Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
File: Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft (raw, json)
Hash identifier: pFl34cX6FFhVgjXSpGuZZPQ6hjphJvX1ryTFMibBlfI=
Subject key identifier: ED:89:7A:2F:DA:1F:AB:8C:76:87:8A:D1:E8:32:8C:1A:67:FF:1D:6F
Authority key identifier: 45:BE:27:1D:64:95:29:33:47:46:5C:69:B9:7D:73:80:E4:BB:B4:6D
Certificate issuer: /CN=45be271d6495293347465c69b97d7380e4bbb46d
Certificate serial: 019A72CA7394D7DC78516DB59B37614D62E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
Manifest number: 0412
Signing time: Tue 11 Nov 2025 12:01:01 +0000
Manifest this update: Tue 11 Nov 2025 12:01:01 +0000
Manifest next update: Wed 12 Nov 2025 12:01:01 +0000
Files and hashes: 1: Rb4nHWSVKTNHRlxpuX1zgOS7tG0.crl (hash: e+jABg+8zTPtidXthJ0OLhRogj6H1FAetlt4TwPOr+c=)
2: g8O-LxBDxPemkfnWTYdHDXGwokQ.roa (hash: 62+5Rr40UYD7j7xrWfzQh2M5veljI3mG5KafCJqpdBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:73:94:d7:dc:78:51:6d:b5:9b:37:61:4d:62:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45be271d6495293347465c69b97d7380e4bbb46d
Validity
Not Before: Nov 11 12:01:01 2025 GMT
Not After : Nov 12 12:01:01 2025 GMT
Subject: CN=ed897a2fda1fab8c76878ad1e8328c1a67ff1d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:28:2f:65:ee:fa:44:b5:9c:24:51:13:52:
e5:c1:c1:84:bc:b5:33:57:f8:e2:4b:92:d4:6b:f8:
80:37:1e:cb:b5:69:a1:23:b7:70:68:5f:ec:b5:29:
f6:c8:3d:49:6b:54:69:45:20:cc:59:79:e9:3e:8e:
7e:fb:60:78:c1:95:1b:c2:49:32:c1:80:0d:bd:b0:
4e:67:f8:a5:b4:7c:8a:f8:24:64:54:bd:46:d5:b8:
47:0f:1b:75:12:6c:9c:3d:f9:96:80:26:bc:39:62:
e7:28:ca:61:31:0e:87:5b:20:03:32:39:12:4e:16:
be:d0:3d:27:76:df:8b:17:5c:19:58:e4:4a:af:76:
61:10:50:ea:a0:d2:4c:96:fc:29:d6:1c:75:20:c2:
cb:3e:13:97:68:f3:75:34:69:1c:a4:f8:3c:50:27:
14:e2:45:2b:a2:cf:82:a0:be:fa:7d:63:9f:de:ac:
b9:fe:15:d0:a4:f2:13:dd:29:bb:d2:d0:06:ec:7e:
4a:ae:a8:2a:3d:5c:d6:1c:c9:d8:da:e0:15:d0:00:
ba:eb:5f:a9:05:ff:a8:c7:9f:b4:d7:17:ca:5f:dc:
b1:23:b5:34:99:d5:00:c3:80:90:2c:ee:dc:5e:4a:
b3:02:65:85:41:df:46:e3:41:67:57:71:a2:1d:62:
c1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:89:7A:2F:DA:1F:AB:8C:76:87:8A:D1:E8:32:8C:1A:67:FF:1D:6F
X509v3 Authority Key Identifier:
keyid:45:BE:27:1D:64:95:29:33:47:46:5C:69:B9:7D:73:80:E4:BB:B4:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:34:6a:f4:7b:6a:b5:1e:5d:aa:b5:8c:d6:3d:f7:b8:e7:c8:
