Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
File: RBBkfZUukSEiD0FOiKXd1ivII3s.mft (raw, json)
Hash identifier: DjS6ew1gTjT6Z5My19pMDX4/eigjqzjpadCy7Cz796o=
Subject key identifier: 4A:A7:B3:84:AC:26:FC:EC:80:D4:A1:F5:85:03:C8:7A:2A:8B:E3:F3
Authority key identifier: 44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B
Certificate issuer: /CN=4410647d952e9121220f414e88a5ddd62bc8237b
Certificate serial: 019922FA1C6E751BA655E50AAEA87AC9FD2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
Manifest number: A5
Signing time: Sun 07 Sep 2025 07:00:40 +0000
Manifest this update: Sun 07 Sep 2025 07:00:40 +0000
Manifest next update: Mon 08 Sep 2025 07:00:40 +0000
Files and hashes: 1: RBBkfZUukSEiD0FOiKXd1ivII3s.crl (hash: 6raeLk0OR0gY+5gNFSMSERDdEScO/TWAEvDqfq2jy7o=)
2: p12I-ru8S8FXjKziObzMY5uNEZE.roa (hash: AoXZbQHCJONRAMAiMe6YpP5PYiXNKcBqe2FpH/bOcvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:1c:6e:75:1b:a6:55:e5:0a:ae:a8:7a:c9:fd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4410647d952e9121220f414e88a5ddd62bc8237b
Validity
Not Before: Sep 7 07:00:40 2025 GMT
Not After : Sep 8 07:00:40 2025 GMT
Subject: CN=4aa7b384ac26fcec80d4a1f58503c87a2a8be3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:12:33:2b:5e:e4:20:31:64:5e:c0:d7:ba:41:
e4:b6:32:b9:10:84:b6:5d:71:44:20:c6:23:a8:b0:
76:7e:b9:07:cc:a7:40:3e:7f:00:dd:bf:e6:0d:78:
3f:cc:2b:72:ab:18:f3:fa:bf:16:bf:e4:6d:08:fc:
09:7f:98:1c:bb:c7:33:9e:b1:ef:43:e1:72:04:ec:
f0:43:4e:de:6c:4b:97:fd:b2:01:17:5f:f0:a5:50:
95:30:6b:2b:4d:bf:55:7b:24:f8:dd:c4:35:74:56:
8a:30:2c:ff:64:39:a5:07:a4:3b:cb:c5:49:d0:11:
ac:75:bb:0d:ae:16:91:ef:38:b3:e8:30:43:5f:d2:
5a:63:b7:d4:ec:de:53:8b:17:5b:6a:38:ad:e8:e7:
c4:14:a4:a6:0b:3c:63:16:22:97:d7:e7:7e:91:b8:
f2:e7:8f:69:77:ee:61:1e:09:43:36:ca:75:68:4a:
16:a3:f4:85:81:94:28:66:37:d7:37:6a:be:1d:4f:
16:54:e0:46:73:43:96:28:05:a4:44:80:db:60:b9:
1a:b5:0e:23:12:aa:d9:49:3c:00:13:8b:e5:89:ac:
ae:ec:c0:73:67:75:91:a0:d1:94:f9:16:e8:52:22:
03:53:6c:85:bd:2b:2c:1f:e5:7f:ba:be:ed:7f:45:
e4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A7:B3:84:AC:26:FC:EC:80:D4:A1:F5:85:03:C8:7A:2A:8B:E3:F3
X509v3 Authority Key Identifier:
keyid:44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f4:f6:8d:05:07:52:03:3e:8c:33:13:1c:04:90:ec:cc:e9:
64:ee:cf:49:ac:19:b0:71:29:65:a9:3b:65:a6:b1:e9:4b:3a:
c0:eb:6f:83:5f:f9:6b:60:03:1c:c5:20:cd:11:3b:1c:2b:96:
98:8f:10:1f:e7:f4:07:65:c2:8d:62:8a:19:09:5c:21:d3:ac:
84:88:33:c6:b8:e2:06:d3:92:ff:10:68:ac:38:73:9b:e8:e3:
c3:89:b1:8a:39:45:ec:59:ce:13:18:69:c0:a9:54:35:51:3e:
64:7a:da:6e:1b:4e:17:1e:3b:b3:b2:80:77:3f:36:2a:1d:d0:
ca:d6:98:8c:60:75:4f:dc:1e:ea:30:7e:f1:5b:b9:fa:19:12:
46:0a:95:bf:ae:8b:ad:ae:a9:b3:fa:bd:1c:4c:a9:ad:7a:53:
ff:09:3c:e6:3c:7b:55:88:ab:96:1e:ed:d0:71:ae:69:30:a6:
c7:3d:51:d2:56:99:c5:c7:bb:a9:d5:7a:b8:fc:e6:2b:6e:24:
57:c9:99:71:d5:23:af:a6:3e:4c:55:80:ca:0a:bc:0a:5c:5c:
d8:85:58:71:19:4a:23:e5:7f:ff:63:4d:3b:73:8d:b0:a4:99:
5a:db:6d:75:51:49:72:ea:77:21:01:99:d0:26:d4:81:36:66:
b2:e2:48:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:33 2025 by rpki-client