
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
File: RMRFXrsJGC1PvrO0Vg4giYbhriE.mft (raw, json)
Hash identifier: SyHhsE8a0RKl0Pg3C5GNPjkD2JJacHCPEzT5A/N9uFg=
Subject key identifier: B9:3D:FA:23:22:0A:8A:1E:16:79:91:ED:B1:47:1B:28:77:D4:83:04
Authority key identifier: 44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
Certificate issuer: /CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Certificate serial: 0198D54DBFF1DADFF15724B286D196D9231A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:01:39 +0000
Manifest this update: Sat 23 Aug 2025 05:01:39 +0000
Manifest next update: Sun 24 Aug 2025 05:01:39 +0000
Files and hashes: 1: RMRFXrsJGC1PvrO0Vg4giYbhriE.crl (hash: qDzYyKKmxAUK+3MK/tjaCt1VKGhJf6tJZ3DtIUyQ5SY=)
2: W1HT74Ti-eehsN9aFk8FhX6Amk0.roa (hash: 3zzhU0Zo0DbhPnuXcPDdzKBUW4Glv+sVBLV3Zhd2+lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:bf:f1:da:df:f1:57:24:b2:86:d1:96:d9:23:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c4455ebb09182d4fbeb3b4560e208986e1ae21
Validity
Not Before: Aug 23 05:01:39 2025 GMT
Not After : Aug 24 05:01:39 2025 GMT
Subject: CN=b93dfa23220a8a1e167991edb1471b2877d48304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:83:bf:b7:4b:63:88:3d:a4:98:23:ae:4f:d2:
17:82:b3:d9:76:22:f9:80:4f:fd:02:9b:ae:bd:e1:
d9:7c:5b:01:3f:f3:a5:8d:95:06:7d:94:0a:37:1a:
ce:01:2c:c1:0c:c6:0d:31:eb:2a:eb:30:84:9b:39:
66:de:0d:69:ec:40:7e:9d:7b:28:03:3c:0e:2f:f3:
0a:e9:77:ae:3c:3a:d6:1f:b0:28:c0:db:c5:a7:f9:
77:3c:3b:99:93:c1:6c:56:33:6c:5d:36:f7:6b:6a:
ad:cb:21:a6:ca:8e:38:d7:c8:29:27:41:e7:ee:f9:
f0:f1:46:bb:d7:7b:22:8d:1f:22:8e:4a:bf:17:21:
ba:8e:4c:9f:c9:45:35:a8:32:b7:1e:a5:44:0d:c6:
a9:10:c2:2c:90:fb:ad:7a:a5:ae:56:1f:13:4c:53:
4d:4d:45:9f:14:b4:f2:72:ce:1f:0a:83:01:6c:f2:
a5:f6:b0:de:61:ba:5a:ef:8c:5c:45:d6:69:39:63:
51:10:08:6b:00:d1:73:7f:12:c9:46:34:61:e8:0d:
48:19:a8:f3:fe:65:5c:43:64:28:34:7e:e9:44:2f:
f8:1d:5e:2b:dd:61:8f:96:7c:25:c8:7b:f0:93:3b:
8f:11:a3:8c:4b:23:52:61:1c:fc:b1:4a:8b:e4:52:
49:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3D:FA:23:22:0A:8A:1E:16:79:91:ED:B1:47:1B:28:77:D4:83:04
X509v3 Authority Key Identifier:
keyid:44:C4:45:5E:BB:09:18:2D:4F:BE:B3:B4:56:0E:20:89:86:E1:AE:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMRFXrsJGC1PvrO0Vg4giYbhriE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/05a903-d9c0-4689-9ac8-c32de90e3fc3/1/RMRFXrsJGC1PvrO0Vg4giYbhriE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:84:ee:b5:2b:de:0b:7d:f5:54:6a:24:07:37:df:aa:91:cd:
