Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
File: RMDyoqVgB-TEXMxx59oJKGEwWyA.mft (raw, json)
Hash identifier: xByDfZ67gXuO+XCRhVskGzeQpmoV/AIZNEG9MyVhFaU=
Subject key identifier: 07:EC:30:12:07:CF:2A:38:58:39:9B:33:71:F1:A4:88:FD:39:C5:C6
Authority key identifier: 44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
Certificate issuer: /CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Certificate serial: 0199FC8FB45E4EF180EC1FE096D93CA44C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 13:01:40 +0000
Manifest this update: Sun 19 Oct 2025 13:01:40 +0000
Manifest next update: Mon 20 Oct 2025 13:01:40 +0000
Files and hashes: 1: AaeTZJ_Mx4pF3TF16wEEVAdeKg4.roa (hash: uC6UcXyt2Kmfls1QdacCrz5Tf6o/T5Y+fDQ00/99ycM=)
2: RMDyoqVgB-TEXMxx59oJKGEwWyA.crl (hash: ee3LoELMVUuROeA7QpGtRgcNcVAKIl+1g0SSpkHueD4=)
3: j-Ifej8p6sYfHH1KeQ_QH-keweY.roa (hash: iVB6o7qwOuA1Lj9sG4cTIYUNVhckFRweng10RlAwHI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b4:5e:4e:f1:80:ec:1f:e0:96:d9:3c:a4:4c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Validity
Not Before: Oct 19 13:01:40 2025 GMT
Not After : Oct 20 13:01:40 2025 GMT
Subject: CN=07ec301207cf2a3858399b3371f1a488fd39c5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:85:01:c5:cf:d3:ac:82:43:7e:19:4d:11:1a:
89:3c:c9:7e:23:73:08:c3:10:84:e2:c0:91:8b:e8:
eb:b2:47:42:7b:3a:d0:cb:36:2c:69:5a:1b:ef:69:
b5:2f:62:81:dd:42:a5:49:bc:be:e1:f2:28:8d:dd:
2e:71:37:36:3b:ac:8d:20:12:e0:25:2e:a9:5a:3b:
b2:f2:31:3b:98:eb:80:b0:d6:bc:9d:69:9b:f3:e0:
c3:33:8e:87:4b:06:c3:c9:db:e2:80:71:fc:d1:64:
d0:ed:4e:30:02:d4:f9:8a:85:98:8f:b8:28:fd:f4:
8e:07:76:c0:e9:02:02:37:16:ae:05:b4:96:5c:f1:
15:81:e2:2c:69:62:ce:a4:9a:7f:f9:ad:68:5a:40:
e1:55:4e:c3:16:d3:91:47:89:a0:02:23:a4:62:ee:
ee:26:da:d6:06:81:e4:82:1c:82:22:b4:6e:0d:04:
18:d2:b6:93:96:ad:f7:3f:ec:e7:e1:0c:f0:07:fc:
72:92:3b:da:c6:15:1a:b0:84:b2:e0:59:20:e5:e5:
d6:58:fe:77:9f:b0:9e:23:28:f9:d6:8a:d5:0f:60:
49:67:0f:b0:9f:70:78:99:b4:51:cb:f7:70:96:8d:
b5:5f:d1:1b:57:68:74:52:53:c3:c2:65:c6:66:4d:
bb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EC:30:12:07:CF:2A:38:58:39:9B:33:71:F1:A4:88:FD:39:C5:C6
X509v3 Authority Key Identifier:
keyid:44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e6:7e:c6:c2:83:f8:82:09:55:ec:3a:fa:d8:a5:ee:5d:7e:
53:78:e0:ca:b8:d8:f9:cd:f5:48:1b:69:68:cf:1b:72:aa:fb:
9f:df:5f:d6:b0:8c:5c:ce:a3:b3:bf:a4:f0:46:8c:53:c3:32:
d1:8f:1f:92:1e:e6:10:14:13:cb:e4:39:c7:80:a2:53:18:49:
af:8e:d5:85:1a:67:32:ae:c5:c0:e1:a8:06:01:aa:4b:f0:a1:
1d:0a:31:7b:78:17:da:d8:ff:33:f7:4d:9f:05:55:3e:f2:26:
3e:f5:24:47:ca:34:d9:8f:51:7c:2f:1c:e7:a6:d9:e0:f2:a4:
b1:d3:36:80:e6:c2:3e:d6:b1:e5:05:0c:3b:a5:33:d5:98:d3:
05:c7:ba:ad:a9:8c:ce:cb:24:77:42:32:7c:70:20:41:59:6d:
d0:92:d0:6e:9b:61:b2:28:ca:e9:31:d8:00:56:07:df:2c:8d:
57:3e:d7:74:40:4a:d4:01:f4:fa:98:8a:00:fe:2e:e2:69:e9:
fd:5e:95:4b:ec:0d:bd:b3:d3:ab:48:fd:be:a3:47:37:c6:6a:
d1:c6:65:7f:1c:7c:ec:10:d2:7e:bd:ba:4c:7e:02:88:4f:33:
0a:97:62:02:b7:65:99:8f:61:0b:1b:27:b9:c3:16:93:ce:33:
cc:10:52:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:56 2025 by rpki-client