Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
File: RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft (raw, json)
Hash identifier: RdrjAJs/eclZCV3l60aLDwn90zRbHDCVjYg4sohLmTI=
Subject key identifier: F1:18:90:92:DD:E3:6C:63:8D:9D:CB:C0:44:88:A3:1C:87:6A:6A:E6
Authority key identifier: 44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71
Certificate issuer: /CN=4419e02f046e1bfb5927fe731ff725e469599171
Certificate serial: 01993314198E0A60DBB4F946EF08D80836AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
Manifest number: 1172
Signing time: Wed 10 Sep 2025 10:02:59 +0000
Manifest this update: Wed 10 Sep 2025 10:02:59 +0000
Manifest next update: Thu 11 Sep 2025 10:02:59 +0000
Files and hashes: 1: RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl (hash: D62dtxMRbI26feKLg2tq+ett6yaQvP3ElTPCRUeU2LI=)
2: j6btVEkYHnL9gWowTqe50VXUUIk.roa (hash: eFOZX5z3pNhRrEXFNmogu9OUe+ItbR9kd5gawg90+UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:14:19:8e:0a:60:db:b4:f9:46:ef:08:d8:08:36:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4419e02f046e1bfb5927fe731ff725e469599171
Validity
Not Before: Sep 10 10:02:59 2025 GMT
Not After : Sep 11 10:02:59 2025 GMT
Subject: CN=f1189092dde36c638d9dcbc04488a31c876a6ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0d:91:80:24:a3:18:71:17:17:1b:0d:bf:90:
09:71:21:3e:97:c5:6f:eb:32:91:2c:f8:bf:d8:11:
5a:8e:fa:ce:b8:a9:04:a9:bf:0b:2f:72:f1:ba:1c:
23:91:7a:b9:28:d1:92:d6:c6:af:fb:eb:54:8a:66:
42:2c:51:09:97:0e:b7:42:67:af:7e:24:07:f0:73:
8f:65:a3:e6:d4:c2:66:bf:74:df:60:aa:ff:da:80:
33:7d:03:be:ca:02:b9:4b:a0:38:eb:68:03:5b:51:
8d:44:94:a1:3c:38:1f:df:6f:2a:8e:90:89:a1:9d:
bd:d0:03:23:10:45:ff:04:aa:9c:0c:11:30:d3:89:
1d:e5:28:93:8f:51:96:bb:32:f1:5c:2e:53:6b:2e:
6e:ed:a6:d4:5a:49:2d:6c:23:19:fe:86:45:b1:05:
8f:06:3f:dd:6a:9f:72:90:44:75:3b:40:66:43:38:
c8:de:f8:27:e2:50:5a:cc:2d:e0:41:0b:3f:09:15:
82:24:28:9b:e5:ba:b6:38:2f:e1:3f:39:cb:4b:a1:
fc:07:3a:01:42:f5:6c:88:42:ae:45:c9:1b:db:c5:
f5:0a:73:f0:cf:1c:a4:63:76:7e:cd:63:02:bf:9a:
bb:23:b4:59:15:ef:b9:1d:1e:60:e3:74:a8:eb:3d:
a8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:18:90:92:DD:E3:6C:63:8D:9D:CB:C0:44:88:A3:1C:87:6A:6A:E6
X509v3 Authority Key Identifier:
keyid:44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ad:61:56:27:97:07:23:67:a1:1c:a3:7f:6e:ed:f7:b2:ae:
9b:ea:af:c1:82:57:d1:ac:89:32:dd:dd:7e:88:e6:c8:3d:96:
12:fc:e2:4a:60:36:3f:c7:e9:08:17:e0:04:b0:10:96:c0:c4:
eb:99:ed:d8:e1:7c:52:54:c9:11:3f:9a:54:2a:cb:46:4a:3e:
e8:eb:d9:e6:2e:54:92:f1:f9:4c:a8:2a:26:63:01:50:93:69:
4d:b5:55:0d:d1:88:d8:69:1f:60:cd:b8:69:0e:53:bb:9b:bf:
c9:77:e5:e6:2b:5b:03:fb:1d:9d:96:30:2b:a2:07:b0:d7:8e:
0a:f0:09:e9:a5:88:18:a8:c8:8b:1d:98:8e:d5:d0:af:ac:4d:
cc:5b:4c:e8:16:c2:e1:fb:0b:fe:ba:54:e7:ba:85:30:68:55:
dc:1f:6a:37:a6:d5:b9:c6:d3:db:10:44:6e:0a:c7:12:71:96:
19:a9:34:20:8f:23:1b:00:ba:c4:17:c9:d3:21:ee:14:72:7d:
51:05:d8:17:b6:6a:59:0c:97:82:8a:33:c8:eb:a0:b1:5b:b6:
cb:b8:bd:13:9c:fa:64:a6:a5:ad:7d:b2:fc:bb:84:e7:fb:d7:
00:43:95:82:55:fe:f3:cf:13:52:b8:d7:59:cf:9c:b3:34:25:
30:3f:c2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:23:57 2025 by rpki-client