Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
File: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft (raw, json)
Hash identifier: zx/yQ1CrQvw12DiDUKplyg5AG9HYqlDhuclqzUjfeVE=
Subject key identifier: BF:CE:D0:25:C6:51:1D:73:BD:9F:DE:20:4C:76:60:ED:4F:92:BC:20
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 01993A5D5BEAA56CB79DEC3C663C85740812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
Manifest number: 0F7F
Signing time: Thu 11 Sep 2025 20:00:20 +0000
Manifest this update: Thu 11 Sep 2025 20:00:20 +0000
Manifest next update: Fri 12 Sep 2025 20:00:20 +0000
Files and hashes: 1: RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl (hash: +o4xC4cBqUzRhkon8XBEul1I9SdkBSeAzpEqMzZCwZE=)
2: evdpU8RxaI_pbdRiidwVOCapui0.roa (hash: gmEXsktEnud6XxBSpR/JYtLPKpbESxZW8V98Ytskm+o=)
3: zC0DwQFXhSD9GmfEt7gqZels6ME.roa (hash: Cq4uPzMv6jZuo+s6z3yPpwudom0heKSg9U70MId82ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3a:5d:5b:ea:a5:6c:b7:9d:ec:3c:66:3c:85:74:08:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Sep 11 20:00:20 2025 GMT
Not After : Sep 12 20:00:20 2025 GMT
Subject: CN=bfced025c6511d73bd9fde204c7660ed4f92bc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:51:ac:e3:58:e8:74:e2:1f:bc:55:29:8e:
ee:00:a3:46:bf:09:7a:e0:8e:f9:b5:29:56:8d:41:
19:14:c9:f9:06:9a:23:88:8f:a9:9a:68:d1:88:b3:
a3:6d:f7:dd:94:37:8e:7d:00:98:00:62:b4:f7:bc:
db:25:45:83:9a:24:b1:f9:9e:54:43:14:d4:09:3c:
7d:37:97:9c:d5:78:04:7f:c9:43:29:e1:50:6f:fa:
22:72:97:46:0a:ce:b7:d8:1a:42:f8:f4:40:7a:7d:
f4:18:04:f1:30:f6:b0:5e:61:5b:67:2b:e2:68:fe:
16:82:e8:82:27:e0:f1:bb:b3:a0:04:1c:0d:cc:07:
15:c7:72:4f:53:e4:5b:b7:85:75:bf:0c:17:9e:ef:
57:c5:c4:cf:b5:d2:a7:9f:75:13:d1:1f:7c:b0:d2:
a8:fb:ea:bd:d9:44:06:35:1d:c6:82:60:d1:22:cc:
2a:15:77:c8:45:10:1b:9d:1b:e8:38:52:39:45:1b:
9f:19:e9:18:44:e0:24:4c:2a:17:bd:3f:b0:d3:e4:
93:a1:f5:0e:0f:4c:17:4e:43:84:01:b4:4c:f2:5c:
a7:99:a0:fa:dc:f5:6c:b8:53:11:7d:78:8f:cf:f6:
cb:78:76:03:9b:b6:8d:ae:80:5f:9e:45:3a:d2:47:
62:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CE:D0:25:C6:51:1D:73:BD:9F:DE:20:4C:76:60:ED:4F:92:BC:20
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:df:0e:4d:14:48:d2:3c:1a:0c:f5:3d:e3:42:bd:dd:db:cf:
b3:53:cb:d2:f8:54:cf:b4:67:7f:79:ed:cf:45:a2:52:b6:93:
5c:2a:05:46:fa:29:ba:27:01:8e:7b:20:76:a0:80:5a:82:6e:
7a:8d:3d:48:a6:b2:0f:6f:ba:59:a8:03:d6:9a:fb:9d:47:3b:
98:be:e2:03:0c:b3:e6:78:42:88:7f:90:85:46:91:c3:11:8b:
1e:6c:32:51:03:f3:88:05:33:48:58:30:89:11:5e:c5:2a:ac:
02:98:3d:f0:d2:b8:bf:5c:b2:11:10:e4:86:eb:0f:10:af:a4:
78:b7:a4:5c:31:c7:21:5d:d3:4f:8c:6e:ec:e9:22:96:9c:ee:
66:f4:8d:a4:2c:7e:f5:78:b4:e3:f3:8b:91:dc:5e:8e:7b:b8:
48:06:11:a3:99:d3:2d:93:fe:e9:44:82:fc:f0:4a:09:07:8e:
12:89:80:18:b5:7f:cc:b8:20:af:a5:e7:52:78:73:c1:33:9f:
7f:7b:bd:77:0d:ed:38:65:45:38:64:25:53:72:b7:63:14:6f:
ec:76:b9:9b:cf:36:c5:22:a6:c7:32:3e:a3:cc:2e:14:0e:b0:
50:42:b4:d4:64:20:a3:2f:c9:61:b8:03:2b:db:a3:60:90:7c:
f0:16:f0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 21:34:18 2025 by rpki-client