Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
File: rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft (raw, json)
Hash identifier: OR6xEhvn7Dfza2Lz1xrKaQussZXOpoLYaAUpLyfkTQI=
Subject key identifier: 53:BF:8F:56:10:E2:13:5C:B0:64:E3:EE:35:5C:0C:46:7F:85:61:DB
Authority key identifier: AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D
Certificate issuer: /CN=adb2f583f889dd4b134da56db45a3e25580b1b1d
Certificate serial: 019921E7F5508AB2658156CE31270958842D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
Manifest number: 19
Signing time: Sun 07 Sep 2025 02:01:13 +0000
Manifest this update: Sun 07 Sep 2025 02:01:13 +0000
Manifest next update: Mon 08 Sep 2025 02:01:13 +0000
Files and hashes: 1: Bp5u105cLnSyMkxh7KOR948iXRI.roa (hash: dXsxv8eIa/K3JwhNWYfSnstzHLowcvi/gCcrVvFubck=)
2: PJCenPllR0ymQ1d8KyKJ4tH855M.roa (hash: EIu4iXxM6nS3KyUJFwjyRI3jWNzQpHTn528P8qXiYPg=)
3: rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl (hash: KVB19s4hi6yT+TXpzP5gkO2B8tC2FHmx+HrLfIYNREc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:f5:50:8a:b2:65:81:56:ce:31:27:09:58:84:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb2f583f889dd4b134da56db45a3e25580b1b1d
Validity
Not Before: Sep 7 02:01:13 2025 GMT
Not After : Sep 8 02:01:13 2025 GMT
Subject: CN=53bf8f5610e2135cb064e3ee355c0c467f8561db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:ab:23:35:00:6e:1e:38:7b:34:9f:db:64:
13:75:49:62:80:38:07:2a:37:06:96:46:63:7f:b0:
c0:17:6d:2e:24:70:0c:c7:88:e6:e2:e1:98:58:11:
0b:97:58:a9:74:92:d0:59:a7:b9:24:5b:06:0e:88:
a2:e0:01:cc:49:54:f1:7d:d0:0b:a4:d3:48:93:44:
6c:22:b1:88:4a:fa:f1:57:39:c1:f7:79:70:40:30:
b9:d3:f9:e6:4e:9d:fa:5e:46:52:02:6c:6b:ed:9f:
2b:82:83:be:2e:37:de:33:c2:4d:65:bc:5f:2d:ca:
09:60:1f:f5:ab:f5:1b:9b:3f:95:43:10:d4:cc:b6:
42:a8:9a:73:1d:22:a8:e9:89:e8:6b:85:be:95:ad:
ea:de:f5:80:09:3d:34:56:30:b4:fd:78:25:96:76:
83:21:5c:b6:0f:62:6e:b4:81:59:cf:ad:2e:04:20:
b0:a6:36:5f:93:1e:d8:6d:9c:ef:01:e0:b6:fd:9e:
d8:94:c2:87:4a:9a:59:4f:7e:bf:6a:4d:57:36:b9:
7d:1d:d7:35:a2:b7:45:fc:2d:54:ba:2b:6a:39:7f:
ec:d3:3a:7a:30:ad:c6:1c:b1:f3:02:a0:1e:50:00:
c4:0b:bc:89:dd:4b:2d:5c:e5:1e:a9:d8:70:ec:5e:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BF:8F:56:10:E2:13:5C:B0:64:E3:EE:35:5C:0C:46:7F:85:61:DB
X509v3 Authority Key Identifier:
keyid:AD:B2:F5:83:F8:89:DD:4B:13:4D:A5:6D:B4:5A:3E:25:58:0B:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbL1g_iJ3UsTTaVttFo-JVgLGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/350455-dd54-4def-8e91-add151666e2a/1/rbL1g_iJ3UsTTaVttFo-JVgLGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:6c:f5:74:3a:7a:11:05:72:a1:db:3e:aa:f5:fb:e6:15:af:
