Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
File: RbmFSwRFlObPCEb7Qd57CQj7X3I.mft (raw, json)
Hash identifier: tP8xEb0luzbMdTnxgx5Bfq+EmoWa22TBtZ2Incmcsns=
Subject key identifier: 6A:5B:2E:B1:26:8E:16:2D:48:74:88:1F:9B:43:D9:E9:EB:58:CC:2F
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 0198383ABC3125F8B6AAC0556B8BBF1D706E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
Manifest number: 1600
Signing time: Wed 23 Jul 2025 17:00:30 +0000
Manifest this update: Wed 23 Jul 2025 17:00:30 +0000
Manifest next update: Thu 24 Jul 2025 17:00:30 +0000
Files and hashes: 1: GB4vRJKp1DpnLIyb1KpSYzz8PU0.roa (hash: DcKOdI8R5b7iU4m9qsOPQJ0xQOvD2fBXmJ4gstnNJBY=)
2: RbmFSwRFlObPCEb7Qd57CQj7X3I.crl (hash: mZ0ETQ74r2vFV5Xfd9GKur9bC1NGN+q4PcTzNdxx8cA=)
3: yu9wHeNN9TadONpdFJDPVyyoWGY.roa (hash: PEOTovTwm3OBSyT0paVn7ex6UZ0Hs/vcgcpTRm80FKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:3a:bc:31:25:f8:b6:aa:c0:55:6b:8b:bf:1d:70:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: Jul 23 17:00:30 2025 GMT
Not After : Jul 24 17:00:30 2025 GMT
Subject: CN=6a5b2eb1268e162d4874881f9b43d9e9eb58cc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:10:04:df:b1:4f:41:4c:d3:5b:06:8f:c0:
20:78:f4:34:58:90:0d:be:62:65:8e:c0:18:9d:b8:
29:38:d0:73:2c:69:db:0d:3e:e1:7a:43:61:ec:c9:
90:34:7b:61:19:14:8d:69:48:85:ea:6f:f5:00:8d:
d6:f2:cf:65:0c:9b:09:f4:07:cb:ed:f3:51:4b:30:
de:72:6b:8c:a6:79:83:b6:5f:ce:fd:92:6d:da:84:
9e:c4:95:92:2b:f2:2b:1b:8f:b2:2a:eb:64:f9:4e:
d8:85:92:14:38:2f:15:49:91:10:74:f5:f6:f9:68:
b3:03:a8:5a:42:c0:98:ba:8d:b0:d0:66:f0:2d:1e:
23:3a:96:0e:86:05:14:df:d0:f0:ca:a3:b6:db:48:
a6:f1:cf:cb:8d:d4:3d:2a:8d:d4:71:42:ce:fd:ea:
fd:a4:6a:b4:43:d3:d6:91:79:24:80:7d:28:b7:c3:
e2:1a:ea:25:ba:d8:be:d3:90:a6:cb:b5:2a:7e:7c:
28:e8:c3:80:4a:ff:2d:76:13:8a:d0:6b:88:64:f9:
17:09:2a:e3:a4:ff:81:7e:3b:f1:df:2b:d4:83:c2:
b6:23:a9:11:da:f0:2d:ff:3b:90:3b:1d:bb:de:65:
05:af:48:12:30:46:c5:7b:4e:ad:f0:62:c7:d6:f3:
16:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5B:2E:B1:26:8E:16:2D:48:74:88:1F:9B:43:D9:E9:EB:58:CC:2F
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ce:04:de:ac:23:ec:ed:c9:87:90:a8:1a:b9:43:3c:66:3f:
de:15:9a:ea:50:18:38:27:a3:68:01:f1:d2:4b:3e:f2:67:d8:
