Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
File: rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json)
Hash identifier: cB5KH4Bti9boHdd2d7+lTiQIhIOTB1ZRUiIqbJvVnrI=
Subject key identifier: CC:5A:06:5A:69:3A:19:65:61:8C:E3:36:83:79:21:00:9A:8B:E5:21
Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
Certificate issuer: /CN=adb365acf6f918499707dda13f033e2cd6110308
Certificate serial: 0199FBEB2E783A9A139127BF8072A9EAC47D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:01:58 +0000
Manifest this update: Sun 19 Oct 2025 10:01:58 +0000
Manifest next update: Mon 20 Oct 2025 10:01:58 +0000
Files and hashes: 1: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: KFKSHnO0s+M9vtdJSlsDWhW/H2EwSyy/tVoo3ZmFDeo=)
2: zexQv7MMnSMTcRcSk7PaXdu5bh4.roa (hash: VAN/TauThH6QEZkrRALg6rnqCv24/be16q83SWwAfVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:2e:78:3a:9a:13:91:27:bf:80:72:a9:ea:c4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308
Validity
Not Before: Oct 19 10:01:58 2025 GMT
Not After : Oct 20 10:01:58 2025 GMT
Subject: CN=cc5a065a693a1965618ce336837921009a8be521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:94:db:66:f5:74:5c:11:08:36:26:4f:a0:
77:8d:e3:48:44:4f:01:6c:c2:95:8b:df:4e:57:9b:
2b:5e:2d:d9:77:f4:71:41:34:a1:c0:d5:aa:00:0d:
95:50:24:23:45:c7:ec:87:1d:eb:24:ad:e7:df:f9:
87:55:76:42:25:b1:c3:c1:5a:71:df:c8:59:32:aa:
6b:91:2e:49:82:32:d5:06:52:d3:c2:03:53:1a:35:
06:5e:19:38:0a:39:91:9f:29:51:ac:69:f0:44:78:
5e:63:1c:b2:8c:3e:1a:b1:f0:75:6e:e1:a6:d3:0b:
94:7c:1e:72:1a:f8:5b:b7:3d:2a:24:be:ad:da:a9:
63:bd:c7:b6:1b:42:63:cc:74:74:61:a2:18:05:5c:
e7:f1:cf:6d:85:31:1b:9f:0d:fb:bb:a5:26:30:54:
f3:0f:6f:f9:81:47:77:8f:ba:ed:bf:04:56:e6:56:
19:03:fa:8f:90:56:e9:82:01:76:06:52:48:23:d3:
7b:89:69:b9:21:2c:0f:98:b7:76:ea:03:7e:f2:75:
ae:4f:b4:7d:94:3b:0a:5f:30:f3:02:02:35:68:74:
f0:c6:14:f1:84:42:68:9a:2a:75:54:20:c7:fc:6a:
05:3f:e7:4b:91:46:ee:ec:f2:0e:14:84:0a:7f:ab:
6d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5A:06:5A:69:3A:19:65:61:8C:E3:36:83:79:21:00:9A:8B:E5:21
X509v3 Authority Key Identifier:
keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:14:8a:a5:61:76:47:f1:65:7d:2c:22:34:44:71:00:c1:9b:
8f:83:12:31:2e:6d:3f:95:2c:fb:6c:1a:02:bc:e7:3f:af:9e:
51:17:d8:5e:be:6c:a4:51:c0:45:0b:19:85:dd:ae:42:a0:8f:
8d:8b:ef:58:e8:c9:34:7f:6c:55:58:4a:79:27:f1:ec:e2:ba:
4a:6e:79:65:6e:45:67:7d:fd:73:4f:20:92:49:0c:e3:26:8d:
5a:dd:99:ea:c8:3f:fe:e2:4d:4d:f9:5b:c6:8c:70:a0:73:fc:
95:6d:09:e9:1a:78:43:8a:74:da:df:5a:63:fb:49:35:eb:74:
b3:5d:c6:d3:31:15:ca:b0:d4:43:bd:84:56:01:7c:71:3b:a9:
93:e3:4c:50:70:56:d3:b6:10:e4:97:b9:c8:4d:64:ce:b9:cd:
02:8b:19:f8:f8:84:15:b6:6a:89:25:61:3d:47:c9:59:fe:bc:
36:86:6c:38:0c:a8:46:f1:09:57:c9:d1:19:2e:10:1d:02:06:
fe:72:7f:44:e3:49:83:87:4a:d3:a5:33:14:25:0c:c4:5d:2d:
70:2e:19:d5:68:63:16:aa:69:15:ee:68:ca:d4:8b:86:9c:39:
9f:69:b4:ce:1d:02:d3:38:97:a5:a5:92:69:e1:84:ec:60:70:
fb:35:b7:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76y54OpoTkSe/gHKp6sR9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYjM2NWFjZjZmOTE4NDk5NzA3ZGRhMTNmMDMzZTJjZDYx
MTAzMDgwHhcNMjUxMDE5MTAwMTU4WhcNMjUxMDIwMTAwMTU4WjAzMTEwLwYDVQQD
EyhjYzVhMDY1YTY5M2ExOTY1NjE4Y2UzMzY4Mzc5MjEwMDlhOGJlNTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTWU22b1dFwRCDYmT6B3jeNIRE8B
bMKVi99OV5srXi3Zd/RxQTShwNWqAA2VUCQjRcfshx3rJK3n3/mHVXZCJbHDwVpx
38hZMqprkS5JgjLVBlLTwgNTGjUGXhk4CjmRnylRrGnwRHheYxyyjD4asfB1buGm
0wuUfB5yGvhbtz0qJL6t2qljvce2G0JjzHR0YaIYBVzn8c9thTEbnw37u6UmMFTz
D2/5gUd3j7rtvwRW5lYZA/qPkFbpggF2BlJII9N7iWm5ISwPmLd26gN+8nWuT7R9
lDsKXzDzAgI1aHTwxhTxhEJomip1VCDH/GoFP+dLkUbu7PIOFIQKf6ttxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxaBlppOhllYYzjNoN5IQCai+UhMB8GA1UdIwQY
MBaAFK2zZaz2+RhJlwfdoT8DPizWEQMIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hNjgzODctODYxYS00YjkzLWEzZmMt
YWRhZGQ2Mjk1ODIyLzEvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hNjgzODctODYxYS00YjkzLWEzZmMtYWRhZGQ2Mjk1ODIy
LzEvcmJObHJQYjVHRW1YQjkyaFB3TS1MTllSQXdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArxSKpWF2
R/FlfSwiNERxAMGbj4MSMS5tP5Us+2waArznP6+eURfYXr5spFHARQsZhd2uQqCP
jYvvWOjJNH9sVVhKeSfx7OK6Sm55ZW5FZ339c08gkkkM4yaNWt2Z6sg//uJNTflb
xoxwoHP8lW0J6Rp4Q4p02t9aY/tJNet0s13G0zEVyrDUQ72EVgF8cTupk+NMUHBW
07YQ5Je5yE1kzrnNAosZ+PiEFbZqiSVhPUfJWf68NoZsOAyoRvEJV8nRGS4QHQIG
/nJ/RONJg4dK06UzFCUMxF0tcC4Z1WhjFqppFe5oytSLhpw5n2m0zh0C0ziXpaWS
aeGE7GBw+zW3JQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:15 2025 by rpki-client