Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
File: RbUATsPPXBp1UYXW9AaDxkbMlOw.mft (raw, json)
Hash identifier: jnEf3mQ0rJMrp4/7Hyu+NEChqMt7XJo+4b1zEF7F2Gc=
Subject key identifier: 53:B8:AC:11:A3:9F:C3:8F:A4:6E:1D:EC:D6:EE:12:C6:88:9B:FB:C9
Authority key identifier: 45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
Certificate issuer: /CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Certificate serial: 019A1BE271A48ABF7C9681A541305CE3034D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
Manifest number: 0B2F
Signing time: Sat 25 Oct 2025 15:00:16 +0000
Manifest this update: Sat 25 Oct 2025 15:00:16 +0000
Manifest next update: Sun 26 Oct 2025 15:00:16 +0000
Files and hashes: 1: RbUATsPPXBp1UYXW9AaDxkbMlOw.crl (hash: KRgIwTScEJvu/pqcTa18BVdjretRtC5nsb0DaCcONM4=)
2: cg41KOlM1vNAwrdMnvNHppcwT4c.roa (hash: QsQ4ZMCLxuolAifAsH1HBIsIugUjZ4tjy04rNn/2wxI=)
3: iuqsr8mDy4hdl6U1K1v1iSpNchQ.roa (hash: 1qvvVB0UpfZrwtI6t2Uw+kulc+5R7APEpoKz6kq0OuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:e2:71:a4:8a:bf:7c:96:81:a5:41:30:5c:e3:03:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Validity
Not Before: Oct 25 15:00:16 2025 GMT
Not After : Oct 26 15:00:16 2025 GMT
Subject: CN=53b8ac11a39fc38fa46e1decd6ee12c6889bfbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:af:0a:79:df:db:63:1f:86:04:8c:b6:78:1e:
a3:c5:7b:f8:6f:e3:89:66:87:60:9a:88:b4:23:89:
5d:50:f7:53:2e:db:3a:9b:bf:35:70:c4:21:0b:d2:
0d:70:a3:2a:93:6a:7f:ca:81:9e:75:b4:04:9f:e0:
97:3e:e4:e5:85:04:49:75:c3:42:39:b9:f4:87:e0:
02:de:de:15:18:b5:63:92:78:a1:ae:3f:88:ba:c8:
4d:cc:70:c2:cc:6a:da:b7:a4:00:4c:00:a7:b2:e6:
06:33:ec:30:9e:9f:cf:70:e2:1f:11:2d:b9:25:d3:
48:75:4c:0b:db:63:9e:98:83:6d:0c:05:14:4c:18:
83:d0:17:70:e3:07:74:f1:f6:7f:73:20:43:8f:36:
80:be:67:48:c7:77:be:50:26:a3:aa:bb:21:b2:22:
34:96:f9:61:84:88:11:27:9f:c5:a9:11:5b:a0:cd:
ff:11:9c:53:4d:da:d4:f1:50:31:2a:dd:01:6f:95:
36:f2:49:5b:48:8d:22:c6:8b:17:8a:8c:95:a0:fb:
b8:7a:ad:8f:21:37:6b:f4:63:f9:8e:5e:47:2e:fd:
d5:59:4f:e1:d4:a6:e8:be:e9:d7:df:8e:33:10:0f:
13:cf:af:cf:82:c2:35:54:7d:cb:4a:f7:b7:82:68:
49:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B8:AC:11:A3:9F:C3:8F:A4:6E:1D:EC:D6:EE:12:C6:88:9B:FB:C9
X509v3 Authority Key Identifier:
keyid:45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:d9:9c:cd:97:3c:2a:bc:c9:30:16:88:a2:69:79:e8:c1:c8:
04:45:40:88:1b:6d:75:37:e4:e4:92:b6:ed:92:d6:57:90:0e:
36:80:4d:7f:f8:f6:be:ae:08:a1:60:fd:1c:58:d7:0e:8f:dd:
62:6c:ae:fd:c5:46:ce:1b:bf:98:ac:32:9d:b3:74:9c:b9:ee:
5f:5d:0b:60:1e:d5:e1:82:a6:45:5f:ab:71:36:e5:60:ae:d2:
00:d8:26:ed:e6:c4:b1:65:bb:92:82:40:eb:05:b9:b2:07:2d:
0f:c0:64:9b:d2:82:d3:26:71:9a:82:90:3d:49:af:8c:d0:ca:
f9:70:3b:d9:97:92:25:fb:bf:34:de:57:df:9a:75:6f:32:93:
21:4a:90:4f:a8:0b:76:fd:f8:25:83:ce:56:90:84:33:cd:fb:
10:b4:38:6a:d1:09:9a:6f:ca:93:a2:5f:c3:fa:6b:a9:4f:38:
6c:27:b0:d0:2f:a9:2b:1c:f4:b6:ed:af:29:33:f6:a2:0d:e2:
76:cd:73:9a:0c:2a:cb:03:7b:ee:8f:cd:41:63:71:60:5e:1a:
0e:a9:33:36:2a:12:8b:97:ef:d3:94:f9:0a:ba:b8:43:38:17:
36:5d:05:60:89:eb:84:b3:ee:0c:f5:3f:da:72:68:00:7c:c9:
67:6e:f3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 17:26:59 2025 by rpki-client