39:55:74:1c:5a:10:5d:ca:b9:20:2d:bb:d8:b1:0d:41:a0:5e:
46:2e:46:2e:d0:e9:57:21:c1:5d:46:e7:a8:00:cc:ad:d8:b4:
99:64:8c:7d:e7:f8:94:7c:ac:ca:cf:c9:6c:b8:99:74:1d:b4:
3a:1c:37:cb:05:0f:9a:47:95:0c:51:da:f9:33:b3:d8:70:50:
58:86:98:5d:1b:19:2a:51:4a:e5:b7:02:af:f0:61:46:ce:45:
6f:c4:c1:ac:3b:3d:08:e3:bb:96:da:90:59:12:cf:1e:be:e7:
18:de:ff:b9:41:b3:cb:e0:32:93:7c:84:06:c6:ea:c1:9d:50:
a1:6b:da:e3:80:d9:01:d4:81:94:dd:f6:8f:fa:70:1f:1c:45:
31:c6:5a:53:bf:e8:ca:fa:70:9c:5b:fa:4f:12:27:48:2e:bf:
cd:e7:15:39:ae:d3:92:ca:ea:f8:f3:d6:20:cf:20:de:d0:95:
8b:bf:ea:55:63:85:a3:48:e4:03:58:6a:b7:ac:ab:72:2f:b5:
36:45:16:7d:40:9f:cc:ef:eb:b4:cd:59:c8:cf:7d:bd:b6:70:
d2:bc:b2:a4:46:26:5f:5a:6a:c2:f1:0c:78:2b:12:22:c4:72:
f7:ef:c6:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh5/VQirJlgVbOMScJWIQtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYjJmNTgzZjg4OWRkNGIxMzRkYTU2ZGI0NWEzZTI1NTgw
YjFiMWQwHhcNMjUwOTA3MDIwMTEzWhcNMjUwOTA4MDIwMTEzWjAzMTEwLwYDVQQD
Eyg1M2JmOGY1NjEwZTIxMzVjYjA2NGUzZWUzNTVjMGM0NjdmODU2MWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYmrIzUAbh44ezSf22QTdUligDgH
KjcGlkZjf7DAF20uJHAMx4jm4uGYWBELl1ipdJLQWae5JFsGDoii4AHMSVTxfdAL
pNNIk0RsIrGISvrxVznB93lwQDC50/nmTp36XkZSAmxr7Z8rgoO+LjfeM8JNZbxf
LcoJYB/1q/Ubmz+VQxDUzLZCqJpzHSKo6Ynoa4W+la3q3vWACT00VjC0/XgllnaD
IVy2D2JutIFZz60uBCCwpjZfkx7YbZzvAeC2/Z7YlMKHSppZT36/ak1XNrl9Hdc1
ordF/C1UuitqOX/s0zp6MK3GHLHzAqAeUADEC7yJ3UstXOUeqdhw7F52MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFO/j1YQ4hNcsGTj7jVcDEZ/hWHbMB8GA1UdIwQY
MBaAFK2y9YP4id1LE02lbbRaPiVYCxsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmJMMWdfaUozVXNUVGFWdHRGby1KVmdMR3gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zNTA0NTUtZGQ1NC00ZGVmLThlOTEt
YWRkMTUxNjY2ZTJhLzEvcmJMMWdfaUozVXNUVGFWdHRGby1KVmdMR3gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8zNTA0NTUtZGQ1NC00ZGVmLThlOTEtYWRkMTUxNjY2ZTJh
LzEvcmJMMWdfaUozVXNUVGFWdHRGby1KVmdMR3gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmz1dDp6
EQVyods+qvX75hWvOVV0HFoQXcq5IC272LENQaBeRi5GLtDpVyHBXUbnqADMrdi0
mWSMfef4lHysys/JbLiZdB20Ohw3ywUPmkeVDFHa+TOz2HBQWIaYXRsZKlFK5bcC
r/BhRs5Fb8TBrDs9COO7ltqQWRLPHr7nGN7/uUGzy+Ayk3yEBsbqwZ1QoWva44DZ
AdSBlN32j/pwHxxFMcZaU7/oyvpwnFv6TxInSC6/zecVOa7Tksrq+PPWIM8g3tCV
i7/qVWOFo0jkA1hqt6yrci+1NkUWfUCfzO/rtM1ZyM99vbZw0ryypEYmX1pqwvEM
eCsSIsRy9+/Geg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:10 2025 by rpki-client