93:4d:35:89:c5:3f:65:b6:52:79:5c:a9:34:89:90:4c:fa:c9:
70:7e:30:f1:8f:1e:42:08:ef:c8:5e:38:01:e4:32:87:55:89:
e4:0e:0e:9a:47:bd:1e:79:51:1f:dc:0c:5f:ae:bc:cd:d0:20:
39:90:6c:76:2f:c4:49:34:2d:5b:63:62:1e:b7:76:4d:a5:16:
39:23:f0:39:0a:52:72:54:73:37:b2:e0:ca:02:f0:1b:c3:a9:
1c:04:6e:25:33:65:1b:95:a2:3b:fb:29:02:d4:a1:e3:eb:61:
fd:95:be:8f:19:2b:e0:c4:2b:29:0b:d8:2b:32:f2:6a:d9:52:
5f:41:2b:23:bc:8b:a8:99:56:a2:8d:6a:cc:66:35:06:21:85:
4a:df:58:f0:d8:a4:f1:a4:b1:81:a1:b0:44:9d:13:60:72:89:
3d:15:44:a5:f9:29:16:ee:30:76:88:11:ca:9e:27:4d:20:49:
e4:9a:18:84:c8:b3:7b:2f:81:54:e0:df:b1:d6:35:8b:f6:d1:
cc:54:12:07:39:74:f5:e6:50:5e:df:a7:c7:ea:48:76:4b:a2:
87:51:31:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg4OrwxJfi2qsBVa4u/HXBuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1Yjk4NTRiMDQ0NTk0ZTZjZjA4NDZmYjQxZGU3YjA5MDhm
YjVmNzIwHhcNMjUwNzIzMTcwMDMwWhcNMjUwNzI0MTcwMDMwWjAzMTEwLwYDVQQD
Eyg2YTViMmViMTI2OGUxNjJkNDg3NDg4MWY5YjQzZDllOWViNThjYzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscYQBN+xT0FM01sGj8AgePQ0WJAN
vmJljsAYnbgpONBzLGnbDT7hekNh7MmQNHthGRSNaUiF6m/1AI3W8s9lDJsJ9AfL
7fNRSzDecmuMpnmDtl/O/ZJt2oSexJWSK/IrG4+yKutk+U7YhZIUOC8VSZEQdPX2
+WizA6haQsCYuo2w0GbwLR4jOpYOhgUU39DwyqO220im8c/LjdQ9Ko3UcULO/er9
pGq0Q9PWkXkkgH0ot8PiGuoluti+05Cmy7Uqfnwo6MOASv8tdhOK0GuIZPkXCSrj
pP+Bfjvx3yvUg8K2I6kR2vAt/zuQOx273mUFr0gSMEbFe06t8GLH1vMWawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpbLrEmjhYtSHSIH5tD2enrWMwvMB8GA1UdIwQY
MBaAFEW5hUsERZTmzwhG+0HeewkI+19yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi81ZTYxMTYtNTZlNi00YzFkLTk2ODMt
NGIyMmZjNTE4NGEyLzEvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi81ZTYxMTYtNTZlNi00YzFkLTk2ODMtNGIyMmZjNTE4NGEy
LzEvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIc4E3qwj
7O3Jh5CoGrlDPGY/3hWa6lAYOCejaAHx0ks+8mfYk001icU/ZbZSeVypNImQTPrJ
cH4w8Y8eQgjvyF44AeQyh1WJ5A4Omke9HnlRH9wMX668zdAgOZBsdi/ESTQtW2Ni
Hrd2TaUWOSPwOQpSclRzN7LgygLwG8OpHARuJTNlG5WiO/spAtSh4+th/ZW+jxkr
4MQrKQvYKzLyatlSX0ErI7yLqJlWoo1qzGY1BiGFSt9Y8Nik8aSxgaGwRJ0TYHKJ
PRVEpfkpFu4wdogRyp4nTSBJ5JoYhMizey+BVODfsdY1i/bRzFQSBzl09eZQXt+n
x+pIdkuih1ExVA==
-----END CERTIFICATE-----
Generated at Wed Jul 23 22:54:02 2025 by rpki-client