Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
File: rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft (raw, json)
Hash identifier: sn3pGEKzIGUDCnzqdqSz6gjXfKCcBE65pbtCDSKbq/M=
Subject key identifier: 2C:94:F4:60:B9:5F:64:04:BA:3D:FE:E9:2B:05:42:5D:71:C0:8F:A0
Authority key identifier: AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
Certificate issuer: /CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Certificate serial: 0197481E28EDE001F89A8145D783048CB99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
Manifest number: 0CA4
Signing time: Sat 07 Jun 2025 02:00:25 +0000
Manifest this update: Sat 07 Jun 2025 02:00:25 +0000
Manifest next update: Sun 08 Jun 2025 02:00:25 +0000
Files and hashes: 1: CDUJExHuCJVPUownDG0KoC95j6g.roa (hash: ec1LWrgiCmmzqFwlIQnZ7qEB99QoLDe3mTnBITPZ9Fo=)
2: rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl (hash: a3lzz3Q8y1Le19zXRkdJ/b06N9UK8xYixkp4C0/OIa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:28:ed:e0:01:f8:9a:81:45:d7:83:04:8c:b9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Validity
Not Before: Jun 7 02:00:25 2025 GMT
Not After : Jun 8 02:00:25 2025 GMT
Subject: CN=2c94f460b95f6404ba3dfee92b05425d71c08fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:22:d2:b2:06:69:ef:06:a4:20:a3:b0:d0:
31:51:e5:a6:b9:75:c6:b0:66:04:47:8b:e0:fb:b1:
00:d6:e7:cc:85:50:99:9e:7d:7a:e8:d3:06:0d:23:
9c:d4:33:57:d8:45:c2:33:cb:20:2d:d4:04:42:9d:
a4:1c:de:0d:25:d9:b6:2c:c7:83:5d:90:bb:cb:02:
27:a5:eb:ed:b0:3e:1a:86:ee:9f:4d:a6:23:0d:31:
86:08:aa:d9:bd:b8:30:90:0c:31:70:97:09:fe:8e:
f3:2b:70:e9:89:1a:ba:07:f6:47:a0:e0:51:19:37:
b5:43:45:2a:34:b4:e0:8f:fe:ac:9f:fb:7f:bd:6d:
b1:16:7d:48:5d:c9:4a:b2:d6:2f:72:da:35:d3:2c:
b3:bd:ba:57:cc:da:14:79:f3:29:f0:e6:38:cb:c9:
87:74:74:e8:3b:ae:64:ad:47:5a:56:d4:b0:77:d1:
be:72:a3:df:8d:67:b7:d1:7b:cb:ec:37:b1:64:a2:
4c:3a:8a:74:04:96:31:6e:25:97:7a:ce:ab:c4:43:
bb:b9:be:ff:0e:5f:16:35:28:77:8e:92:b8:2f:6f:
ac:ab:83:11:6f:1e:d3:c5:49:cf:c4:8b:c3:f8:0b:
f3:6f:7d:39:a3:6a:ae:09:80:d1:00:59:96:0b:bb:
27:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:94:F4:60:B9:5F:64:04:BA:3D:FE:E9:2B:05:42:5D:71:C0:8F:A0
X509v3 Authority Key Identifier:
keyid:AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:0d:ad:6f:3a:4d:52:1b:41:0e:f7:b3:49:77:75:27:4e:9a:
f0:ab:11:21:63:20:01:6b:b5:67:74:d3:0a:75:56:8d:51:ed:
a3:60:e7:cc:62:66:6c:22:7d:41:5a:1e:55:80:85:ec:59:4d:
2b:f8:9c:a9:9e:f5:e7:16:f8:0c:f6:11:f8:25:04:b8:61:03:
18:c9:6c:36:03:45:5f:7e:f5:17:1a:f6:89:61:b0:6f:8d:47:
8e:d4:65:ef:af:de:df:9a:c4:7e:ff:7f:55:7c:08:4c:76:c8:
b4:7b:0f:f8:fe:ac:c3:f2:e9:11:89:8f:2d:32:d7:95:36:81:
5c:75:45:79:2e:d6:a4:2c:84:55:a2:15:84:cb:09:86:e7:7a:
c4:1a:70:b7:d1:73:58:ab:c4:59:cf:64:87:05:7b:74:81:5e:
02:c0:41:e6:bf:c7:68:60:3c:f2:4c:7a:42:cd:c0:8b:19:7d:
30:69:c6:46:9b:81:51:37:e1:ec:02:48:67:df:fb:e5:1a:53:
c7:60:fb:9a:ef:31:55:5b:a2:ce:49:e4:2d:5e:2d:00:6c:92:
16:dd:a2:9f:c4:6a:5d:73:0f:8e:15:21:96:da:c3:79:6e:ba:
09:86:d2:f8:55:d7:98:17:4e:59:8b:85:b1:0a:67:ee:27:e6:
b0:09:17:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIHijt4AH4moFF14MEjLmeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYmM1Zjc3MjFhNGFjY2I5NjM1ZGUxNzViYmM2ZDMxZTE3
YzlhOGQwHhcNMjUwNjA3MDIwMDI1WhcNMjUwNjA4MDIwMDI1WjAzMTEwLwYDVQQD
EygyYzk0ZjQ2MGI5NWY2NDA0YmEzZGZlZTkyYjA1NDI1ZDcxYzA4ZmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTQi0rIGae8GpCCjsNAxUeWmuXXG
sGYER4vg+7EA1ufMhVCZnn166NMGDSOc1DNX2EXCM8sgLdQEQp2kHN4NJdm2LMeD
XZC7ywInpevtsD4ahu6fTaYjDTGGCKrZvbgwkAwxcJcJ/o7zK3DpiRq6B/ZHoOBR
GTe1Q0UqNLTgj/6sn/t/vW2xFn1IXclKstYvcto10yyzvbpXzNoUefMp8OY4y8mH
dHToO65krUdaVtSwd9G+cqPfjWe30XvL7DexZKJMOop0BJYxbiWXes6rxEO7ub7/
Dl8WNSh3jpK4L2+sq4MRbx7TxUnPxIvD+Avzb305o2quCYDRAFmWC7snowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyU9GC5X2QEuj3+6SsFQl1xwI+gMB8GA1UdIwQY
MBaAFK28X3chpKzLljXeF1u8bTHhfJqNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9kMDIxZjktYTAwMS00NTJiLWE1ZWUt
YWJiZjFmMDc4YWQzLzEvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9kMDIxZjktYTAwMS00NTJiLWE1ZWUtYWJiZjFmMDc4YWQz
LzEvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqg2tbzpN
UhtBDvezSXd1J06a8KsRIWMgAWu1Z3TTCnVWjVHto2DnzGJmbCJ9QVoeVYCF7FlN
K/icqZ715xb4DPYR+CUEuGEDGMlsNgNFX371Fxr2iWGwb41HjtRl76/e35rEfv9/
VXwITHbItHsP+P6sw/LpEYmPLTLXlTaBXHVFeS7WpCyEVaIVhMsJhud6xBpwt9Fz
WKvEWc9khwV7dIFeAsBB5r/HaGA88kx6Qs3Aixl9MGnGRpuBUTfh7AJIZ9/75RpT
x2D7mu8xVVuizknkLV4tAGySFt2in8RqXXMPjhUhltrDeW66CYbS+FXXmBdOWYuF
sQpn7ifmsAkXLg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:30:34 2025 by rpki-client