next update: Sun 29 Jun 2025 14:01:16 +0000
Files and hashes: 1: Bfc7EUchdTgGElUv3uM8P6L_JN4.roa (hash: zmd7LnQJEMvAXNDrVc3GmLiOfsPuEL2IoD+oEByUhjA=)
2: RMO0TLvE89paS0KFyW6jy1DU0HM.crl (hash: 2O0oVuujlFnIiHFYjb9Ibnop97adg7C2y0hzhVyVfcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:aa:91:91:11:28:d2:1b:63:d4:1b:e5:42:8c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Validity
Not Before: Jun 28 14:01:16 2025 GMT
Not After : Jun 29 14:01:16 2025 GMT
Subject: CN=034f890287acedf225f295458a578bcacd140549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:a3:31:09:ed:32:fb:58:42:80:8e:2c:e5:
5b:9b:9a:c2:2b:74:a3:f4:0d:d4:3b:cd:dc:29:28:
84:64:40:4f:a1:29:70:3a:9d:36:cc:55:28:1c:f7:
70:1a:ab:3a:50:24:a4:03:7d:24:c2:e2:46:15:c7:
a3:d4:62:b9:84:82:be:ce:a0:bf:70:ba:df:ed:9f:
80:ec:36:99:1c:f7:1c:11:44:dc:7a:5a:76:ae:45:
7b:a1:c7:c2:02:bc:ec:7e:33:56:2d:70:32:a1:2c:
31:14:bc:30:04:c2:ed:cd:ba:71:11:74:c7:85:02:
de:84:47:39:c2:14:fa:5a:d2:b2:30:38:2e:60:b8:
f4:98:aa:1a:80:c0:47:39:88:41:99:3f:57:15:8b:
09:02:d1:52:90:11:c3:11:72:28:a9:89:56:44:d5:
ce:c3:b8:10:71:9e:c3:09:84:65:75:a9:96:2b:8b:
54:92:8b:10:46:c0:f2:70:2f:1e:b2:49:f5:2d:19:
c3:9a:fe:b0:96:be:a2:39:d3:9b:5a:48:60:2f:a0:
ab:28:72:f6:ef:be:20:49:a2:30:15:dc:24:11:fe:
9f:cd:2e:08:bd:03:63:5c:48:4a:6a:44:1a:75:72:
eb:3b:37:8b:15:42:0c:d6:4a:77:da:6e:0e:cc:00:
02:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4F:89:02:87:AC:ED:F2:25:F2:95:45:8A:57:8B:CA:CD:14:05:49
X509v3 Authority Key Identifier:
keyid:44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:02:9f:c6:2e:e8:d5:2d:75:72:f5:3b:05:ed:46:5e:0c:d8:
fa:64:24:4f:a1:17:be:ad:21:44:c4:59:74:61:49:96:62:35:
6b:0b:a5:a0:6a:10:20:c0:fa:d1:b8:93:c1:48:a1:62:75:1f:
15:ad:db:0f:ee:3b:a5:89:31:9b:2e:5b:84:f0:63:68:9a:4c:
c3:63:99:ed:24:7c:e0:5e:62:ef:9c:da:a5:d3:d8:a6:7f:6f:
8b:99:7d:6c:d7:18:c3:c7:14:01:de:5f:9b:2c:5c:9e:7c:52:
cf:7a:1f:fe:09:80:54:c3:d5:bb:17:c7:4e:5a:45:4b:94:34:
ea:86:77:d6:b7:07:a4:76:a5:43:3b:ab:43:52:7a:82:07:2e:
f9:9c:2e:fb:4a:54:ac:54:84:b9:66:b1:4d:26:83:97:6d:ba:
e3:a5:b8:bf:f3:3b:3c:94:91:08:7a:95:27:a7:f1:66:1a:3a:
56:2e:f7:c1:f9:85:22:7b:e3:46:57:7c:ac:01:25:32:5c:04:
42:62:c7:4c:35:04:61:25:b1:38:81:68:69:87:18:9e:70:9a:
73:d0:29:8d:47:22:0d:5a:c4:af:36:1f:51:1a:e9:ae:bb:19:
0e:63:b0:72:fb:2f:86:42:1f:87:10:70:4f:a6:93:69:2b:bc:
70:20:c5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:43 2025 by rpki-client