Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
File: RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft (raw, json)
Hash identifier: vMPb2SG4gMtT8VHfN1+/6hs1GgCnme6/uuK5Kf9OL9E=
Subject key identifier: 5B:D3:0E:4A:33:B9:B4:40:1F:0F:A2:AF:F9:90:1E:EE:79:FD:23:C9
Authority key identifier: 44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
Certificate issuer: /CN=4410d28a9274f9df1065b7f62f8b8997739c047d
Certificate serial: 0198D5F16D500C86F430349CF586D3F9C718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
Manifest number: 03B9
Signing time: Sat 23 Aug 2025 08:00:25 +0000
Manifest this update: Sat 23 Aug 2025 08:00:25 +0000
Manifest next update: Sun 24 Aug 2025 08:00:25 +0000
Files and hashes: 1: RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl (hash: n8fVtKPnXvz8s9gwNvWzaYqEf3uN5Ih6nmF+luwMgXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:6d:50:0c:86:f4:30:34:9c:f5:86:d3:f9:c7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4410d28a9274f9df1065b7f62f8b8997739c047d
Validity
Not Before: Aug 23 08:00:25 2025 GMT
Not After : Aug 24 08:00:25 2025 GMT
Subject: CN=5bd30e4a33b9b4401f0fa2aff9901eee79fd23c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:39:90:de:0b:f2:72:c9:64:eb:ba:08:6a:f6:
25:25:70:5b:59:71:a1:14:fb:23:f5:d6:b1:91:c8:
02:a0:0b:13:d1:a7:b3:65:c7:ac:79:3d:65:dc:76:
27:13:f8:36:79:c6:08:2e:73:e3:31:b5:da:4f:b4:
fa:f2:79:9f:6a:b7:70:94:5d:40:f4:7d:72:8b:f9:
34:e9:36:65:77:98:b0:cb:5c:62:d4:3b:40:f4:84:
de:1a:a7:06:96:87:49:a4:61:d0:87:df:88:54:fd:
0c:e1:1f:bd:9c:b8:98:67:48:8c:37:ae:2d:3e:12:
0c:15:48:23:b9:df:36:87:7f:3a:d6:5e:16:31:41:
7a:f9:08:aa:6b:9c:cf:dc:4a:7e:fd:62:4f:2f:c4:
89:83:ad:66:8f:62:c8:5a:5e:69:f4:5c:6a:d8:81:
a4:1a:0d:4e:ff:7c:61:2f:77:cc:cf:99:62:fc:43:
07:d4:72:cc:cd:49:0a:12:f8:c7:3a:a7:5d:9e:06:
49:42:03:bf:21:18:c6:f0:7b:e6:41:e3:3a:a4:bc:
58:22:80:fb:16:e5:96:b6:01:85:9f:e0:97:20:30:
77:52:e2:69:0b:f8:b8:e4:b3:23:84:b0:17:f7:23:
a4:c7:7a:80:08:4f:e0:32:67:be:0b:47:c8:be:eb:
e9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D3:0E:4A:33:B9:B4:40:1F:0F:A2:AF:F9:90:1E:EE:79:FD:23:C9
X509v3 Authority Key Identifier:
keyid:44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ce:58:8e:7e:b9:24:4e:b6:37:22:af:ed:bb:ad:3d:a9:24:
76:36:3a:ed:89:29:67:a7:96:f5:2d:b4:64:8f:a5:89:50:61:
10:26:5c:44:bf:93:87:eb:dc:77:f6:80:6d:10:56:7e:0f:f7:
4f:80:10:bd:60:a9:95:f4:35:15:e0:1b:58:ff:54:a6:a1:ae:
5a:68:9d:ba:a9:b7:01:7b:aa:0f:97:df:b5:cc:80:5d:3a:47:
8c:ee:ec:e1:3b:50:23:a5:a3:de:12:fe:ac:41:10:ce:99:5e:
44:af:9c:6c:7c:ad:d8:f8:8a:fa:7e:87:57:d8:0d:c4:8f:82:
4d:da:3b:8d:f1:69:38:91:b6:c3:98:ae:b0:32:9f:61:45:33:
29:25:bd:07:94:40:1f:d4:c6:d6:d9:5d:60:7e:9e:ef:9f:f3:
e7:b8:f5:02:57:cc:d4:f7:90:d1:a7:d6:92:d0:21:82:8b:d9:
fd:38:24:17:a7:f0:33:23:a4:b3:d4:61:67:9b:d3:21:6b:e2:
7e:d3:4d:e0:79:c5:48:75:2a:9b:c6:ca:09:0f:ad:f2:97:85:
21:42:89:43:d4:7b:22:c3:56:5f:eb:42:e5:c0:61:49:c0:d1:
3f:43:ac:55:32:a0:a7:de:3e:62:ab:d4:25:27:85:94:f2:ae:
19:2e:83:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:03 2025 by rpki-client