Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
File: RMO0TLvE89paS0KFyW6jy1DU0HM.mft (raw, json)
Hash identifier: sTU03b0VTnByBmFBipB9a/puEkfB3RV7hsIXp+z+/vw=
Subject key identifier: FB:A6:DF:DC:8B:A8:EF:B3:78:C8:BE:1D:6A:8D:B1:7D:FD:F1:95:DB
Authority key identifier: 44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
Certificate issuer: /CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Certificate serial: 0199FFFE288C9D3A32BB00E3A3EBE546C04F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
Manifest number: 0D62
Signing time: Mon 20 Oct 2025 05:01:10 +0000
Manifest this update: Mon 20 Oct 2025 05:01:10 +0000
Manifest next update: Tue 21 Oct 2025 05:01:10 +0000
Files and hashes: 1: Bfc7EUchdTgGElUv3uM8P6L_JN4.roa (hash: zmd7LnQJEMvAXNDrVc3GmLiOfsPuEL2IoD+oEByUhjA=)
2: RMO0TLvE89paS0KFyW6jy1DU0HM.crl (hash: QhSnk07oFC4MXcArV/JO35cSZgCO+of0ez0RLWgzfgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:28:8c:9d:3a:32:bb:00:e3:a3:eb:e5:46:c0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Validity
Not Before: Oct 20 05:01:10 2025 GMT
Not After : Oct 21 05:01:10 2025 GMT
Subject: CN=fba6dfdc8ba8efb378c8be1d6a8db17dfdf195db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:3f:24:b0:04:c9:7c:0a:fc:52:05:a1:e1:
e5:42:33:b6:b3:ab:cd:92:09:b2:31:11:7d:72:b1:
ad:ae:33:b4:8a:d4:00:4a:97:1e:15:52:9d:91:54:
c1:bf:69:86:f9:a0:4a:79:81:f0:be:4f:f6:5f:39:
40:a5:5b:b0:03:3b:4a:80:aa:ae:53:b5:4a:f4:86:
2a:f7:ef:ae:85:22:9e:36:f4:b8:cb:62:ff:14:c5:
fc:d3:e4:4f:6e:b6:f7:2d:fe:b9:ac:e8:ae:32:8d:
bb:39:e7:5b:d9:c7:c1:49:ea:c3:44:be:53:5a:c5:
b0:03:9e:07:f3:5f:20:ab:86:a7:65:2d:a0:97:a0:
40:97:b9:50:14:e3:dd:b3:18:7f:f6:4a:e2:a3:50:
c5:6e:a0:27:59:2d:d1:89:01:66:a0:dc:ba:e2:41:
94:db:c0:2f:60:8e:47:5f:ba:e4:0b:a6:1e:00:1a:
11:1d:d0:fe:94:0f:0d:c1:eb:a0:84:ec:59:c0:1c:
f3:30:a9:8b:29:f6:64:1b:a9:95:bc:2d:cb:91:dc:
ec:c6:9c:e6:ed:c5:c6:76:7e:81:a4:7c:0a:fe:70:
f5:b3:42:30:df:ee:4d:ca:c2:13:11:07:0e:9b:17:
98:dc:50:d9:4f:30:94:85:b0:68:6d:7e:c7:3c:59:
57:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A6:DF:DC:8B:A8:EF:B3:78:C8:BE:1D:6A:8D:B1:7D:FD:F1:95:DB
X509v3 Authority Key Identifier:
keyid:44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d4:b1:b2:69:74:38:19:0d:ca:84:6e:05:12:03:65:0a:cf:
97:ae:60:9f:b2:c0:b0:48:2d:dc:66:10:3d:0c:77:fc:ee:3a:
09:00:f0:87:49:7b:a5:b7:a1:f4:ac:1e:5a:92:da:41:8b:6f:
85:3b:43:dc:eb:1b:d8:f7:bf:e4:a0:79:f8:14:b0:04:9d:ca:
31:0e:bb:97:6e:8a:0a:07:61:b8:35:a6:42:0c:7e:b7:b7:33:
38:06:03:c0:4e:c7:56:53:9d:bd:c2:bb:ee:ee:2a:57:13:87:
c4:dd:14:f2:31:08:7c:fa:ce:a5:9a:d0:53:67:9c:36:4b:d3:
cc:9d:b6:41:f7:8b:d7:c6:b3:16:74:b9:b9:e3:b5:9d:65:cc:
1b:19:f4:7b:7b:93:3e:2a:ee:68:bb:20:69:ad:fe:c3:f7:79:
8f:14:59:0a:64:01:30:39:41:1b:f2:a5:7f:ce:57:d4:db:06:
e3:d6:48:89:f0:4e:2d:f1:a5:e6:d6:c8:13:e0:dd:a9:d0:17:
6c:4d:b7:c6:35:18:12:4d:c4:1e:2b:de:fc:28:33:b2:29:1c:
85:ab:15:93:04:1c:b4:f5:e4:65:1f:11:3e:ec:e2:01:3b:23:
df:44:f1:17:87:d4:9b:6b:f8:9e:8a:ce:df:be:9c:76:3e:18:
e8:79:f9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:54 2025 by rpki-client