Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
File: rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft (raw, json)
Hash identifier: SQEyIGCTzwT4F6bTQwOlEFDVf56VN6YNC9LLeyf51y4=
Subject key identifier: BC:5B:CD:CF:50:D4:7B:13:FC:31:80:46:FF:19:2E:E4:5F:E6:0F:BF
Authority key identifier: AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
Certificate issuer: /CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Certificate serial: 0197B820C056028143174833DFA54F13B693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
Manifest number: 0CDE
Signing time: Sat 28 Jun 2025 20:00:43 +0000
Manifest this update: Sat 28 Jun 2025 20:00:43 +0000
Manifest next update: Sun 29 Jun 2025 20:00:43 +0000
Files and hashes: 1: CDUJExHuCJVPUownDG0KoC95j6g.roa (hash: ec1LWrgiCmmzqFwlIQnZ7qEB99QoLDe3mTnBITPZ9Fo=)
2: rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl (hash: 3abney2+vINhr1J2y4dw2aagvQ37/DdP8CpfMPFi8Dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:c0:56:02:81:43:17:48:33:df:a5:4f:13:b6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Validity
Not Before: Jun 28 20:00:43 2025 GMT
Not After : Jun 29 20:00:43 2025 GMT
Subject: CN=bc5bcdcf50d47b13fc318046ff192ee45fe60fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ec:d6:79:66:44:33:4e:5e:42:a4:ea:56:11:
35:b9:96:12:90:12:ba:17:06:9e:3a:2c:77:48:67:
09:51:1a:47:e0:01:fd:7d:1a:ce:10:a6:58:42:84:
cc:00:bc:1d:12:ae:a5:28:d6:89:39:59:21:20:2e:
17:1b:4c:3e:00:d2:c5:ba:00:6f:c6:84:d2:0e:6d:
19:22:c8:02:c9:8d:99:f4:3c:16:80:ff:6f:2a:80:
e1:40:bc:91:c8:eb:0e:68:df:e7:c2:29:50:50:59:
b4:3e:75:c7:e3:ec:c0:ed:e2:b3:cc:7e:81:ba:59:
ae:4d:45:dd:1d:f9:8b:eb:1a:1f:62:0c:57:ee:f1:
ee:ac:18:52:67:b1:82:cd:64:52:37:52:b9:be:5d:
51:88:9d:04:ea:3c:1b:ce:f5:57:54:60:a3:2b:03:
3e:24:62:51:c7:57:d6:16:16:34:1a:b3:1a:c5:7f:
13:6d:fa:91:ed:06:9b:a3:f1:1f:ef:55:1e:8e:3d:
9e:90:3a:16:b0:ec:a1:3a:2b:74:e4:ad:71:d3:99:
51:f0:7c:0d:e6:ed:31:a6:29:85:6b:a1:62:40:ef:
79:e7:56:ee:32:5d:49:81:89:76:73:aa:a7:db:6c:
3d:c5:82:18:d3:37:f4:21:b8:4b:b0:cc:b7:cd:ea:
ce:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5B:CD:CF:50:D4:7B:13:FC:31:80:46:FF:19:2E:E4:5F:E6:0F:BF
X509v3 Authority Key Identifier:
keyid:AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a3:5f:ed:4b:e2:b5:c5:d7:48:e9:f0:cd:60:7c:aa:74:d8:
06:cd:22:3e:ab:b2:9e:46:64:ad:c1:ca:2d:04:19:4e:21:7d:
4d:31:5a:b4:b5:f9:3e:7b:68:9c:ef:41:ff:4f:3c:34:a9:24:
27:6d:af:1d:f6:d6:cc:32:c2:19:07:2f:6f:bd:a6:b3:27:1c:
fe:9e:ea:03:0a:1e:f5:aa:79:82:fa:c7:8c:96:47:45:fd:76:
70:96:ae:21:2c:20:c4:5f:2c:51:f0:12:6f:45:0d:a4:42:b4:
5b:1d:6e:fb:e1:c1:da:15:fa:0f:4d:40:16:38:98:3c:d0:5b:
14:1c:03:78:72:1a:2e:bb:e3:18:45:c9:3f:0f:79:14:f6:59:
fb:58:2a:5e:b5:91:f3:dd:0c:77:10:0c:ad:24:11:25:94:5a:
5c:c9:79:86:62:7f:ab:b0:01:a5:07:7d:fe:52:1f:40:e2:b4:
b8:a8:d2:1d:42:d7:ec:71:4a:2d:32:c0:e8:4f:de:ba:27:89:
f4:3f:f0:f1:f3:51:3a:82:7a:ad:3c:1f:18:6c:0b:62:e9:46:
e8:df:2c:a0:f9:c8:59:94:b9:19:4c:ce:49:85:47:c8:56:55:
12:6f:5d:a1:3f:38:2e:ff:d7:0d:63:51:49:e7:d6:f6:2f:ec:
5d:f8:22:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:19 2025 by rpki-client