Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
File: RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft (raw, json)
Hash identifier: 4qqIcqniuot/odfXJGdCfVLrEWT0dbbLrEuYxArhxUI=
Subject key identifier: B7:38:CB:04:E9:1D:F7:E6:C2:D5:A3:09:FF:17:0C:98:9C:1A:06:84
Authority key identifier: 44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
Certificate issuer: /CN=4410d28a9274f9df1065b7f62f8b8997739c047d
Certificate serial: 01992330F74038E3C02E399FEC080D6C4323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
Manifest number: 03E1
Signing time: Sun 07 Sep 2025 08:00:35 +0000
Manifest this update: Sun 07 Sep 2025 08:00:35 +0000
Manifest next update: Mon 08 Sep 2025 08:00:35 +0000
Files and hashes: 1: RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl (hash: bSL5XL4sV4BLDEtqZ8udBaoqnx2jFBUedhNa4pcm7Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:f7:40:38:e3:c0:2e:39:9f:ec:08:0d:6c:43:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4410d28a9274f9df1065b7f62f8b8997739c047d
Validity
Not Before: Sep 7 08:00:35 2025 GMT
Not After : Sep 8 08:00:35 2025 GMT
Subject: CN=b738cb04e91df7e6c2d5a309ff170c989c1a0684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:15:ab:0c:11:d9:e4:6d:54:b7:7f:71:dd:c5:
2e:b0:08:06:fc:60:bc:50:4a:1a:1e:ba:cc:88:48:
62:6d:2f:b4:8e:bc:a7:74:fb:39:b4:23:37:ff:fb:
72:be:99:2a:0f:bd:1d:01:7c:1f:2f:e1:96:d6:c3:
06:08:aa:3a:3d:db:70:52:48:a6:66:76:e2:a8:63:
58:99:b9:3f:a4:d8:ab:f3:8f:be:d9:ae:82:e5:0e:
24:93:67:71:a9:cd:84:0e:82:f7:73:07:32:52:c0:
8c:99:de:9c:07:89:44:e0:25:46:21:f9:f9:eb:02:
ab:ae:c8:f1:c0:ca:4b:c7:0d:0b:c0:9b:d0:a5:b9:
91:9b:53:a5:df:4c:21:58:86:7e:0a:37:57:f5:02:
b8:37:9b:d0:16:86:34:1c:7b:0d:d6:f2:6f:1d:41:
40:c6:99:28:4e:3a:ea:a8:7d:c4:ee:91:0d:87:ac:
4c:cb:b7:19:30:fb:59:1a:11:11:0c:b5:75:31:5d:
3e:da:42:5c:74:0a:d9:6e:0b:52:49:77:f9:7e:d2:
38:39:c5:5a:9b:9d:7e:05:69:3c:64:17:44:3c:f6:
f0:f8:48:4e:61:ee:c6:c8:55:ee:b2:38:0e:dd:63:
04:2d:20:5a:d3:ef:ac:82:2d:09:8b:8a:67:36:70:
aa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:38:CB:04:E9:1D:F7:E6:C2:D5:A3:09:FF:17:0C:98:9C:1A:06:84
X509v3 Authority Key Identifier:
keyid:44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ed:70:99:1f:0d:a3:6a:51:84:68:78:f9:9b:61:df:32:61:
2b:a6:77:36:15:72:5d:aa:77:f0:76:ba:4e:86:5b:97:ee:08:
26:b8:68:ab:52:f3:94:7a:3c:5e:9e:cf:46:75:18:64:5a:d5:
92:d2:51:88:59:fb:14:81:df:1b:7e:f5:97:04:10:c1:df:91:
4a:d2:c2:0c:93:32:23:24:02:18:c0:15:f4:2a:81:6b:52:88:
50:f7:51:36:1e:32:dc:e8:0c:1a:58:39:de:88:e7:34:49:f0:
4d:ec:a1:3d:df:45:f9:61:2a:9e:01:76:b4:b3:c7:61:61:4a:
eb:c0:24:91:7c:95:a2:0c:b8:bc:88:98:3b:92:ae:65:f7:80:
73:a5:f1:92:c5:ac:66:9e:94:fa:78:69:23:35:e6:b4:88:5d:
57:03:6d:3d:ac:00:0d:5f:36:84:6f:50:1a:c4:07:95:eb:2e:
bf:f2:e7:c2:2a:3e:49:0a:c9:c7:86:74:ad:f3:9a:b0:1d:74:
d4:19:44:21:5b:be:2a:ee:88:20:29:52:29:b5:44:2c:05:ec:
c2:19:2e:22:76:2e:b1:43:ac:7c:98:fd:28:29:65:14:cf:c6:
8f:44:0f:d4:75:33:93:49:8b:18:a4:6d:5f:3f:4c:4f:f5:eb:
1e:24:2c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:42:01 2025 by rpki-client