Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
File: RmSbV7gX7BQ93LfXcSwiux8orHU.mft (raw, json)
Hash identifier: 5ktv0hMIEK9Er8rcb++UNjhJiF7h+lughOZ+Xdr0J1w=
Subject key identifier: 34:3B:48:B7:D6:10:B3:70:B4:59:2E:F3:4C:41:D2:36:51:02:BC:AA
Authority key identifier: 46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
Certificate issuer: /CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Certificate serial: 0199FDD8B17F56BD9CBE7E0C9AF7B11F5CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
Manifest number: 16BD
Signing time: Sun 19 Oct 2025 19:01:00 +0000
Manifest this update: Sun 19 Oct 2025 19:01:00 +0000
Manifest next update: Mon 20 Oct 2025 19:01:00 +0000
Files and hashes: 1: E48fxMRuF9_usgkv-wBA_GtkkY8.roa (hash: TJ/B+8gZ2LSJEkkPcBk2s1l74WkEA3d0hjUzJQAQi8w=)
2: RmSbV7gX7BQ93LfXcSwiux8orHU.crl (hash: ru/GTromE6x3mWvzeNa2TjOR6DKIh02RG0FuB3Acdsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:b1:7f:56:bd:9c:be:7e:0c:9a:f7:b1:1f:5c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Validity
Not Before: Oct 19 19:01:00 2025 GMT
Not After : Oct 20 19:01:00 2025 GMT
Subject: CN=343b48b7d610b370b4592ef34c41d2365102bcaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0f:e6:2a:c4:14:e1:bf:57:72:85:d0:60:09:
a3:62:ad:75:14:c6:c9:7e:14:ac:60:f0:e6:bf:6a:
20:17:d1:e5:c8:80:63:f7:09:0e:38:a3:3a:d6:9a:
98:ca:f0:80:53:a4:d4:bf:96:b4:2e:c5:c9:47:cc:
bf:d0:27:42:87:5b:53:e4:32:2a:4f:b8:dc:e8:e8:
a6:4c:97:0c:6c:69:ad:09:8f:8e:bb:3b:ee:66:1d:
20:04:ee:c4:0f:95:c3:f4:74:96:13:b4:6f:ab:4e:
29:1d:fc:64:e6:03:25:a0:ef:50:e2:1e:9c:f1:37:
62:02:c9:c5:8f:15:7e:1d:7d:f4:1a:4c:87:4b:0f:
a3:6d:d7:4c:e2:ec:55:53:fc:1d:01:ea:44:aa:bb:
3e:88:cc:dd:cf:1f:c9:f1:bc:97:1b:43:46:94:6c:
e4:02:0b:5a:01:6d:12:56:76:9e:a2:40:0a:0f:f3:
7f:c6:e9:7a:cf:04:8a:e1:02:c9:24:34:81:b5:17:
79:10:fe:d1:d8:75:5e:4f:71:22:91:cf:5c:92:7b:
d0:90:a0:a8:1c:51:5b:15:79:70:1d:e2:9d:32:33:
45:73:28:44:b3:2a:0f:4e:d4:06:8a:a0:52:18:ae:
3d:41:b0:72:e9:ae:70:de:33:d7:cf:d3:30:d4:3c:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3B:48:B7:D6:10:B3:70:B4:59:2E:F3:4C:41:D2:36:51:02:BC:AA
X509v3 Authority Key Identifier:
keyid:46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fb:3c:69:da:dd:b7:17:c0:3d:88:ab:af:f7:00:54:0f:85:
f0:0a:f8:84:f5:c5:58:96:19:27:a9:51:9d:4f:1c:c2:ec:fd:
56:08:ac:ce:76:b5:9c:17:28:49:5f:29:ca:3d:d6:35:34:22:
08:22:22:2d:98:85:73:a4:eb:e5:51:94:54:97:09:ce:fa:bf:
70:a5:0e:9a:9a:4f:65:cc:a9:e3:44:ca:ec:c0:a9:26:08:b3:
81:0b:25:41:14:ae:ae:30:c2:4e:e9:ba:51:25:61:49:4a:e2:
fd:e8:74:8d:2e:90:9b:cd:df:41:02:52:eb:0e:0e:9a:8a:39:
48:f1:db:b4:fa:09:a7:67:df:0d:16:2f:33:1c:85:70:d8:23:
fe:42:7d:b9:66:1f:47:c7:5b:eb:e7:57:0f:e2:73:24:3d:95:
8a:1a:d8:45:82:0e:2c:f0:c5:17:08:6d:02:03:07:94:24:e7:
ec:9e:71:e6:26:db:d2:5b:f5:48:e2:b5:ab:e4:fc:92:4f:e9:
97:ef:b7:7a:73:4d:13:50:b0:48:25:2b:1d:06:c2:7e:d0:0b:
12:a2:5e:73:ed:11:3d:d9:b4:5d:a0:9e:dd:09:c0:d3:f9:18:
f4:25:09:2c:f5:6d:23:79:80:dc:0f:62:1b:48:0b:41:e8:e6:
81:8e:62:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:40 2025 by rpki-client