Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
File: RbmFSwRFlObPCEb7Qd57CQj7X3I.mft (raw, json)
Hash identifier: 3BuoW/ZvYeNBj2/oXs7TS7dVbCc3Nv7XNL31Q+O/xXI=
Subject key identifier: 21:60:83:65:B9:0E:52:12:95:C4:AA:4F:5B:D7:35:33:7D:9A:CB:A9
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 019926D6FF91B73E9DDEC144540A6E0DE2CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
Manifest number: 1682
Signing time: Mon 08 Sep 2025 01:00:48 +0000
Manifest this update: Mon 08 Sep 2025 01:00:48 +0000
Manifest next update: Tue 09 Sep 2025 01:00:48 +0000
Files and hashes: 1: La2OHk40xT9jVzdbL8VM1zaNhwM.roa (hash: L4NT7hhkbemzTZ1h36oxCLeAgJ9PnHHf7M9ufVdCkYE=)
2: RbmFSwRFlObPCEb7Qd57CQj7X3I.crl (hash: qrhoibD/ePyaEV0HvkCwOCtwuh2nRXbGm60F4DTwCSc=)
3: oqbSDVyffYW6POB_Swdu2RDuL0U.roa (hash: sIzz4Hddo5JRH5QoMZorIpCfLRHXcarNIkRS1cu9s/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:d6:ff:91:b7:3e:9d:de:c1:44:54:0a:6e:0d:e2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: Sep 8 01:00:48 2025 GMT
Not After : Sep 9 01:00:48 2025 GMT
Subject: CN=21608365b90e521295c4aa4f5bd735337d9acba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fe:b1:0f:b7:17:45:d2:80:54:05:8d:5c:94:
9d:a1:ed:21:cf:58:49:92:1e:a4:1a:ac:c0:86:c6:
ee:64:eb:f4:27:f6:03:f3:90:a1:c0:4f:4c:d3:c5:
37:0c:c5:c3:29:aa:f1:9b:0b:9d:52:95:00:2b:a3:
40:7e:ae:fc:01:2c:68:e5:ce:7d:6b:86:a9:60:47:
44:bf:fd:c6:97:0e:e4:8a:1d:b4:cb:c7:cc:9f:5b:
f2:3a:e7:33:f4:e6:91:e0:a3:59:ac:d1:8a:8b:f7:
2d:54:50:3c:b2:ad:d4:39:10:1d:ce:6a:22:c9:41:
6f:86:b8:40:f6:28:7a:1c:4b:62:c8:cd:fc:b0:26:
f4:6c:f0:2b:d2:7d:89:70:44:32:84:8b:d2:bf:68:
4d:44:22:e3:01:c6:cb:37:60:b3:4b:cc:bb:c6:ed:
dc:9f:08:31:27:7f:b4:f0:15:95:29:18:73:ae:7e:
9d:a4:ea:6b:df:f8:e5:28:40:d0:38:05:bf:7a:e5:
5b:a9:2f:87:85:fd:33:89:4a:32:38:5c:0c:31:bc:
e5:8b:64:5c:80:d2:bb:23:f1:29:9a:ae:2b:97:15:
5b:43:25:3f:b9:c6:17:2f:89:1e:4f:63:64:f1:cd:
84:f6:c5:00:96:4f:90:96:f0:1b:52:29:c9:e1:f3:
a0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:60:83:65:B9:0E:52:12:95:C4:AA:4F:5B:D7:35:33:7D:9A:CB:A9
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7e:ab:c5:81:81:87:f5:c0:3e:01:8e:c6:ae:f9:4d:33:42:
bb:93:e7:0c:e4:42:36:15:6a:9c:9d:67:37:6d:8f:8f:ad:24:
f3:21:fa:fc:12:1e:8e:f8:b8:a9:7e:9a:1b:ff:e4:e2:b8:ab:
35:76:1b:8b:93:70:88:95:7e:1c:1a:86:2f:8c:35:e1:61:ba:
9a:dc:9b:67:65:83:c8:2d:38:74:d1:00:2d:e3:65:67:9b:0f:
2e:fb:a4:ea:0e:06:e2:23:6a:89:91:47:2d:35:3e:ac:b2:22:
f2:41:0c:d3:53:28:09:a7:75:ee:7f:ec:ce:4c:cd:9a:2a:e9:
df:04:73:4e:42:ed:06:51:0a:de:88:5e:b9:6d:dc:25:94:eb:
b3:1b:e0:63:9b:6a:b2:ab:a4:23:cc:34:44:82:45:5a:1b:22:
29:94:ce:96:2a:b0:0a:cb:a0:9f:18:d0:b4:7f:27:ff:11:70:
6b:2c:40:76:99:9c:42:b0:53:00:5b:be:ab:e8:9d:6a:3f:d4:
32:90:b8:78:c4:da:5f:0f:4a:20:93:bd:19:bf:39:7d:7e:45:
18:a1:95:96:f4:11:52:40:9e:30:aa:47:60:70:45:ec:b6:a7:
6e:5a:aa:e9:39:2f:52:da:ab:7a:25:4d:7f:2d:d4:6b:e9:93:
08:9b:66:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:16:17 2025 by rpki-client