Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
File: rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json)
Hash identifier: /j66sPwSdh2G1bJfHK0pVo6PMbNrRdc1ZNnX3+P7DGw=
Subject key identifier: 77:66:D6:23:C9:A1:A7:A4:77:25:56:B5:02:CD:F3:5C:D7:BF:3B:3F
Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
Certificate issuer: /CN=adb365acf6f918499707dda13f033e2cd6110308
Certificate serial: 01984966A997CC53BA781FF4B1065F440F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 01:02:01 +0000
Manifest this update: Sun 27 Jul 2025 01:02:01 +0000
Manifest next update: Mon 28 Jul 2025 01:02:01 +0000
Files and hashes: 1: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: /VxBMKaeAj+SsYqUu8vLOG0Dsf2YRxC2bRC1ZDmu7sg=)
2: zexQv7MMnSMTcRcSk7PaXdu5bh4.roa (hash: VAN/TauThH6QEZkrRALg6rnqCv24/be16q83SWwAfVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:a9:97:cc:53:ba:78:1f:f4:b1:06:5f:44:0f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308
Validity
Not Before: Jul 27 01:02:01 2025 GMT
Not After : Jul 28 01:02:01 2025 GMT
Subject: CN=7766d623c9a1a7a4772556b502cdf35cd7bf3b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:05:8a:62:09:90:aa:ed:5d:fb:ee:be:cf:
28:ba:90:8f:e1:62:92:32:a9:49:c8:cc:c6:38:a9:
5d:c1:e6:63:b8:35:93:93:89:f0:d3:df:1e:c1:0a:
0e:2c:1e:82:c4:42:56:24:07:ed:de:c2:99:a4:15:
ab:5f:f2:1f:81:28:b5:ed:1d:00:c5:16:80:33:5b:
43:d5:22:ca:32:82:88:dd:28:01:d6:53:a7:14:e5:
c5:da:67:52:a4:10:6f:b8:9b:81:ce:3d:91:a1:a4:
a0:ae:d2:ae:bd:30:90:a8:aa:a8:e4:d9:ae:98:42:
49:6c:ea:e8:97:7b:a6:dc:eb:6f:a4:18:71:aa:1c:
ec:6e:6e:b6:58:f6:8f:e1:80:de:45:7b:74:23:c7:
1d:23:9e:3d:0c:46:62:30:77:9b:19:9e:43:bc:93:
97:56:73:79:e4:d6:5a:c4:2a:42:0d:53:1b:c9:62:
e9:cd:b7:02:3a:3d:ba:a3:6e:59:d7:1b:a9:30:3c:
6a:eb:fa:86:da:68:39:d1:19:42:36:d4:b8:e5:7f:
a4:20:77:ea:66:a1:57:0e:58:83:e5:57:7e:56:f4:
d9:45:2f:98:3d:87:d5:ce:68:2c:d2:c2:2c:2b:44:
1b:9b:01:81:ac:18:98:33:8d:fc:e8:64:53:84:ea:
da:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:66:D6:23:C9:A1:A7:A4:77:25:56:B5:02:CD:F3:5C:D7:BF:3B:3F
X509v3 Authority Key Identifier:
keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e5:4e:bd:a3:8c:cd:e8:62:7a:19:26:bb:ba:c7:84:3c:75:
bb:3c:d6:af:87:ea:64:c9:fe:29:d6:d8:82:c1:24:bb:ab:54:
a0:40:82:d3:af:bf:1b:8f:50:64:20:c1:02:99:ba:c1:6e:3d:
7c:6b:df:3d:f7:54:39:32:0f:b8:59:aa:df:a6:34:39:5d:5f:
fe:29:5c:03:3b:c0:33:b0:68:1e:d5:d6:da:4f:9b:22:2f:9d:
49:32:d6:0a:34:51:c9:3a:15:0a:39:82:41:13:12:da:a3:51:
a5:ee:41:65:43:67:b8:86:8c:11:e2:82:48:0b:75:71:af:72:
a5:26:00:17:cf:d1:a1:74:7f:56:51:d1:66:cc:d2:2d:e8:69:
eb:ac:5e:99:89:08:87:50:82:bb:45:bb:d9:c6:1f:d3:05:6e:
1c:73:52:8c:49:ff:83:74:c7:02:55:3f:cf:2a:26:90:97:c8:
dc:4e:42:b7:65:60:d0:d2:ec:a8:a6:01:2e:cb:28:0e:0e:19:
44:6f:74:6a:32:16:33:3d:c6:94:ef:e2:5e:a7:a1:b3:91:1c:
4d:83:3c:2f:0c:f4:b8:57:3a:bc:83:1e:2e:b8:58:11:c4:23:
d4:87:8e:03:25:74:6a:04:79:2c:c2:eb:ee:2c:09:b8:2f:28:
ed:e6:a7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:07:18 2025 by rpki-client