
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
File: RmI6xd-e7899JPMXx7aUKX5PNio.mft (raw, json)
Hash identifier: +OJodunSbGzyyfus+XU6Xsz3xYY8HxPbAqiTODuyt20=
Subject key identifier: EF:A8:70:CE:4B:95:1F:64:E3:10:56:88:7E:A3:88:64:E5:46:C7:B9
Authority key identifier: 46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A
Certificate issuer: /CN=46623ac5df9eefcf7d24f317c7b694297e4f362a
Certificate serial: 0199FB7CE75B8D3778A1F72C83A7059E4A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
Manifest number: 07C9
Signing time: Sun 19 Oct 2025 08:01:30 +0000
Manifest this update: Sun 19 Oct 2025 08:01:30 +0000
Manifest next update: Mon 20 Oct 2025 08:01:30 +0000
Files and hashes: 1: RmI6xd-e7899JPMXx7aUKX5PNio.crl (hash: 9nyXKQcTayxsYwZGtxqcKCF3SpfaKRD5V6uOB/OUIZI=)
2: nCIxCjPPY6DWPKx_WJ_D213f1h8.roa (hash: TAjRe+1L1yReCVm9dO/sWTs7kJtd/3RFn58xjlrbP+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:e7:5b:8d:37:78:a1:f7:2c:83:a7:05:9e:4a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46623ac5df9eefcf7d24f317c7b694297e4f362a
Validity
Not Before: Oct 19 08:01:30 2025 GMT
Not After : Oct 20 08:01:30 2025 GMT
Subject: CN=efa870ce4b951f64e31056887ea38864e546c7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bd:2d:69:a3:23:81:76:8b:2e:c5:78:be:8e:
a0:b4:74:1b:c4:f3:2b:4b:9e:52:e5:d0:66:54:f3:
c8:49:b4:fe:fc:df:24:47:3c:7f:82:78:07:0b:01:
90:d9:41:ce:21:93:3a:65:1b:8b:6b:30:94:63:de:
93:73:bc:7f:54:be:f3:3a:b1:09:94:55:1f:85:9b:
62:cf:c4:18:a6:85:c7:bf:cd:8f:82:77:7a:6c:80:
79:73:0f:a3:92:be:2e:5c:ed:e1:66:c6:5a:e4:2d:
f1:f5:b4:a6:45:e0:99:e3:15:02:22:91:b2:a3:fb:
08:0d:ab:c1:dd:41:f8:3d:1c:68:e8:c3:d2:6b:eb:
6f:27:28:a4:cd:5c:ee:08:37:7d:f0:70:70:8f:f7:
ff:7b:a0:77:81:f8:c8:e8:17:7a:81:54:48:8f:a3:
f7:30:91:de:cc:65:f7:88:93:43:8c:c2:a9:51:4d:
98:67:3b:e6:89:97:04:97:8c:c1:0f:91:b5:d2:dc:
e1:21:d0:b9:4b:b6:cb:ea:58:84:6b:18:42:8b:99:
3c:e5:b8:22:71:7a:21:bf:0e:4b:31:b5:59:6a:86:
31:56:c6:24:63:49:81:66:d2:e9:7c:be:89:53:d3:
54:90:75:18:35:e7:0d:5b:fe:95:cc:df:05:06:79:
8c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A8:70:CE:4B:95:1F:64:E3:10:56:88:7E:A3:88:64:E5:46:C7:B9
X509v3 Authority Key Identifier:
keyid:46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4d:30:8d:56:12:7a:87:ba:22:0a:ae:39:2b:63:0c:58:30:
9a:27:7f:71:f4:97:75:68:1b:14:7e:9f:f0:f5:86:45:6e:dc:
0b:88:07:a5:28:25:69:3c:ed:0f:cb:cd:98:b5:21:1a:db:fa:
36:6c:0c:b3:19:58:a1:17:73:9d:3d:0d:ce:df:6b:bd:25:73:
82:c7:66:09:5d:92:12:9e:f8:0b:b8:56:dd:f0:9e:d2:bb:a7:
32:05:a0:eb:66:9f:14:93:17:35:77:2d:53:fb:6b:f9:7b:85:
10:36:72:4e:49:9e:a7:76:aa:45:a6:4a:0b:6b:2c:5a:c1:0c:
c4:da:23:f4:61:f3:c4:c1:05:f7:1b:30:ba:50:99:0d:c7:79:
6c:41:59:3b:4a:b9:cd:ff:47:73:e1:43:fd:65:92:0a:b1:22:
9d:c5:f7:fa:40:8c:1d:1c:cf:59:27:84:45:f1:1a:bc:35:48:
b5:52:19:3c:07:0f:a7:d6:b3:f8:05:78:f8:e6:31:00:94:21:
c8:ec:c6:bd:d8:ef:5a:46:ca:d2:cb:ac:65:19:43:81:5c:7d:
a9:fd:f8:eb:f3:ea:e9:f7:b8:02:fd:7c:ac:a6:9e:a2:69:ee:
48:8a:c8:60:d1:14:09:bb:bb:e4:26:85:ef:30:e1:06:9d:ce:
c2:13:67:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:44 2025 by rpki-client