Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f237fc-4421-45fd-ad48-fc27e4fd26e8/1/rbxC2eQutyb4mwpU4tK2dclLx_Q.mft
File: rbxC2eQutyb4mwpU4tK2dclLx_Q.mft (raw, json)
Hash identifier: L2qLZ0ZpKcjx/Lo2s60ErgXRE1AEMlIQ3QA1Xp3UcjQ=
Subject key identifier: 01:E4:B3:B7:9A:D2:9A:EE:3D:94:56:73:57:95:95:54:29:15:42:E6
Authority key identifier: AD:BC:42:D9:E4:2E:B7:26:F8:9B:0A:54:E2:D2:B6:75:C9:4B:C7:F4
Certificate issuer: /CN=adbc42d9e42eb726f89b0a54e2d2b675c94bc7f4
Certificate serial: 0199228D1046556766F30855E7BE8A27EA5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbxC2eQutyb4mwpU4tK2dclLx_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f237fc-4421-45fd-ad48-fc27e4fd26e8/1/rbxC2eQutyb4mwpU4tK2dclLx_Q.mft
Manifest number: 26
Signing time: Sun 07 Sep 2025 05:01:34 +0000
Manifest this update: Sun 07 Sep 2025 05:01:34 +0000
Manifest next update: Mon 08 Sep 2025 05:01:34 +0000
Files and hashes: 1: rbxC2eQutyb4mwpU4tK2dclLx_Q.crl (hash: gQkA3w8QirRV/qwjrVGbpLxI1ll8RnBXA07/rb4AEJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f237fc-4421-45fd-ad48-fc27e4fd26e8/1/rbxC2eQutyb4mwpU4tK2dclLx_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f237fc-4421-45fd-ad48-fc27e4fd26e8/1/rbxC2eQutyb4mwpU4tK2dclLx_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbxC2eQutyb4mwpU4tK2dclLx_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:10:46:55:67:66:f3:08:55:e7:be:8a:27:ea:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbc42d9e42eb726f89b0a54e2d2b675c94bc7f4
Validity
Not Before: Sep 7 05:01:34 2025 GMT
Not After : Sep 8 05:01:34 2025 GMT
Subject: CN=01e4b3b79ad29aee3d94567357959554291542e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d2:db:e0:80:f8:ea:ac:98:6d:74:77:5f:58:
5a:fa:76:7b:90:37:16:4c:cc:2f:c4:98:2d:de:89:
26:40:ac:7d:45:d0:61:e1:81:10:4d:6f:ce:12:cb:
69:00:72:36:e0:6d:5c:8b:43:67:d2:93:0c:95:01:
96:00:fe:6a:e3:32:4d:5a:f7:43:f3:18:01:55:bc:
ee:87:31:fd:e3:f2:d1:d6:37:da:53:c5:2c:e3:af:
92:c0:f7:74:37:fc:59:8e:5d:2b:a7:d2:f6:86:55:
e7:7e:aa:ff:2a:67:c2:07:59:2c:1a:23:e2:f2:fa:
1c:ce:3f:db:f0:df:9d:17:c6:cf:f1:39:f8:da:49:
a8:ff:c0:43:b8:d1:99:24:d5:e2:ee:84:83:e9:3a:
11:08:2e:a9:5b:3e:17:1a:0a:7c:91:87:01:da:09:
dc:fd:03:ea:85:43:d1:86:ac:22:c6:c8:07:12:ad:
ae:e3:af:87:d3:01:21:15:75:0d:d8:c7:4d:c2:58:
56:0b:ab:55:9e:fb:2a:0d:0b:35:3e:a6:79:f2:79:
e2:d3:6d:77:2e:9c:65:27:d1:e8:0a:83:ba:ac:8c:
8e:53:82:f8:f0:89:d4:f1:32:f3:5c:25:c2:3b:b7:
09:a6:03:02:3f:be:b2:87:bc:16:fc:1e:ae:26:3f:
75:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E4:B3:B7:9A:D2:9A:EE:3D:94:56:73:57:95:95:54:29:15:42:E6
X509v3 Authority Key Identifier:
keyid:AD:BC:42:D9:E4:2E:B7:26:F8:9B:0A:54:E2:D2:B6:75:C9:4B:C7:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbxC2eQutyb4mwpU4tK2dclLx_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f237fc-4421-45fd-ad48-fc27e4fd26e8/1/rbxC2eQutyb4mwpU4tK2dclLx_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f237fc-4421-45fd-ad48-fc27e4fd26e8/1/rbxC2eQutyb4mwpU4tK2dclLx_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:33:89:ae:55:bd:b9:5e:07:1c:f4:32:6b:67:91:6e:cf:7d:
bd:81:57:ef:cf:ec:88:ad:3d:c2:f2:d3:fe:b7:82:a8:17:60:
ef:77:3e:c3:19:59:29:9d:0c:b8:a3:fd:76:7b:28:23:68:29:
72:ed:12:0f:dd:dc:13:67:4c:cf:cc:d4:4f:56:d2:50:6a:ba:
a1:59:d9:e5:99:97:89:f5:59:84:ad:46:f0:94:9a:64:07:3f:
5f:83:6b:5d:93:da:44:02:f5:e2:8c:28:4b:09:43:68:6e:4d:
02:71:99:48:aa:6d:d1:28:90:78:44:59:15:86:aa:95:6b:0b:
84:51:3f:27:1b:6e:2c:14:b6:e3:01:e2:9e:c7:a7:2a:19:db:
52:c1:bf:e6:85:5f:c6:d1:e4:bd:f7:bd:ac:b1:b7:d5:c0:45:
62:08:37:ff:9a:aa:2b:09:e7:9c:15:14:11:33:96:f0:6d:49:
cc:be:bc:d5:8c:a7:50:7b:a5:00:14:ec:42:7e:11:17:80:75:
37:b4:55:5a:9b:83:c8:fe:75:ef:4e:e1:ce:d3:41:85:73:e1:
20:2b:b8:c8:1a:b3:51:69:26:43:dc:17:10:ba:4d:bb:8d:ff:
71:9a:5b:bb:39:1f:42:18:1a:63:8f:f6:13:32:a7:67:83:48:
72:15:35:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:35 2025 by rpki-client