Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
File: RmJSHrWLRbDFosy-ODMVznnX7qU.mft (raw, json)
Hash identifier: c1f+06aEJfh1vUj02tUlLouBEstIW1vAjYuAxdFFyH8=
Subject key identifier: 3F:ED:91:AF:06:0C:04:56:DE:15:34:63:D7:EE:58:BD:C7:30:6D:52
Authority key identifier: 46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
Certificate issuer: /CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Certificate serial: 0198D4E0A3F0C5A0B5A55181EE84331E7F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
Manifest number: 04A1
Signing time: Sat 23 Aug 2025 03:02:28 +0000
Manifest this update: Sat 23 Aug 2025 03:02:28 +0000
Manifest next update: Sun 24 Aug 2025 03:02:28 +0000
Files and hashes: 1: FMOrAvuXC1st0AxiGEbiYaRYpDg.roa (hash: OmIWmIcqWrtJmv8GjH0kjZnCnt6Sjb2fVpbncWqIDDs=)
2: RmJSHrWLRbDFosy-ODMVznnX7qU.crl (hash: cpyKxKGeGLnLNksDesFoXW2Tk5JxARHf4pgBKpqlf/8=)
3: Rn8OIh8zHAwmG50kXHn-kNbTEto.roa (hash: RiLsXz+R4XXCz86+60MDV16LzwORDjEzlHMC7VSLj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a3:f0:c5:a0:b5:a5:51:81:ee:84:33:1e:7f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Validity
Not Before: Aug 23 03:02:28 2025 GMT
Not After : Aug 24 03:02:28 2025 GMT
Subject: CN=3fed91af060c0456de153463d7ee58bdc7306d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:74:b9:cb:8f:7c:4c:03:a2:db:2d:e3:ae:
89:dc:b3:5e:41:c6:ff:31:54:fa:82:6c:18:29:bd:
8f:dd:03:1e:3c:4d:fe:7b:66:32:18:d8:c2:ce:4b:
f6:d8:f2:0e:19:cb:b0:59:f5:80:f9:a8:ff:7f:be:
ab:da:03:71:5a:5b:32:9a:cb:3c:3c:41:f5:97:67:
d1:c9:0c:e0:5b:42:61:2d:84:04:73:66:6e:52:30:
4b:49:e3:4c:c4:c4:a6:46:e6:05:25:53:d5:ea:e6:
ef:f0:81:0d:5c:30:17:fc:50:da:c6:18:42:d6:55:
89:f9:d3:d8:2b:7d:2a:5f:5a:c3:8f:4f:7e:c9:1b:
2d:9b:9f:45:8e:82:f7:03:2a:6c:e5:3f:da:9c:24:
87:23:8e:e5:e7:f6:a2:1f:e7:78:89:f2:b5:c0:b8:
e0:6c:ce:78:f3:5b:e8:e7:5a:5a:7f:e1:14:06:75:
92:e4:01:6f:0b:a1:ea:9f:f8:6e:36:80:d7:c8:2e:
07:0c:46:7e:9f:ad:9f:4e:cb:eb:a0:02:75:70:37:
76:ca:60:6e:f9:38:55:34:55:7a:d0:2c:fe:fb:91:
b3:dc:cd:bf:94:2b:7f:2e:a2:2a:48:3a:03:db:26:
a9:6d:db:a6:ed:ce:42:f4:08:da:10:af:e6:02:62:
2a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:ED:91:AF:06:0C:04:56:DE:15:34:63:D7:EE:58:BD:C7:30:6D:52
X509v3 Authority Key Identifier:
keyid:46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:6d:9b:88:a5:fc:6a:fe:98:f0:62:de:e9:aa:4e:fc:42:c2:
