Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
File: RBBkfZUukSEiD0FOiKXd1ivII3s.mft (raw, json)
Hash identifier: aPa+PL5NVYNvR1MRHyGJrquM2Raycb2+VPFBe5h89oc=
Subject key identifier: 4F:29:00:A4:52:F0:E4:57:C7:F9:6C:41:5A:9C:6E:0C:25:4D:27:91
Authority key identifier: 44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B
Certificate issuer: /CN=4410647d952e9121220f414e88a5ddd62bc8237b
Certificate serial: 019827EC28B63D0BB051150ECF29B4F409EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
Manifest number: 23
Signing time: Sun 20 Jul 2025 13:00:44 +0000
Manifest this update: Sun 20 Jul 2025 13:00:44 +0000
Manifest next update: Mon 21 Jul 2025 13:00:44 +0000
Files and hashes: 1: RBBkfZUukSEiD0FOiKXd1ivII3s.crl (hash: N4mJGIQPOOQxRmA/HX/aFzF3RXUkrjlb1KyTvHyZwIw=)
2: p12I-ru8S8FXjKziObzMY5uNEZE.roa (hash: AoXZbQHCJONRAMAiMe6YpP5PYiXNKcBqe2FpH/bOcvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:ec:28:b6:3d:0b:b0:51:15:0e:cf:29:b4:f4:09:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4410647d952e9121220f414e88a5ddd62bc8237b
Validity
Not Before: Jul 20 13:00:44 2025 GMT
Not After : Jul 21 13:00:44 2025 GMT
Subject: CN=4f2900a452f0e457c7f96c415a9c6e0c254d2791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:25:9a:9a:f3:2a:c8:53:e3:17:eb:7b:ea:
e1:58:3e:fe:70:ba:44:e0:3f:28:f1:81:fe:83:18:
67:42:61:f8:37:42:65:6e:2d:3e:5d:84:1b:e1:48:
af:cd:7f:c0:11:94:2a:9e:25:d0:e6:b7:82:69:96:
3a:88:58:ff:8c:56:84:ad:d8:27:8c:6b:20:a6:0d:
f6:df:e3:51:14:fa:43:c5:0c:be:3b:6a:3d:28:8c:
41:c0:b3:a6:2f:62:a4:2c:d9:a4:db:e1:b6:ad:9f:
fc:2f:10:61:7c:58:d1:76:d8:5c:91:cc:34:bd:b0:
5c:f1:61:3b:eb:6a:35:f8:3d:9a:ad:0b:88:28:59:
9e:0b:fc:25:b5:9b:78:2c:01:5c:0c:8e:2f:7e:3d:
96:77:bf:f5:cd:46:5f:b9:e3:60:64:55:ce:7d:d9:
9a:18:09:14:d4:20:80:49:a2:76:ce:2c:ea:5b:55:
36:a9:e3:0e:c5:64:01:40:79:14:7f:91:f1:72:74:
35:70:cb:61:92:4a:20:45:f6:1f:47:ef:72:8a:6a:
1b:e5:69:b0:8e:29:b6:a8:3b:77:bc:a3:17:6f:48:
de:62:ba:9e:4f:fa:6d:30:3f:d9:0a:7a:50:30:fa:
69:d9:2a:bd:99:34:47:1a:60:e8:12:13:95:cd:5b:
08:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:29:00:A4:52:F0:E4:57:C7:F9:6C:41:5A:9C:6E:0C:25:4D:27:91
X509v3 Authority Key Identifier:
keyid:44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:30:9a:fb:59:9e:35:0b:ba:c8:43:54:0a:18:3d:27:da:b0:
72:96:13:c4:ce:d2:24:49:c2:7a:95:68:6c:6d:03:54:50:82:
8a:32:80:76:87:36:db:62:6b:2f:f3:e9:86:0a:86:16:af:75:
f9:13:70:e7:74:cb:24:e5:e3:ba:b7:a8:2f:41:cf:02:0b:37:
25:73:ac:86:dd:31:fc:60:31:3b:e0:77:28:5e:0c:3e:ee:ba:
54:d7:f4:57:2b:fe:2a:21:60:a6:05:ed:1a:35:90:35:9b:d7:
b8:e6:d9:59:b7:23:48:79:e2:f1:a7:6b:96:9f:26:2d:1d:8a:
5c:7a:27:6a:1f:ec:eb:96:1c:00:3a:26:d5:e7:9a:27:53:9b:
c0:0f:9b:3a:cc:1f:87:18:07:16:5c:b0:0a:28:75:2f:75:f4:
56:04:a6:81:31:c1:7a:3a:99:0b:1e:43:46:b4:7c:c1:fc:29:
1d:f8:5f:da:8a:ba:24:cf:73:d2:25:0f:a0:18:3d:07:98:76:
04:e9:36:42:af:9a:9b:16:7a:e9:94:b5:fb:a2:a6:65:4f:a6:
34:44:70:cf:6e:d8:db:c3:98:0e:fa:22:17:19:a9:43:b6:c7:
9f:fc:77:c9:9d:a5:ff:6e:01:57:89:3a:4a:5d:57:dc:71:2d:
41:30:2d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:20:34 2025 by rpki-client