Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
File: RPMwC82ETWB1L-Xfst4pmWbpuPY.mft (raw, json)
Hash identifier: MVvfGoK5C/dQMVHQbuCt+YYyscOqkivazuYJ/7EYapo=
Subject key identifier: 84:32:6F:A1:B6:AA:48:E2:0C:AB:06:10:28:53:EE:5B:37:58:BA:25
Authority key identifier: 44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
Certificate issuer: /CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Certificate serial: 0199FFC86B1DB240C0348715A212EF8FCD9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
Manifest number: 0CCE
Signing time: Mon 20 Oct 2025 04:02:28 +0000
Manifest this update: Mon 20 Oct 2025 04:02:28 +0000
Manifest next update: Tue 21 Oct 2025 04:02:28 +0000
Files and hashes: 1: RPMwC82ETWB1L-Xfst4pmWbpuPY.crl (hash: ajtAFl7+pYNMJ8fvIgk1I4wX4BSAn1TdZtYWo7RffQs=)
2: vqjdm1KiZFUuymq7gFNn9nu1xeI.roa (hash: n5Ik+8X2gw4ASROPfXrEyi/m0Dt0d0dYMw901zfQlQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:6b:1d:b2:40:c0:34:87:15:a2:12:ef:8f:cd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Validity
Not Before: Oct 20 04:02:28 2025 GMT
Not After : Oct 21 04:02:28 2025 GMT
Subject: CN=84326fa1b6aa48e20cab06102853ee5b3758ba25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e2:7b:e3:42:84:e1:dd:10:41:21:7a:b4:0b:
41:93:7e:fd:d9:52:26:e8:d2:cd:41:37:df:a4:bb:
44:50:29:a8:c1:85:b2:a5:5f:08:f4:2a:50:97:c2:
58:39:fe:55:a6:b2:94:a5:4b:e5:70:35:98:13:75:
71:a6:d8:6b:2a:07:ee:79:db:7b:f1:11:ed:3b:16:
03:ba:ef:22:a7:3d:98:f5:23:55:4b:4b:9c:20:48:
85:f9:74:26:bb:76:72:15:90:a0:21:ed:56:4e:b8:
91:06:06:a0:bf:ee:a5:1f:80:95:ca:f0:01:d8:3c:
ea:dc:06:a9:5e:d9:c7:55:f4:50:5f:1e:87:ea:bb:
ab:d0:7d:3a:2a:35:1f:af:d7:ff:cf:fd:e4:17:5f:
bd:8f:3f:cd:91:07:33:8f:40:7f:e3:58:af:57:a6:
d1:2d:d7:ca:41:f7:84:84:e9:da:5f:24:a7:d3:4d:
5c:dd:24:e0:00:62:21:95:1a:c2:c1:73:1b:d4:66:
24:d3:46:f1:82:b6:00:86:9d:e3:a0:ab:08:af:7d:
c7:c8:aa:26:e1:b7:d8:ce:e8:b9:7a:68:bd:42:d8:
d1:15:63:9c:cc:fe:9c:b3:95:88:27:92:e0:75:b7:
2b:8f:52:67:00:fb:bf:5b:9e:f2:59:8a:6f:c9:3c:
ba:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:32:6F:A1:B6:AA:48:E2:0C:AB:06:10:28:53:EE:5B:37:58:BA:25
X509v3 Authority Key Identifier:
keyid:44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6c:78:d4:a2:33:65:6e:f7:15:a5:d2:bf:01:14:81:62:01:
c9:58:7a:6b:17:ce:3e:ab:74:5b:bd:8f:32:fa:a3:3b:3d:0a:
3c:92:9a:4c:11:75:4c:48:84:df:f0:71:37:e2:91:0e:75:27:
b6:c0:64:ab:89:33:9b:36:b4:30:12:2a:37:7a:28:02:da:04:
6e:56:de:0f:64:56:58:59:f9:fd:56:c2:75:bb:8a:e8:d5:14:
5c:06:54:f1:fc:ac:3c:6d:7d:38:c7:e6:f9:15:c5:c7:65:92:
fa:8e:32:19:7a:49:f5:d9:0f:6e:4d:48:f7:3b:a3:0c:7b:b3:
74:81:20:fb:fe:2e:11:37:40:cb:df:55:88:4d:ea:50:d5:8a:
0b:44:40:2a:4b:ef:84:a9:e6:43:e7:6a:29:b6:c8:b4:41:d2:
dc:89:4e:e7:bf:35:41:c0:a0:e3:5f:f4:f9:df:cd:8e:00:c8:
22:55:e4:67:40:7a:46:8f:bb:cb:95:6f:4a:f2:cb:63:c6:2d:
19:56:1a:9f:da:88:b4:3a:48:02:d8:8b:d4:03:3e:6e:6b:f9:
c6:ea:34:0c:bd:8b:d0:5e:24:73:30:14:28:f0:02:46:ee:bb:
8a:ca:27:71:b5:9d:d4:b3:bb:15:e1:7c:e5:55:d3:73:64:48:
40:da:10:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:22:58 2025 by rpki-client