Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
File: rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json)
Hash identifier: nDbZhaw5kz/V6mLV7nPU9o7SDc1juMo+q2dLPJFS+9Y=
Subject key identifier: E8:79:12:3D:90:5C:09:13:23:74:C9:4C:17:8A:62:2C:23:F9:E5:0F
Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
Certificate issuer: /CN=adb365acf6f918499707dda13f033e2cd6110308
Certificate serial: 019A24785E147EF29CDDBDC410D9B3E4536A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 07:00:59 +0000
Manifest this update: Mon 27 Oct 2025 07:00:59 +0000
Manifest next update: Tue 28 Oct 2025 07:00:59 +0000
Files and hashes: 1: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: 6yz03CiMiEJ8WlnjuS+U9l23q0wQOQ91PMYkw510hRE=)
2: zexQv7MMnSMTcRcSk7PaXdu5bh4.roa (hash: VAN/TauThH6QEZkrRALg6rnqCv24/be16q83SWwAfVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:5e:14:7e:f2:9c:dd:bd:c4:10:d9:b3:e4:53:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308
Validity
Not Before: Oct 27 07:00:59 2025 GMT
Not After : Oct 28 07:00:59 2025 GMT
Subject: CN=e879123d905c09132374c94c178a622c23f9e50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:17:48:1b:84:30:1e:ed:b0:cb:ee:30:21:83:
3e:44:f3:ad:30:6d:46:8e:3a:88:4d:80:26:e9:3a:
71:10:b6:f3:ff:b2:96:31:98:b1:33:e1:8f:85:d3:
97:28:47:64:f8:fb:f2:59:81:0b:10:82:1a:a0:a1:
22:14:96:8b:2d:5d:f5:a6:42:b1:9c:77:a5:6b:96:
40:0f:fc:05:e1:8f:b7:d3:55:c4:1a:6d:22:0a:54:
3f:fc:1f:42:fa:b7:a6:68:ae:70:1d:a8:2d:57:6a:
40:2b:5e:c8:b7:c4:95:0f:74:3d:1a:9a:a1:ae:a8:
48:40:70:13:88:c6:5c:d3:a8:77:1b:9a:00:9e:e5:
6f:9f:5a:21:10:e6:33:d9:60:3e:c5:f6:f5:f3:ad:
72:6a:d2:76:2d:12:d5:e4:94:41:76:40:07:e4:e9:
de:db:ad:f9:6a:0f:19:84:22:6c:99:d6:70:ba:2d:
b6:c0:f7:ae:33:66:c5:17:35:c4:9a:a5:53:40:11:
62:3f:b8:3c:15:48:18:c9:f6:e2:56:7b:e7:4a:eb:
2c:8c:19:bc:8c:e4:d6:6e:ac:37:34:63:a8:e4:05:
fc:80:1d:be:a7:82:4d:08:ad:9d:76:4a:8d:c2:29:
65:67:31:44:63:60:38:1c:2e:39:46:9f:6a:1b:70:
51:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:79:12:3D:90:5C:09:13:23:74:C9:4C:17:8A:62:2C:23:F9:E5:0F
X509v3 Authority Key Identifier:
keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:92:28:85:d6:75:d9:d1:04:71:6f:9a:86:6b:6d:3d:18:78:
88:33:12:c0:57:0f:d5:f9:0b:63:d6:0f:ee:75:e8:41:61:f7:
3c:41:47:55:78:dd:6e:b5:47:b8:8e:02:ba:e8:9a:ed:01:56:
50:4a:23:22:51:2c:a1:93:d3:30:2b:44:e1:60:f6:79:08:fa:
65:91:af:80:ff:03:e7:26:7c:ae:69:c3:e1:4e:9f:37:d3:4f:
af:f3:20:60:45:b4:a0:14:86:93:fa:14:5c:85:2d:d7:ac:ca:
27:66:5b:12:d6:0e:cf:69:7f:83:75:27:64:4f:50:62:de:16:
75:86:78:98:ed:f2:9a:94:7a:cc:17:bc:4a:67:4b:44:65:e5:
a9:d3:a2:75:81:e0:fc:c4:23:3e:c6:c9:24:54:10:47:09:9d:
7e:8d:fe:a4:d0:4a:9e:2a:fd:65:eb:bf:81:e3:1e:25:ae:85:
8e:83:22:41:c8:76:b6:62:2c:94:3f:57:d3:f0:66:35:bd:4a:
bb:5d:c4:ae:a4:97:df:22:ae:59:7e:a2:ac:5e:2a:80:1d:63:
5c:c6:59:86:c7:d7:30:7b:7e:ff:49:2e:99:b0:6e:64:a5:76:
b0:97:f8:20:5c:5f:92:9d:60:d2:ce:ab:38:33:8d:69:59:74:
b2:48:e7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:22:52 2025 by rpki-client