
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
File: rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft (raw, json)
Hash identifier: +gcIJyAQEYJ6j1k3VEbud/IRZ/LjIQepBYOXWgUFMSY=
Subject key identifier: 92:64:C7:94:98:03:E1:AA:2C:65:83:39:A8:D6:74:77:6D:BD:57:00
Authority key identifier: AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
Certificate issuer: /CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Certificate serial: 0196A01B0A6EF687F8B77918809857D5E925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
Manifest number: 0C4D
Signing time: Mon 05 May 2025 11:00:48 +0000
Manifest this update: Mon 05 May 2025 11:00:48 +0000
Manifest next update: Tue 06 May 2025 11:00:48 +0000
Files and hashes: 1: CDUJExHuCJVPUownDG0KoC95j6g.roa (hash: ec1LWrgiCmmzqFwlIQnZ7qEB99QoLDe3mTnBITPZ9Fo=)
2: rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl (hash: po+9Vn/QPlxdOfb5UVr/4gwW7gJvHDxpGhEQQh2t7Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1b:0a:6e:f6:87:f8:b7:79:18:80:98:57:d5:e9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Validity
Not Before: May 5 11:00:48 2025 GMT
Not After : May 6 11:00:48 2025 GMT
Subject: CN=9264c7949803e1aa2c658339a8d674776dbd5700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:43:77:fd:05:9a:ea:f3:b8:81:fa:76:93:b9:
04:e3:e7:7e:4d:dc:04:e5:3c:a9:1d:c4:d6:29:a4:
22:1f:f2:73:68:24:56:bc:0e:f8:75:dd:e0:58:f4:
42:3a:b3:86:7d:f6:56:ce:3a:fc:f9:aa:d0:43:ae:
77:20:f8:30:e4:3b:26:aa:06:f5:79:77:ce:8f:4c:
12:0e:53:73:e9:ac:91:0d:2b:4c:15:65:48:62:69:
d8:06:c1:82:a4:4d:52:56:d7:b9:6c:6b:dd:23:70:
96:d5:6f:ae:00:89:bf:2e:c3:ee:ae:6c:c8:3c:a9:
48:16:b1:39:e2:8b:61:ed:49:78:93:4f:2e:fb:9e:
91:4d:70:fc:e5:25:4f:5a:5d:62:91:f6:cb:64:56:
18:09:72:35:f9:d0:4a:3d:f8:3b:bd:fe:2d:dd:4c:
d3:6e:fc:be:96:48:9b:6f:f7:03:dd:09:af:cd:f1:
27:09:fd:6e:c3:1f:97:78:28:75:45:14:ab:bd:a8:
51:3d:1f:84:cd:52:3f:bf:5e:99:9a:32:bc:3a:2e:
53:e3:df:43:2d:39:56:4a:c4:da:18:45:4a:c4:90:
5c:66:dd:0f:de:8a:ab:a5:58:39:1f:bc:12:d6:f9:
5e:6c:8f:a1:bb:c7:30:e6:a6:11:28:9f:90:bd:f4:
13:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:64:C7:94:98:03:E1:AA:2C:65:83:39:A8:D6:74:77:6D:BD:57:00
X509v3 Authority Key Identifier:
keyid:AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:af:14:42:e4:46:65:91:e0:5b:67:66:96:c8:f8:bd:84:80:
ff:f6:fc:2b:6f:d8:c3:b3:79:40:b0:b3:ee:36:ea:36:19:9e:
62:29:ab:57:63:e7:71:ad:ae:de:60:57:a3:16:bb:17:a4:c2:
3e:fb:ad:32:a0:51:f3:c1:84:1f:e6:59:36:f4:9b:07:28:cc:
20:f9:8f:6e:6e:ce:3c:89:7a:93:42:61:80:9a:a1:fe:2d:f8:
00:98:0e:86:c0:f4:31:b9:05:f1:33:ab:55:2d:3d:63:0e:d1:
0e:54:a8:09:66:15:cb:d0:ea:32:9e:15:a7:16:e1:07:21:21:
4b:ce:e1:ca:19:7c:61:69:eb:c6:a6:a9:db:20:65:c2:71:1e:
4c:03:9a:1c:1a:5e:b8:49:b9:53:13:8c:a2:44:aa:00:05:b1:
85:63:fc:72:f9:ba:e3:9a:8a:85:1b:a2:cc:d4:b9:95:44:b9:
35:1a:00:f9:be:a6:c7:ba:8b:11:8e:42:ba:5d:e2:d2:55:c6:
d5:1d:9f:05:57:2a:6e:10:22:8d:58:48:2f:c9:3c:06:79:65:
88:75:91:ee:51:4e:e4:ea:e5:0c:ae:d0:07:c7:74:9f:c3:13:
f1:62:b3:2f:6a:ac:fb:57:58:a8:41:f8:d3:a4:e0:ac:2a:30:
19:22:e5:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagGwpu9of4t3kYgJhX1eklMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYmM1Zjc3MjFhNGFjY2I5NjM1ZGUxNzViYmM2ZDMxZTE3
YzlhOGQwHhcNMjUwNTA1MTEwMDQ4WhcNMjUwNTA2MTEwMDQ4WjAzMTEwLwYDVQQD
Eyg5MjY0Yzc5NDk4MDNlMWFhMmM2NTgzMzlhOGQ2NzQ3NzZkYmQ1NzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkN3/QWa6vO4gfp2k7kE4+d+TdwE
5TypHcTWKaQiH/JzaCRWvA74dd3gWPRCOrOGffZWzjr8+arQQ653IPgw5Dsmqgb1
eXfOj0wSDlNz6ayRDStMFWVIYmnYBsGCpE1SVte5bGvdI3CW1W+uAIm/LsPurmzI
PKlIFrE54oth7Ul4k08u+56RTXD85SVPWl1ikfbLZFYYCXI1+dBKPfg7vf4t3UzT
bvy+lkibb/cD3QmvzfEnCf1uwx+XeCh1RRSrvahRPR+EzVI/v16ZmjK8Oi5T499D
LTlWSsTaGEVKxJBcZt0P3oqrpVg5H7wS1vlebI+hu8cw5qYRKJ+QvfQT/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJkx5SYA+GqLGWDOajWdHdtvVcAMB8GA1UdIwQY
MBaAFK28X3chpKzLljXeF1u8bTHhfJqNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9kMDIxZjktYTAwMS00NTJiLWE1ZWUt
YWJiZjFmMDc4YWQzLzEvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9kMDIxZjktYTAwMS00NTJiLWE1ZWUtYWJiZjFmMDc4YWQz
LzEvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJq8UQuRG
ZZHgW2dmlsj4vYSA//b8K2/Yw7N5QLCz7jbqNhmeYimrV2Pnca2u3mBXoxa7F6TC
PvutMqBR88GEH+ZZNvSbByjMIPmPbm7OPIl6k0JhgJqh/i34AJgOhsD0MbkF8TOr
VS09Yw7RDlSoCWYVy9DqMp4VpxbhByEhS87hyhl8YWnrxqap2yBlwnEeTAOaHBpe
uEm5UxOMokSqAAWxhWP8cvm645qKhRuizNS5lUS5NRoA+b6mx7qLEY5Cul3i0lXG
1R2fBVcqbhAijVhIL8k8BnlliHWR7lFO5OrlDK7QB8d0n8MT8WKzL2qs+1dYqEH4
06TgrCowGSLl+w==
-----END CERTIFICATE-----
Generated at Mon May 5 16:04:29 2025 by rpki-client