Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
File: RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft (raw, json)
Hash identifier: GuQLfvsDlw6lFGk5ix0jftnzwp+E/fsT5BC551degI8=
Subject key identifier: FC:AF:60:08:A7:A8:BF:C7:13:A4:5F:3C:5C:19:C6:83:23:81:01:7A
Authority key identifier: 44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
Certificate issuer: /CN=4410d28a9274f9df1065b7f62f8b8997739c047d
Certificate serial: 0199FD6B27E6F7E847C62F1285730B336381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
Manifest number: 0452
Signing time: Sun 19 Oct 2025 17:01:22 +0000
Manifest this update: Sun 19 Oct 2025 17:01:22 +0000
Manifest next update: Mon 20 Oct 2025 17:01:22 +0000
Files and hashes: 1: RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl (hash: 4QTjJqVuPsUwBYRcKq9ozkv09PuIa/H49RQ8uPa+8y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:27:e6:f7:e8:47:c6:2f:12:85:73:0b:33:63:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4410d28a9274f9df1065b7f62f8b8997739c047d
Validity
Not Before: Oct 19 17:01:22 2025 GMT
Not After : Oct 20 17:01:22 2025 GMT
Subject: CN=fcaf6008a7a8bfc713a45f3c5c19c6832381017a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:cf:e3:e8:f4:08:9b:1e:84:6c:80:95:ef:
67:45:8e:eb:b4:51:14:69:8c:0c:42:2b:f3:25:9c:
43:bb:c9:1a:7a:c2:d5:7a:cb:6b:09:9b:24:5e:ab:
bb:d0:31:4c:a9:d6:2e:31:1d:17:f2:73:80:87:af:
22:dc:d9:4b:df:d1:e6:40:08:42:a6:e9:82:f8:37:
03:50:52:bc:7f:9f:a1:9d:d3:8b:be:49:b6:63:f4:
de:63:32:c7:32:e0:6c:d0:94:9c:cf:5b:9a:0b:11:
51:05:b4:8a:d2:bd:44:d5:19:38:c4:0f:e2:c0:99:
04:ee:77:d5:e5:77:5f:b7:d8:ab:b8:dc:ba:af:9f:
f6:7c:49:e9:14:c7:4e:b9:e6:03:40:86:08:b4:b6:
be:65:ae:7e:6a:89:79:09:eb:ae:c3:12:c0:90:fb:
83:03:0b:29:48:b7:3e:de:26:39:0c:98:b9:78:60:
c5:4c:34:94:0c:eb:46:4e:57:5a:cd:a4:60:4a:b3:
45:96:91:c4:89:77:db:9e:a1:8d:a6:4b:9b:3a:7e:
1f:56:48:61:90:28:db:fd:80:30:dc:6a:70:90:de:
97:f9:a7:36:13:8c:08:5b:13:c4:54:87:d0:27:58:
13:80:94:eb:19:d2:70:4f:82:27:c9:7e:4a:81:be:
af:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AF:60:08:A7:A8:BF:C7:13:A4:5F:3C:5C:19:C6:83:23:81:01:7A
X509v3 Authority Key Identifier:
keyid:44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6c:30:0e:74:c1:6d:66:e1:fb:b6:bb:da:a8:4e:84:0a:79:
d3:cb:27:a2:3b:8c:e5:f0:ce:a1:72:5d:23:cc:91:6f:66:ad:
6c:47:10:95:2e:97:32:01:64:29:f0:18:05:31:61:96:c6:1e:
dc:71:3d:6b:ee:f8:1b:05:a2:75:47:f8:eb:76:de:9d:d6:48:
cd:9e:a8:0b:eb:aa:30:3e:3f:63:67:3a:ac:9f:74:ac:88:21:
9c:7e:20:f3:28:04:1c:f3:6c:10:92:b1:02:cc:06:c3:7f:0b:
ca:8b:63:3d:cd:6c:86:a1:1f:c8:37:a8:18:e9:c7:19:02:ee:
2e:bd:bf:49:56:a0:1e:ff:9f:8b:69:0a:ee:8e:a9:c5:d9:b1:
91:8d:0d:d5:13:a2:77:fd:b7:98:ad:59:a1:ac:6e:df:b9:d2:
60:45:33:58:95:81:f8:73:35:34:66:c3:36:d4:21:db:62:7f:
e1:91:08:0e:c7:f6:e7:6e:b6:d6:87:71:1a:cf:33:70:5c:74:
31:37:ec:88:97:4d:ed:d0:dd:c6:6e:fd:7b:78:11:bb:ac:aa:
e0:64:f0:cf:76:26:e6:38:d1:69:59:d3:d4:1c:c0:6d:e8:f0:
bf:6a:42:15:4b:3f:92:42:3e:c6:f8:f6:c0:df:1b:d4:e2:5d:
b6:2e:fc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:21:02 2025 by rpki-client