Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
File: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft (raw, json)
Hash identifier: KsN5rRt6gqWMzV5/anqdwwqBL1WyUWUirJejKYPRoG0=
Subject key identifier: 9D:FD:72:DD:BE:A3:AE:1B:B2:DE:A3:B8:75:EF:38:4D:1C:93:C6:6C
Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
Certificate issuer: /CN=441d4b92dd150364c65b7d21299028678b0a5296
Certificate serial: 01993502701F1608512C5A4DADE70AC6A243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
Manifest number: 1683
Signing time: Wed 10 Sep 2025 19:02:56 +0000
Manifest this update: Wed 10 Sep 2025 19:02:56 +0000
Manifest next update: Thu 11 Sep 2025 19:02:56 +0000
Files and hashes: 1: 3JkSKP7jBeNBJpMBSaOABWLwqrY.roa (hash: qvkM6RHQW3kH5F1/K52m/X+zUOs3qQZCWijPjerK2kc=)
2: I1VO7zMbx-vbjpttTgauG2K9yC0.roa (hash: +jpo7oyuZbYyl/PyBGr6vKJVEKniF9XZYZ9HT6VtMFY=)
3: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl (hash: ItlUg1TJFBmKP7CBzZr6HC7SiNt9paIauFqs8Q5y4zw=)
4: rtM3C_Rb7MChD47Ga1U2cViLrVM.roa (hash: Bbt4WsyZlaNBYxegxcNZsDU9+mHNhqHf+fOapqUBZAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:02:70:1f:16:08:51:2c:5a:4d:ad:e7:0a:c6:a2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296
Validity
Not Before: Sep 10 19:02:56 2025 GMT
Not After : Sep 11 19:02:56 2025 GMT
Subject: CN=9dfd72ddbea3ae1bb2dea3b875ef384d1c93c66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ba:b0:ec:ac:77:de:80:8a:0d:7a:69:e6:07:
ea:bc:72:72:50:84:cf:25:d3:f6:29:cd:d9:ef:99:
7e:b5:a5:e7:5c:12:68:07:ea:e4:61:68:78:14:2e:
57:b0:e7:04:ab:25:68:85:fb:99:de:c8:ab:11:97:
4d:7f:90:bf:a9:e4:4a:cc:27:89:43:eb:68:c4:30:
c7:58:d5:9c:93:2e:53:28:e9:bc:95:81:68:b4:f5:
53:dc:1e:15:f8:04:a6:64:a7:0f:89:b7:c0:de:d5:
47:44:85:25:56:a9:49:bc:b7:8a:1f:80:73:ed:36:
0d:32:4a:4d:2d:13:b3:0a:65:62:9c:d1:e9:4b:0f:
8f:41:ad:28:5d:9a:c6:62:aa:78:42:f5:43:aa:1b:
d2:37:da:b9:b5:5c:4b:6c:dd:12:6f:95:82:ae:a3:
00:2f:8f:d7:84:cb:d2:40:9c:bd:09:1a:20:fa:17:
ea:76:68:d8:94:36:82:6a:93:f7:21:f2:47:34:f5:
a0:d0:7c:61:bd:e0:a8:2f:95:b4:a2:0a:93:f9:17:
72:2f:30:4a:3d:c7:03:d4:71:c9:0f:11:92:56:25:
6f:bb:13:2d:e2:1e:17:06:63:e0:88:4b:c3:93:86:
cb:2f:dd:50:30:19:08:ee:fb:33:d5:e5:2b:d5:66:
d9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FD:72:DD:BE:A3:AE:1B:B2:DE:A3:B8:75:EF:38:4D:1C:93:C6:6C
X509v3 Authority Key Identifier:
keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ec:66:e0:75:bf:cc:35:1c:2d:06:4b:88:03:57:1e:7b:56:
fa:5a:d8:0a:52:3e:43:ef:e9:a2:81:21:e3:32:98:5c:cc:0f:
38:fb:b8:cd:81:a2:45:c2:52:ce:9f:1f:a1:5b:b8:30:a5:2d:
7b:6f:82:2a:72:52:b2:ad:39:5e:35:cb:67:d1:d9:d7:e2:59:
1f:69:f0:b7:36:10:eb:3e:38:c0:01:9a:48:34:8e:0a:59:02:
88:03:21:af:7a:59:64:96:17:18:c2:bf:1a:0d:1c:8c:da:4e:
3b:08:a5:52:b3:84:8e:95:e3:1b:b2:fa:a2:93:f1:c0:5a:9d:
f3:52:32:b3:44:c7:da:06:77:be:80:83:31:5f:7a:8c:22:d2:
af:ac:4d:1d:84:f8:40:54:ce:03:6f:d9:9c:9f:ea:af:90:a4:
15:cf:36:92:09:13:78:9d:6b:c9:21:db:6b:53:5a:ec:ad:ce:
e0:45:cf:40:a1:0c:80:92:a3:c7:bd:32:65:fb:f6:2c:e5:de:
f5:00:f0:b0:5a:af:2c:48:bb:d2:a8:fa:4a:1a:d1:4b:ac:79:
e6:61:bb:64:13:00:4c:54:1b:b0:82:04:14:16:79:2b:5f:7b:
ca:1f:4d:13:3a:3c:36:ff:68:73:75:93:a1:31:5c:b1:87:3b:
76:aa:e9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:23:01 2025 by rpki-client