Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
File: rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json)
Hash identifier: 2N6+tHij8c8R/gk9vGjSSb/bA9Zg6YWxgxaw4jomKeI=
Subject key identifier: FE:B0:86:8D:A4:34:F2:93:7A:30:8E:AA:6C:C6:52:75:84:A8:A7:F6
Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
Certificate issuer: /CN=adb365acf6f918499707dda13f033e2cd6110308
Certificate serial: 0197CDCDDAD105B10AE763841068181A8C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
Manifest number: 15C3
Signing time: Thu 03 Jul 2025 01:01:49 +0000
Manifest this update: Thu 03 Jul 2025 01:01:49 +0000
Manifest next update: Fri 04 Jul 2025 01:01:49 +0000
Files and hashes: 1: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: I9A/K2IHwBLvPmHY5RUTjV5c1XBVT+sWveEeya6JGw4=)
2: zexQv7MMnSMTcRcSk7PaXdu5bh4.roa (hash: VAN/TauThH6QEZkrRALg6rnqCv24/be16q83SWwAfVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 01:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:da:d1:05:b1:0a:e7:63:84:10:68:18:1a:8c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308
Validity
Not Before: Jul 3 01:01:49 2025 GMT
Not After : Jul 4 01:01:49 2025 GMT
Subject: CN=feb0868da434f2937a308eaa6cc6527584a8a7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8b:a3:0b:79:8e:58:64:e6:7b:22:54:b6:72:
f3:8a:02:a3:31:fc:7c:ef:64:74:ff:96:46:89:7b:
96:ee:9e:d1:81:62:ae:d6:fc:fc:8a:f5:da:37:eb:
af:3f:aa:e4:2c:30:01:08:96:5d:d6:53:e2:e1:9a:
93:f3:05:88:58:9c:1c:64:06:c4:9e:43:15:3c:97:
78:16:d3:80:08:f6:9c:d6:50:e4:ca:86:9f:21:49:
e7:de:1b:68:f1:25:1e:10:2d:1f:37:fe:42:e3:50:
d8:28:65:7b:03:dd:b5:2b:23:86:6d:30:26:74:ed:
7d:57:b1:af:d2:86:3d:eb:be:a4:ad:ab:0a:c4:f8:
0b:5f:04:36:62:1d:22:16:fd:d0:59:8e:5a:ea:b9:
f1:48:f9:f2:de:76:ee:7e:4e:7e:b4:db:35:36:8f:
3d:03:b8:bf:dd:84:90:a6:94:af:38:84:51:36:46:
7e:50:67:7a:d8:4f:2f:2b:1d:2f:e8:78:d9:d6:17:
3e:60:74:e5:11:f7:7a:6e:d4:c9:1f:bd:b6:f3:8c:
c0:5d:79:16:8d:83:d6:d5:14:fa:2c:69:62:c5:d1:
f1:82:5a:ee:76:ee:fb:af:8e:2a:fc:10:d8:7b:69:
8b:7f:be:37:a6:1a:08:6c:d1:39:cc:27:da:4e:e9:
dc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B0:86:8D:A4:34:F2:93:7A:30:8E:AA:6C:C6:52:75:84:A8:A7:F6
X509v3 Authority Key Identifier:
keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2b:6d:f9:2b:68:1b:d1:51:0b:cc:09:34:d2:07:80:bf:bb:
65:df:9c:90:ba:7f:20:1c:ee:34:e7:9a:92:bc:a7:10:6b:cd:
ec:5b:9d:5c:29:16:ea:ac:e1:36:fb:cc:a4:84:f7:ef:0b:5d:
7b:14:42:4b:a4:c5:1a:7d:b7:37:cd:d5:73:9e:e2:17:cb:d7:
75:33:40:5a:8e:97:8d:12:0a:fc:63:21:2c:8a:ec:33:f4:ea:
63:b6:bf:44:7f:34:8b:d6:a3:eb:13:07:08:8d:82:2a:1c:b4:
f6:fa:ae:20:72:b9:cd:4e:e7:88:5c:56:9a:e9:04:5f:a3:ed:
75:e3:e1:b4:af:5e:6e:c7:2f:e2:36:ee:64:d3:fd:8c:da:49:
96:ec:e4:46:5a:f8:54:ab:7d:dc:d0:5d:3f:27:1d:63:32:7f:
9b:10:a2:d1:6a:5e:11:fc:4d:ca:68:9e:cb:24:21:72:83:1e:
f4:16:81:72:6a:e4:d2:c9:da:17:c8:99:28:4e:00:02:d7:06:
b4:2f:97:b1:0d:b9:f8:fb:f1:cd:80:4b:5e:03:ee:90:92:0d:
24:42:7a:fc:c4:e9:5f:70:e6:bd:9b:b5:08:f8:12:3e:2c:09:
b7:3c:ee:b0:c2:09:a6:74:95:93:27:65:b5:04:a2:1a:f8:d2:
d6:f5:e4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:07:56 2025 by rpki-client