41:c2:1c:af:82:35:15:a2:af:3b:a5:90:d4:8a:05:fd:9d:53:
60:f5:0b:75:cc:0a:1e:f8:fd:fe:47:01:68:a6:df:76:70:f3:
84:0e:66:93:b3:c7:48:9c:66:d7:12:12:17:77:cd:a2:32:e8:
e9:94:31:5e:60:b4:e3:bd:98:82:d4:d3:2a:44:54:6d:75:55:
5a:3b:7b:a4:6f:6d:ca:73:d6:01:0b:da:f8:3a:35:ec:84:64:
89:14:e8:59:dd:47:8b:be:26:01:bb:de:9c:96:27:33:4a:53:
43:24:cd:64:f2:09:3f:23:21:54:24:09:de:04:ab:79:0a:e8:
c9:73:dd:69:1b:58:59:0b:23:e9:6a:10:e5:9a:1a:30:bf:10:
66:ff:2b:64:37:1a:ff:16:26:44:41:38:fc:60:a9:e2:7c:25:
a1:07:0f:79:fd:2e:69:02:31:e5:8d:ac:2f:4d:37:96:c8:b0:
a8:7d:54:6c:db:f4:53:96:30:12:94:6b:c8:25:6d:0c:7e:ca:
70:37:18:10:91:cc:47:2c:49:db:92:4b:30:94:16:ad:ad:bc:
2d:fd:85:0a:0b:a9:9c:38:c4:85:60:64:08:f3:df:32:d9:7e:
3e:a2:40:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4KPwxaC1pVGB7oQzHn98MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NjI1MjFlYjU4YjQ1YjBjNWEyY2NiZTM4MzMxNWNlNzlk
N2VlYTUwHhcNMjUwODIzMDMwMjI4WhcNMjUwODI0MDMwMjI4WjAzMTEwLwYDVQQD
EygzZmVkOTFhZjA2MGMwNDU2ZGUxNTM0NjNkN2VlNThiZGM3MzA2ZDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyd0ucuPfEwDotst466J3LNeQcb/
MVT6gmwYKb2P3QMePE3+e2YyGNjCzkv22PIOGcuwWfWA+aj/f76r2gNxWlsymss8
PEH1l2fRyQzgW0JhLYQEc2ZuUjBLSeNMxMSmRuYFJVPV6ubv8IENXDAX/FDaxhhC
1lWJ+dPYK30qX1rDj09+yRstm59FjoL3Ayps5T/anCSHI47l5/aiH+d4ifK1wLjg
bM5481vo51paf+EUBnWS5AFvC6Hqn/huNoDXyC4HDEZ+n62fTsvroAJ1cDd2ymBu
+ThVNFV60Cz++5Gz3M2/lCt/LqIqSDoD2yapbdum7c5C9AjaEK/mAmIqlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/tka8GDARW3hU0Y9fuWL3HMG1SMB8GA1UdIwQY
MBaAFEZiUh61i0WwxaLMvjgzFc551+6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83MmM5ODQtMTQxMC00NWVjLTg2YzUt
OGFiODY5Mzc0MTBhLzEvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi83MmM5ODQtMTQxMC00NWVjLTg2YzUtOGFiODY5Mzc0MTBh
LzEvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWW2biKX8
av6Y8GLe6apO/ELCQcIcr4I1FaKvO6WQ1IoF/Z1TYPULdcwKHvj9/kcBaKbfdnDz
hA5mk7PHSJxm1xISF3fNojLo6ZQxXmC0472YgtTTKkRUbXVVWjt7pG9tynPWAQva
+Do17IRkiRToWd1Hi74mAbvenJYnM0pTQyTNZPIJPyMhVCQJ3gSreQroyXPdaRtY
WQsj6WoQ5ZoaML8QZv8rZDca/xYmREE4/GCp4nwloQcPef0uaQIx5Y2sL003lsiw
qH1UbNv0U5YwEpRryCVtDH7KcDcYEJHMRyxJ25JLMJQWra28Lf2FCgupnDjEhWBk
CPPfMtl+PqJAzw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:18:18 2025 by rpki-client