
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
File: rmjJUYwq1UwKy4IUaMhuRboWHBg.mft (raw, json)
Hash identifier: PwzyVlq2K8ucNZi/ki8XquwULgVEuoSqdvOKVStxutw=
Subject key identifier: 9D:B6:5F:32:E5:96:0E:B2:CB:3D:77:97:44:D6:C5:26:A3:63:19:CD
Authority key identifier: AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18
Certificate issuer: /CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
Certificate serial: 0199FDD9AB2AA4B3DB998558EB8E62547C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
Manifest number: 05AE
Signing time: Sun 19 Oct 2025 19:02:04 +0000
Manifest this update: Sun 19 Oct 2025 19:02:04 +0000
Manifest next update: Mon 20 Oct 2025 19:02:04 +0000
Files and hashes: 1: PwlcQaBPeu72jRxpS1TyAFafqIs.roa (hash: zweRMxR6GdWC0C5ngJnRInvOkWHsboI5uvSiYLo2X20=)
2: rmjJUYwq1UwKy4IUaMhuRboWHBg.crl (hash: Ey0GMtjRzc0LsvLiMP39cqerVcqzp4KgCj10QNRGhz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ab:2a:a4:b3:db:99:85:58:eb:8e:62:54:7c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
Validity
Not Before: Oct 19 19:02:04 2025 GMT
Not After : Oct 20 19:02:04 2025 GMT
Subject: CN=9db65f32e5960eb2cb3d779744d6c526a36319cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:64:58:df:13:42:71:e2:1e:3d:f7:aa:92:1f:
74:18:dc:5b:aa:b9:bd:d8:27:f7:86:e4:58:3d:c9:
80:17:45:b6:74:71:e3:3b:ec:c2:6d:6f:e4:56:79:
0d:d6:95:df:71:e4:ab:e4:7e:7b:79:66:ac:00:15:
af:9b:1f:21:fc:bf:bf:55:5b:a8:c9:90:b3:2f:a0:
1a:a6:35:eb:48:54:30:ca:07:58:89:67:aa:ed:f5:
d6:a6:8a:74:64:ce:7a:7e:ab:2e:7a:92:61:32:2f:
0d:0f:c9:e6:dd:69:2b:79:e4:d5:9d:63:17:a7:b5:
68:95:50:62:eb:b3:10:ae:59:24:a6:28:84:98:29:
72:dd:88:d1:5f:d0:cd:77:f6:f8:ca:f0:44:66:f8:
92:2a:a8:e6:07:24:de:54:5c:8c:bc:f8:1d:39:7e:
2a:82:26:70:e9:49:2f:84:8c:8a:6f:0e:b2:aa:4e:
73:ab:4e:1c:c7:48:bb:2e:db:6b:ce:cb:d2:30:ae:
a2:a1:66:82:10:45:41:9d:04:76:fd:4a:8c:5a:10:
fe:f0:9b:3c:13:71:79:b6:3f:ab:1f:de:75:8d:f7:
c7:dd:1a:1e:51:0c:b8:02:80:1a:76:22:aa:ac:54:
66:06:1d:c2:0f:ab:c3:0a:22:89:21:8e:e7:32:03:
76:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B6:5F:32:E5:96:0E:B2:CB:3D:77:97:44:D6:C5:26:A3:63:19:CD
X509v3 Authority Key Identifier:
keyid:AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a4:88:4f:50:ad:03:19:4a:45:43:2d:37:0c:97:e3:c8:2f:
88:a3:4a:4a:15:47:dd:57:78:c9:6b:86:26:61:96:8b:00:3a:
cf:aa:eb:7c:60:15:64:3e:b3:40:4d:6e:77:3d:0e:fd:09:cf:
35:49:c9:0b:1d:a9:76:33:73:d4:03:ec:c4:16:61:1f:6e:5a:
62:25:ac:9f:57:e2:19:2e:db:00:a3:5f:8a:6b:77:87:68:b8:
51:c2:14:17:27:2f:ed:39:db:9b:4e:3a:44:0c:a8:1f:7e:c6:
1e:1f:9a:ab:13:e9:0f:8d:5f:43:60:d5:26:cb:20:21:a8:d2:
4a:6d:5d:20:92:69:4d:05:5b:2a:fa:39:9c:ea:ea:03:4f:a2:
77:e0:6d:7e:48:db:de:d2:3d:48:d7:60:a2:f8:ba:f2:1f:ee:
59:13:5d:92:8f:9e:c4:f3:19:69:4d:86:da:6b:c6:7f:25:35:
93:7b:17:e8:87:32:2a:f2:d4:0b:57:59:34:8c:6a:7e:32:a5:
71:10:d0:f9:e5:d4:ac:6a:69:27:08:df:23:9b:2b:aa:3c:79:
9e:4e:a1:9e:07:a1:d9:1a:ca:49:48:c1:6e:75:a0:55:04:c1:
0c:2b:48:39:b5:51:4b:55:15:73:ad:03:a3:46:78:46:ea:87:
60:3a:c5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:34:25 2025 by rpki-client