Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
File: RmJSHrWLRbDFosy-ODMVznnX7qU.mft (raw, json)
Hash identifier: zyJ0uv1UT7mP7t4rNKjVZUhYG0rNUEttxiAzavd0Osg=
Subject key identifier: D5:66:5C:F1:0A:EA:E5:3B:41:B0:9A:0E:B0:10:CB:44:00:C1:99:24
Authority key identifier: 46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
Certificate issuer: /CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Certificate serial: 0199FC590188675A596B52D0A75794DFBDE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
Manifest number: 053A
Signing time: Sun 19 Oct 2025 12:01:55 +0000
Manifest this update: Sun 19 Oct 2025 12:01:55 +0000
Manifest next update: Mon 20 Oct 2025 12:01:55 +0000
Files and hashes: 1: FMOrAvuXC1st0AxiGEbiYaRYpDg.roa (hash: OmIWmIcqWrtJmv8GjH0kjZnCnt6Sjb2fVpbncWqIDDs=)
2: RmJSHrWLRbDFosy-ODMVznnX7qU.crl (hash: jjLaaO74rJIacUbxo11Goi4JHVfM9aC64YkNoTAGzo0=)
3: Rn8OIh8zHAwmG50kXHn-kNbTEto.roa (hash: RiLsXz+R4XXCz86+60MDV16LzwORDjEzlHMC7VSLj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:01:88:67:5a:59:6b:52:d0:a7:57:94:df:bd:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Validity
Not Before: Oct 19 12:01:55 2025 GMT
Not After : Oct 20 12:01:55 2025 GMT
Subject: CN=d5665cf10aeae53b41b09a0eb010cb4400c19924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9c:0e:83:4d:ea:18:4d:53:f9:87:11:23:91:
3c:ea:18:27:9a:dd:83:d6:6d:31:ea:68:ae:7a:2e:
21:d8:d3:4b:17:05:9e:fa:8e:5e:a2:bc:29:d8:f7:
1b:94:07:6a:2f:a4:f3:21:e0:98:49:ec:79:73:39:
d1:0b:10:84:68:3c:2b:00:0d:7f:70:e1:50:4f:99:
c5:47:99:23:00:8d:f1:21:d8:f4:35:7a:a8:ff:5e:
34:e8:41:b0:e8:45:0e:fa:0b:e2:82:98:4e:4f:f4:
51:ec:6b:e3:4d:bb:64:b9:48:f7:6d:55:1b:c3:74:
30:aa:39:72:a7:a3:8a:a1:ba:ae:f5:f4:60:e7:fb:
fb:2d:fe:ae:ab:72:30:67:b3:3d:25:ec:19:51:a5:
1c:ed:fc:32:40:35:41:56:2f:02:dc:06:6c:fe:37:
27:e0:8b:00:a9:f6:b0:10:de:75:de:ab:1d:31:67:
87:8b:25:8d:5f:77:33:ba:c5:13:1d:6e:cc:fb:0c:
1e:10:d7:3f:f9:74:4b:d2:5b:74:f7:ee:58:f8:91:
02:c1:d2:e6:a6:68:b6:aa:a8:12:1e:3c:07:86:0e:
61:d5:d0:ac:aa:40:57:d1:ae:97:f6:8a:19:b5:32:
28:fa:cb:87:37:6f:a9:61:50:df:26:8a:3c:8c:a3:
91:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:66:5C:F1:0A:EA:E5:3B:41:B0:9A:0E:B0:10:CB:44:00:C1:99:24
X509v3 Authority Key Identifier:
keyid:46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:29:9d:2d:bb:24:5a:1d:d9:a6:88:85:09:cd:1c:6e:13:40:
27:21:b2:4b:6e:10:37:b8:f8:5d:43:90:93:fc:64:3f:6f:c8:
7b:18:37:e3:6d:8a:d3:69:42:9e:0e:3a:c6:52:65:c4:43:91:
28:7c:bc:ea:d2:28:57:48:3c:d4:a9:b8:bd:75:09:d0:9f:dd:
94:33:bd:4e:ec:2c:7a:0c:e1:b3:99:a5:bb:c5:e3:7d:ea:62:
dc:e6:45:54:4a:ef:f0:76:45:f0:23:19:b9:46:01:af:9d:ee:
e5:6f:5f:89:4c:3a:af:bd:4a:aa:bf:2f:7e:74:40:a5:53:96:
85:b6:1a:84:0c:4d:59:a7:33:37:70:91:ec:c8:c9:ea:45:85:
17:8a:ef:7c:da:a4:38:ed:e9:3f:95:5b:a4:7d:f5:78:26:36:
f2:8b:24:2a:75:6e:1f:1e:0f:e1:c4:c7:da:18:bc:3e:56:40:
11:10:a9:d0:88:59:ae:cf:58:c6:d1:e5:c2:5f:a1:b7:a0:1e:
31:8d:92:d9:68:dd:73:9a:64:b9:f2:6d:27:12:70:52:6c:4a:
32:5c:2e:53:e4:8a:ee:e6:ea:a4:9d:63:3d:52:11:2f:69:93:
35:54:7f:85:27:84:81:01:b4:f9:83:81:1e:2f:54:72:b9:f0:
18:fc:97:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:40 2025 by rpki-client