Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
File: RPMwC82ETWB1L-Xfst4pmWbpuPY.mft (raw, json)
Hash identifier: Og8WmoSVuHgHNREogY7wm36rjvIvGTwPOtIAFWHM1e0=
Subject key identifier: C2:0C:75:5E:85:B7:5D:83:6F:87:8C:80:C7:22:49:56:DF:97:F7:B1
Authority key identifier: 44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
Certificate issuer: /CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Certificate serial: 0198D4741E90C0CE320E1C1E5DB96F76D68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
Manifest number: 0C33
Signing time: Sat 23 Aug 2025 01:03:56 +0000
Manifest this update: Sat 23 Aug 2025 01:03:56 +0000
Manifest next update: Sun 24 Aug 2025 01:03:56 +0000
Files and hashes: 1: RPMwC82ETWB1L-Xfst4pmWbpuPY.crl (hash: OlBKoZvVUJVSNzukefDKuL8BIwQOwczgR42gY9KjNWQ=)
2: vqjdm1KiZFUuymq7gFNn9nu1xeI.roa (hash: n5Ik+8X2gw4ASROPfXrEyi/m0Dt0d0dYMw901zfQlQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:1e:90:c0:ce:32:0e:1c:1e:5d:b9:6f:76:d6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Validity
Not Before: Aug 23 01:03:56 2025 GMT
Not After : Aug 24 01:03:56 2025 GMT
Subject: CN=c20c755e85b75d836f878c80c7224956df97f7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a3:90:e6:c4:9d:5c:b3:5e:3f:b1:ab:86:9b:
08:73:ea:06:b9:22:3f:c7:bb:9e:c1:47:07:33:8e:
21:e4:a8:d8:ca:45:96:cc:96:e9:91:ba:31:73:1d:
70:35:1d:59:16:43:c2:88:ae:6f:55:d5:a5:26:08:
ee:5f:47:81:95:f5:33:00:46:e7:d4:49:24:55:ea:
c1:e9:80:fa:ad:f5:d7:d0:4c:9c:94:61:47:57:7c:
38:28:d1:40:cc:6a:a6:5c:ff:92:ad:0e:71:b4:48:
f5:00:f9:2e:da:3a:46:92:f9:f0:ee:7b:f1:c9:bb:
45:6a:90:ed:85:84:14:54:33:34:41:2e:62:28:3e:
d9:f7:d3:f3:00:31:29:59:16:99:85:78:c3:13:8d:
de:c5:2d:00:74:df:ce:ec:20:7f:00:60:00:08:c9:
dd:fb:d9:3e:86:56:10:12:50:6a:04:50:73:04:03:
06:6e:02:c0:19:2c:36:1a:d4:f3:82:ce:2e:32:0b:
4f:99:3f:d0:ef:c5:4f:50:54:cf:29:d9:e7:3a:eb:
42:b8:3c:51:c8:fd:92:d7:a3:a1:e4:d1:73:5b:eb:
40:64:a7:a9:3b:93:41:a0:53:dc:e8:2a:f2:2b:f0:
28:54:92:02:92:0e:67:3c:2a:b4:5c:ce:81:a0:40:
07:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0C:75:5E:85:B7:5D:83:6F:87:8C:80:C7:22:49:56:DF:97:F7:B1
X509v3 Authority Key Identifier:
keyid:44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ce:dd:92:40:50:a4:e2:de:f4:5a:f0:ab:2e:bd:1f:76:90:
45:5b:de:cd:dd:fe:d7:58:03:cd:99:33:0c:06:07:7f:52:ca:
3d:69:c5:75:e6:75:49:23:78:e4:41:c2:d3:5d:a0:57:fb:0a:
9e:0f:50:31:58:5e:db:89:1d:67:75:be:ac:c7:94:a5:99:5f:
c6:3b:ce:28:94:84:c7:45:2b:b3:fe:49:a5:55:45:c7:77:a2:
06:38:7e:25:3e:27:57:2d:bf:cb:ae:c4:99:b3:f1:9f:59:a0:
18:be:b2:7a:c4:fa:c7:63:0b:58:10:0a:4a:c9:7b:18:5e:6c:
db:9c:51:50:dd:8b:d4:15:e2:74:d3:e6:ea:07:89:6a:98:c4:
b4:a7:4e:b0:79:f4:e8:09:5c:eb:35:4c:1e:c9:5d:56:61:e8:
ba:48:3f:12:08:f6:5f:0a:10:9b:e6:6f:51:c0:02:66:85:b7:
1a:d7:7f:e0:a5:10:37:57:41:ca:ea:87:e1:df:23:52:d9:1c:
f4:d5:13:59:51:52:09:d7:78:d2:55:69:71:a0:66:62:7f:e7:
87:65:ca:17:47:d3:c9:7a:5f:9f:8e:a0:ad:c8:c2:6e:a2:36:
ab:9a:f0:82:10:dd:3b:d2:75:54:ef:aa:95:23:47:fe:86:37:
7e:e5:e4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:50 2025 by rpki-client