Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
File: rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft (raw, json)
Hash identifier: UMVqvi/TulfSgofyeDLK6bCACVOlnTOiFBq/de+rHCY=
Subject key identifier: F2:79:61:38:F2:5E:3F:15:39:12:E6:32:BE:40:7C:9F:08:C5:B6:F5
Authority key identifier: AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
Certificate issuer: /CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Certificate serial: 019923316D96214D987FA16D64BEE02956EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
Manifest number: 0D9A
Signing time: Sun 07 Sep 2025 08:01:05 +0000
Manifest this update: Sun 07 Sep 2025 08:01:05 +0000
Manifest next update: Mon 08 Sep 2025 08:01:05 +0000
Files and hashes: 1: CDUJExHuCJVPUownDG0KoC95j6g.roa (hash: ec1LWrgiCmmzqFwlIQnZ7qEB99QoLDe3mTnBITPZ9Fo=)
2: rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl (hash: 2PhlbUCECqT6UQm1lRKetBlXnQo6TTk0OV60/vrSxDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:6d:96:21:4d:98:7f:a1:6d:64:be:e0:29:56:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Validity
Not Before: Sep 7 08:01:05 2025 GMT
Not After : Sep 8 08:01:05 2025 GMT
Subject: CN=f2796138f25e3f153912e632be407c9f08c5b6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:65:83:4f:5f:1f:b2:e7:13:88:a1:2f:c4:73:
02:87:fd:c6:13:80:dd:8d:e1:70:f1:0b:dd:7b:ab:
e1:1c:7b:32:4d:79:cc:05:fa:ac:e1:af:0c:79:42:
b8:29:5f:d5:3d:3c:1d:fa:80:66:46:7b:02:26:d3:
f2:d5:35:a7:c7:93:2f:c0:af:f4:6b:7e:ee:54:e4:
d4:14:03:8a:d0:e6:74:b6:87:55:9c:27:98:25:04:
06:34:02:ac:85:a0:81:6f:7b:be:e2:e3:d1:71:41:
52:c4:1f:6f:c3:a1:a2:98:50:4a:26:59:15:a6:d7:
dc:8c:76:8f:2b:fd:2f:9b:b0:3d:dc:ce:1b:46:3a:
3d:a0:32:81:b6:30:ec:90:a4:7a:83:35:36:2e:71:
72:cc:65:9f:72:fe:26:09:85:82:b3:5e:e4:3e:85:
43:0e:96:26:e2:38:2e:23:75:b7:e9:87:fa:67:bb:
e3:a4:be:0e:0c:42:e8:08:f5:5f:62:c4:7c:1b:76:
c5:de:ec:5a:3b:4f:b8:a5:eb:5d:25:54:35:8f:67:
48:75:fa:86:14:4a:e5:0e:a3:94:86:c6:fb:ff:ea:
7a:e9:9a:4b:ff:d5:7c:eb:e9:6e:f4:b9:c9:99:ee:
07:fd:02:4a:30:43:71:9c:db:2a:af:8b:1f:4e:4f:
52:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:79:61:38:F2:5E:3F:15:39:12:E6:32:BE:40:7C:9F:08:C5:B6:F5
X509v3 Authority Key Identifier:
keyid:AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c4:37:fd:10:92:19:d6:c4:75:22:2a:dc:86:05:2d:f3:71:
ae:49:a1:09:8f:76:7d:6c:6b:e3:4a:8e:c4:d3:85:5f:41:c5:
aa:a2:cf:66:7e:2a:b4:e1:ba:6c:11:b9:17:72:89:aa:6a:e8:
74:c9:86:72:0e:a5:d8:29:ef:6c:64:24:fb:5b:16:cc:a9:78:
e9:fa:03:c6:96:50:1d:f3:8e:55:d2:8f:68:b2:1c:cd:27:ca:
62:18:74:c3:54:7b:56:41:d7:c0:ca:97:62:b0:a0:50:54:47:
33:98:fd:7b:b6:1a:a4:a8:5d:b8:a4:1f:5c:c8:69:9a:17:de:
30:c4:8b:27:a7:44:56:8e:6f:1e:90:38:36:05:c0:50:27:e8:
e8:96:11:32:4a:9c:cc:02:ab:52:d6:9c:7e:05:b5:24:04:ca:
34:48:ec:d3:b6:2e:80:d8:ee:3e:35:8e:47:c5:9f:ab:ac:4d:
1f:95:1e:e8:09:af:53:15:a7:da:9c:16:07:ef:0b:34:a1:d8:
32:7e:fd:52:03:dc:ae:88:ec:f5:9e:d2:1c:f8:82:5c:e0:cc:
39:aa:85:06:2e:60:3f:8d:47:c2:f1:48:cf:aa:cf:b6:07:26:
f8:62:56:ed:b7:50:17:38:b0:93:1f:fc:87:69:6d:fb:7b:be:
13:69:7d:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMW2WIU2Yf6FtZL7gKVbsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYmM1Zjc3MjFhNGFjY2I5NjM1ZGUxNzViYmM2ZDMxZTE3
YzlhOGQwHhcNMjUwOTA3MDgwMTA1WhcNMjUwOTA4MDgwMTA1WjAzMTEwLwYDVQQD
EyhmMjc5NjEzOGYyNWUzZjE1MzkxMmU2MzJiZTQwN2M5ZjA4YzViNmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2WDT18fsucTiKEvxHMCh/3GE4Dd
jeFw8Qvde6vhHHsyTXnMBfqs4a8MeUK4KV/VPTwd+oBmRnsCJtPy1TWnx5MvwK/0
a37uVOTUFAOK0OZ0todVnCeYJQQGNAKshaCBb3u+4uPRcUFSxB9vw6GimFBKJlkV
ptfcjHaPK/0vm7A93M4bRjo9oDKBtjDskKR6gzU2LnFyzGWfcv4mCYWCs17kPoVD
DpYm4jguI3W36Yf6Z7vjpL4ODELoCPVfYsR8G3bF3uxaO0+4petdJVQ1j2dIdfqG
FErlDqOUhsb7/+p66ZpL/9V86+lu9LnJme4H/QJKMENxnNsqr4sfTk9SQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJ5YTjyXj8VORLmMr5AfJ8Ixbb1MB8GA1UdIwQY
MBaAFK28X3chpKzLljXeF1u8bTHhfJqNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9kMDIxZjktYTAwMS00NTJiLWE1ZWUt
YWJiZjFmMDc4YWQzLzEvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9kMDIxZjktYTAwMS00NTJiLWE1ZWUtYWJiZjFmMDc4YWQz
LzEvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYsQ3/RCS
GdbEdSIq3IYFLfNxrkmhCY92fWxr40qOxNOFX0HFqqLPZn4qtOG6bBG5F3KJqmro
dMmGcg6l2CnvbGQk+1sWzKl46foDxpZQHfOOVdKPaLIczSfKYhh0w1R7VkHXwMqX
YrCgUFRHM5j9e7YapKhduKQfXMhpmhfeMMSLJ6dEVo5vHpA4NgXAUCfo6JYRMkqc
zAKrUtacfgW1JATKNEjs07YugNjuPjWOR8Wfq6xNH5Ue6AmvUxWn2pwWB+8LNKHY
Mn79UgPcrojs9Z7SHPiCXODMOaqFBi5gP41HwvFIz6rPtgcm+GJW7bdQFziwkx/8
h2lt+3u+E2l9pQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:10 2025 by rpki-client