Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
File: rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft (raw, json)
Hash identifier: YUiLwUxenXds48Bpe8Uyx0Rz5qy8ewaNitTgWQi7lfg=
Subject key identifier: E5:0D:26:1E:B9:3A:8D:47:00:82:12:89:46:64:12:FD:09:FD:31:E2
Authority key identifier: AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
Certificate issuer: /CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Certificate serial: 019A7149CD5582C6FE30E69EC61791A5553B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
Manifest number: 0E47
Signing time: Tue 11 Nov 2025 05:00:53 +0000
Manifest this update: Tue 11 Nov 2025 05:00:53 +0000
Manifest next update: Wed 12 Nov 2025 05:00:53 +0000
Files and hashes: 1: CDUJExHuCJVPUownDG0KoC95j6g.roa (hash: ec1LWrgiCmmzqFwlIQnZ7qEB99QoLDe3mTnBITPZ9Fo=)
2: rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl (hash: JPT4k8OX6l3Zwgv6rpxzBn3ZmyjlC958FuOLIzy9qmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:cd:55:82:c6:fe:30:e6:9e:c6:17:91:a5:55:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Validity
Not Before: Nov 11 05:00:53 2025 GMT
Not After : Nov 12 05:00:53 2025 GMT
Subject: CN=e50d261eb93a8d4700821289466412fd09fd31e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e9:71:08:fd:4f:5b:db:cc:33:b7:ea:bf:73:
89:e0:f0:e0:d5:72:bf:4f:e4:82:9b:2b:21:00:2a:
96:69:e0:7b:60:d3:fb:0c:54:a0:6c:0c:40:57:4d:
2a:6c:7e:89:4f:8f:86:17:ea:db:23:73:dc:af:57:
e3:b6:e6:f7:cd:9c:9e:fd:73:25:ef:e2:dc:97:8f:
a5:02:ab:dd:70:f2:fc:52:66:cf:26:4f:c8:67:99:
6d:11:15:c4:68:2b:81:0d:a6:ca:05:e2:c0:37:ea:
9d:c2:19:ae:69:6c:86:c5:7a:36:a6:87:62:0d:fe:
5a:21:ae:2f:84:4c:c5:c8:53:15:d6:2b:77:8c:23:
76:14:72:db:e7:0a:df:82:0f:55:0a:68:8c:50:c1:
12:98:9b:63:d1:25:33:13:a4:47:c6:7b:8a:f5:af:
7a:bf:73:aa:cb:be:1e:f7:de:6a:92:d7:20:70:72:
bd:1f:be:9d:8f:03:6f:3f:9e:27:22:c3:df:b8:9c:
33:6b:01:84:2d:73:5d:af:5c:6f:1a:2e:c9:43:64:
85:6e:91:17:79:79:77:a7:49:f3:08:28:74:69:98:
a8:cc:22:1c:6c:9b:e4:b3:5f:4e:5e:58:6b:e2:3b:
91:a5:9c:1c:73:9c:f4:74:3f:2b:2e:38:75:bb:6e:
2e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0D:26:1E:B9:3A:8D:47:00:82:12:89:46:64:12:FD:09:FD:31:E2
X509v3 Authority Key Identifier:
keyid:AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:aa:18:e6:e1:9f:85:86:cd:87:d1:2b:35:4a:e6:85:01:8d:
2d:4c:5c:b0:90:18:ab:ad:5c:97:ee:bf:f8:4a:8a:7a:37:17:
b9:ad:35:c0:a8:8a:f2:d9:31:bd:c2:0b:8b:a0:57:ec:b3:2e:
77:9b:3f:ba:5c:98:bc:5f:74:f4:b1:ad:e4:5a:9a:4a:a2:e7:
5f:2b:d2:ac:9f:80:3c:9f:91:f6:06:f9:46:63:f3:0b:d7:61:
aa:d1:9a:b8:0a:64:db:82:c3:06:0a:8f:ab:86:55:96:ce:a5:
67:5c:05:2f:49:57:e7:1a:61:6d:83:b0:9e:28:4b:87:93:6a:
2d:7e:b0:ff:d2:12:25:f8:d0:c5:5c:2c:53:79:8f:44:da:c7:
41:19:c3:54:62:b1:a4:12:ff:28:b0:95:5d:a0:01:59:95:8b:
9a:32:66:10:69:aa:f0:8d:d8:5b:fe:ec:71:e6:75:e3:0e:0d:
3e:4e:67:18:2d:39:8a:4d:f9:b9:3f:10:33:39:e0:6a:4e:eb:
b4:19:62:e2:51:90:62:06:2b:06:53:e5:d8:9c:8b:05:59:49:
eb:28:2c:8e:4b:ce:b6:33:b4:ab:d5:b0:8e:ec:5a:0d:6e:f9:
a0:04:57:9b:b4:8d:05:4b:8d:1c:19:77:10:d7:14:fb:98:16:
af:96:e8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:34 2025 by rpki-client