ed:f3:6b:76:16:2f:b7:a9:84:f5:15:3d:65:ab:47:74:c6:2e:
4a:64:7b:9b:4e:3d:5a:0e:5a:e7:3e:e7:1c:da:ef:f3:7d:a9:
09:1c:90:cd:d3:a1:c2:70:23:d0:87:f5:47:11:d5:2e:27:f5:
a0:81:ba:af:6f:b7:0a:d4:dd:83:5e:9b:60:99:e4:95:49:d6:
97:bf:28:e3:ba:ae:c9:7b:f7:97:c1:f3:66:e3:4c:20:74:58:
b0:df:6c:ff:2b:f6:60:48:60:ed:01:f5:72:bd:6f:48:71:e2:
0a:68:51:ed:6e:fe:84:05:08:bd:03:26:bd:1c:e2:8e:37:a6:
4d:85:6e:8e:3c:61:e3:a0:05:61:39:51:c1:89:72:98:9a:89:
e3:6b:77:c8:bb:85:a2:89:2d:68:8d:07:4c:be:fb:97:08:0f:
5e:25:8a:cf:6e:9e:7f:77:91:45:96:0c:4d:bf:20:68:27:3c:
1d:29:91:e0:d8:45:29:4b:23:bb:0c:23:5e:67:66:1d:e4:f2:
c9:ed:30:03:67:14:0a:70:d4:7e:76:d1:6b:22:52:a0:52:28:
c5:0e:cd:06:79:f5:12:38:ff:00:4a:2f:12:51:a7:51:24:30:
76:cf:a3:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTb/x2t/xVySyhtGW2SMaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YzQ0NTVlYmIwOTE4MmQ0ZmJlYjNiNDU2MGUyMDg5ODZl
MWFlMjEwHhcNMjUwODIzMDUwMTM5WhcNMjUwODI0MDUwMTM5WjAzMTEwLwYDVQQD
EyhiOTNkZmEyMzIyMGE4YTFlMTY3OTkxZWRiMTQ3MWIyODc3ZDQ4MzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IO/t0tjiD2kmCOuT9IXgrPZdiL5
gE/9ApuuveHZfFsBP/OljZUGfZQKNxrOASzBDMYNMesq6zCEmzlm3g1p7EB+nXso
AzwOL/MK6XeuPDrWH7AowNvFp/l3PDuZk8FsVjNsXTb3a2qtyyGmyo4418gpJ0Hn
7vnw8Ua713sijR8ijkq/FyG6jkyfyUU1qDK3HqVEDcapEMIskPuteqWuVh8TTFNN
TUWfFLTycs4fCoMBbPKl9rDeYbpa74xcRdZpOWNREAhrANFzfxLJRjRh6A1IGajz
/mVcQ2QoNH7pRC/4HV4r3WGPlnwlyHvwkzuPEaOMSyNSYRz8sUqL5FJJkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLk9+iMiCooeFnmR7bFHGyh31IMEMB8GA1UdIwQY
MBaAFETERV67CRgtT76ztFYOIImG4a4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk1SRlhyc0pHQzFQdnJPMFZnNGdpWWJocmlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wNWE5MDMtZDljMC00Njg5LTlhYzgt
YzMyZGU5MGUzZmMzLzEvUk1SRlhyc0pHQzFQdnJPMFZnNGdpWWJocmlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wNWE5MDMtZDljMC00Njg5LTlhYzgtYzMyZGU5MGUzZmMz
LzEvUk1SRlhyc0pHQzFQdnJPMFZnNGdpWWJocmlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXoTutSve
C331VGokBzffqpHN7fNrdhYvt6mE9RU9ZatHdMYuSmR7m049Wg5a5z7nHNrv832p
CRyQzdOhwnAj0If1RxHVLif1oIG6r2+3CtTdg16bYJnklUnWl78o47quyXv3l8Hz
ZuNMIHRYsN9s/yv2YEhg7QH1cr1vSHHiCmhR7W7+hAUIvQMmvRzijjemTYVujjxh
46AFYTlRwYlymJqJ42t3yLuFooktaI0HTL77lwgPXiWKz26ef3eRRZYMTb8gaCc8
HSmR4NhFKUsjuwwjXmdmHeTyye0wA2cUCnDUfnbRayJSoFIoxQ7NBnn1Ejj/AEov
ElGnUSQwds+jqQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:29 2025 by rpki-client