Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
File: RBme-tyIgD3BoGVhD2R8_c4w9UE.mft (raw, json)
Hash identifier: nwKnm9kl6/PxtjxJ8kTySCSFoHOlB921ioGTKpeO3uU=
Subject key identifier: 11:F9:58:F2:4F:2B:F8:CA:7F:51:6F:25:EB:1D:C6:EE:86:31:9B:45
Authority key identifier: 44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41
Certificate issuer: /CN=44199efadc88803dc1a065610f647cfdce30f541
Certificate serial: 019A722597D272913D5E32AB826816CB5BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:00:57 +0000
Manifest this update: Tue 11 Nov 2025 09:00:57 +0000
Manifest next update: Wed 12 Nov 2025 09:00:57 +0000
Files and hashes: 1: RBme-tyIgD3BoGVhD2R8_c4w9UE.crl (hash: 9Wd5t09B3ByzlmIojuCgBTwyRARUlWyAyM90YAHxJww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:97:d2:72:91:3d:5e:32:ab:82:68:16:cb:5b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44199efadc88803dc1a065610f647cfdce30f541
Validity
Not Before: Nov 11 09:00:57 2025 GMT
Not After : Nov 12 09:00:57 2025 GMT
Subject: CN=11f958f24f2bf8ca7f516f25eb1dc6ee86319b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:37:61:53:33:99:74:e9:d0:cc:82:a2:8f:e7:
96:bd:ee:2c:e9:a8:14:75:17:4c:9e:56:a8:25:35:
e3:52:a2:08:eb:72:56:8b:55:d0:d2:fd:50:44:64:
5a:91:7a:73:38:4c:d0:d1:41:65:01:0a:f8:ac:6c:
33:ee:00:65:f8:ac:d5:36:cc:7c:52:ca:b4:0f:4f:
b3:71:44:de:16:95:d3:44:3d:e0:f9:16:dd:b3:ad:
04:35:79:0c:f1:d2:b0:e7:83:6c:12:16:6f:73:a7:
de:3d:9a:0d:2f:47:d1:a3:68:83:34:57:08:85:52:
93:b4:4b:c3:fc:38:70:16:1c:04:9f:9b:57:ca:0e:
b7:cb:94:fb:13:98:e6:4d:e0:7d:e4:5d:55:d5:70:
bb:65:3a:7d:21:a3:12:dd:95:46:18:f8:2d:ff:6a:
b1:4c:61:1e:5d:c2:5d:0b:95:b8:5d:08:86:f8:cc:
8d:f3:34:3c:50:ea:d4:ac:89:b7:01:7a:50:0a:af:
f1:13:2c:89:9c:a8:44:61:06:04:14:d5:5d:1f:cd:
0e:86:e3:bd:55:20:3c:07:64:e9:13:b3:0b:f8:be:
e2:e3:f8:78:a9:ef:bd:72:22:43:a7:cd:7c:1e:01:
b4:96:e4:d8:fb:7d:75:a8:42:b6:d0:88:19:b7:04:
0c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F9:58:F2:4F:2B:F8:CA:7F:51:6F:25:EB:1D:C6:EE:86:31:9B:45
X509v3 Authority Key Identifier:
keyid:44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:66:2d:ef:26:b7:d6:9d:c4:0b:e1:a8:1b:3a:91:39:92:d5:
8e:a7:a3:99:af:ba:6e:41:99:12:68:d6:d0:17:4f:7e:db:ec:
a5:ee:aa:ad:e2:13:e9:08:e1:5c:9e:6a:3c:66:75:eb:56:0e:
28:67:45:ab:c4:03:7a:85:dc:81:23:dd:5e:1d:62:da:c1:f7:
dd:e8:57:60:1e:9f:b9:a4:4b:3c:28:2c:b1:b8:a6:80:60:b4:
c2:ec:e2:62:4f:db:4b:ec:2b:d3:fd:fa:4f:9e:99:ac:92:ab:
d0:3e:18:a1:ef:ed:07:22:fa:8e:f8:6d:fc:e2:bd:62:76:41:
5a:b0:e5:75:2f:47:44:3f:4e:f8:a3:ad:85:d5:e7:a0:06:cb:
90:10:2c:05:be:6a:58:95:e7:69:85:9e:de:02:92:a4:c8:cd:
92:08:b7:74:fb:88:d7:4a:40:0b:08:98:9f:6b:96:b7:33:67:
d6:74:5c:b1:65:34:f6:53:49:56:57:39:af:9a:54:12:54:52:
cb:62:dc:3f:d7:f6:7a:2b:82:c3:4e:c9:93:3c:99:7e:d4:97:
f7:68:2a:2b:a7:dd:67:a9:5e:dd:d9:dd:73:37:d2:2a:d7:f1:
8d:90:08:1c:02:c3:18:48:ee:52:9a:ea:ae:ba:ac:6b:50:49:
38:52:25:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:42 2025 by rpki-client