41:92:92:a9:6b:3d:d8:f2:22:a0:0d:f4:02:be:64:da:1a:35:
5d:68:80:8a:b9:f1:7a:6f:ff:e4:b3:d9:dc:ed:86:44:c6:03:
b8:9b:11:98:41:c5:94:a8:55:1c:9a:9d:0f:80:18:25:b2:4e:
33:f8:57:bc:c0:e7:5e:9f:52:d4:1b:b6:b7:47:da:19:5c:56:
52:d6:ce:e3:39:c1:8e:59:5a:16:88:48:da:a6:32:9a:60:c2:
00:8d:32:01:a6:41:b2:01:75:37:38:95:7a:67:ed:16:0c:5a:
54:24:3b:b9:0a:15:c1:f0:f0:13:b6:e9:c1:ef:7f:dc:73:42:
53:c8:0b:83:83:db:01:bf:f7:15:4f:c9:fa:ac:9d:13:42:49:
e0:92:b1:88:69:cc:1d:82:0b:5d:2a:65:fa:a2:52:22:f5:26:
96:52:f1:1b:54:11:d8:b1:77:49:2d:70:ae:32:50:97:38:6c:
63:a6:a7:83:0b:58:cb:77:54:e4:75:da:df:57:fe:65:c3:f6:
08:be:9c:a4:8a:5d:4c:cc:39:b2:7c:ba:1d:f3:29:b2:4d:0a:
bd:24:b3:3f:ab:52:62:22:cb:c1:8e:bc:d6:64:0e:e0:06:ac:
1c:3e:41:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyynOU19x4UW21mzdhTWLlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YmUyNzFkNjQ5NTI5MzM0NzQ2NWM2OWI5N2Q3MzgwZTRi
YmI0NmQwHhcNMjUxMTExMTIwMTAxWhcNMjUxMTEyMTIwMTAxWjAzMTEwLwYDVQQD
EyhlZDg5N2EyZmRhMWZhYjhjNzY4NzhhZDFlODMyOGMxYTY3ZmYxZDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGEoL2Xu+kS1nCRRE1LlwcGEvLUz
V/jiS5LUa/iANx7LtWmhI7dwaF/stSn2yD1Ja1RpRSDMWXnpPo5++2B4wZUbwkky
wYANvbBOZ/iltHyK+CRkVL1G1bhHDxt1EmycPfmWgCa8OWLnKMphMQ6HWyADMjkS
Tha+0D0ndt+LF1wZWORKr3ZhEFDqoNJMlvwp1hx1IMLLPhOXaPN1NGkcpPg8UCcU
4kUros+CoL76fWOf3qy5/hXQpPIT3Sm70tAG7H5KrqgqPVzWHMnY2uAV0AC661+p
Bf+ox5+01xfKX9yxI7U0mdUAw4CQLO7cXkqzAmWFQd9G40FnV3GiHWLBrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2Jei/aH6uMdoeK0egyjBpn/x1vMB8GA1UdIwQY
MBaAFEW+Jx1klSkzR0Zcabl9c4Dku7RtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmI0bkhXU1ZLVE5IUmx4cHVYMXpnT1M3dEcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9iYjlmNjUtNDlkOC00MWUzLTllYmMt
YzgyZTE1OGMwMTJkLzEvUmI0bkhXU1ZLVE5IUmx4cHVYMXpnT1M3dEcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9iYjlmNjUtNDlkOC00MWUzLTllYmMtYzgyZTE1OGMwMTJk
LzEvUmI0bkhXU1ZLVE5IUmx4cHVYMXpnT1M3dEcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzRq9Htq
tR5dqrWM1j33uOfIQZKSqWs92PIioA30Ar5k2ho1XWiAirnxem//5LPZ3O2GRMYD
uJsRmEHFlKhVHJqdD4AYJbJOM/hXvMDnXp9S1Bu2t0faGVxWUtbO4znBjllaFohI
2qYymmDCAI0yAaZBsgF1NziVemftFgxaVCQ7uQoVwfDwE7bpwe9/3HNCU8gLg4Pb
Ab/3FU/J+qydE0JJ4JKxiGnMHYILXSpl+qJSIvUmllLxG1QR2LF3SS1wrjJQlzhs
Y6angwtYy3dU5HXa31f+ZcP2CL6cpIpdTMw5sny6HfMpsk0KvSSzP6tSYiLLwY68
1mQO4AasHD5BbQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:10:47 2025 by rpki-client