Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
File: RBBkfZUukSEiD0FOiKXd1ivII3s.mft (raw, json)
Hash identifier: 016k0z+M1ABEH5nehmU037gOhff5ZqZYiGxF4t+a67Y=
Subject key identifier: 71:42:66:0F:2F:5E:DB:C2:A1:62:9F:6A:14:04:73:0E:7B:9D:5C:04
Authority key identifier: 44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B
Certificate issuer: /CN=4410647d952e9121220f414e88a5ddd62bc8237b
Certificate serial: 0198D5BC3467D15385D7A1721C71CD8A3F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
Manifest number: 7D
Signing time: Sat 23 Aug 2025 07:02:17 +0000
Manifest this update: Sat 23 Aug 2025 07:02:17 +0000
Manifest next update: Sun 24 Aug 2025 07:02:17 +0000
Files and hashes: 1: RBBkfZUukSEiD0FOiKXd1ivII3s.crl (hash: 3a1VPAtcJ6vilwGMHTuL2U9pQZmxn6UTxJJ94doJg1Q=)
2: p12I-ru8S8FXjKziObzMY5uNEZE.roa (hash: AoXZbQHCJONRAMAiMe6YpP5PYiXNKcBqe2FpH/bOcvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:34:67:d1:53:85:d7:a1:72:1c:71:cd:8a:3f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4410647d952e9121220f414e88a5ddd62bc8237b
Validity
Not Before: Aug 23 07:02:17 2025 GMT
Not After : Aug 24 07:02:17 2025 GMT
Subject: CN=7142660f2f5edbc2a1629f6a1404730e7b9d5c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:67:37:9b:1b:0a:dc:73:fc:24:67:f7:6c:3d:
18:c8:fe:22:4a:90:e1:2f:5a:22:ce:89:f1:d7:20:
16:93:74:f8:41:64:0f:09:13:c4:52:92:8e:7c:e7:
3d:d9:68:ae:0f:61:ac:3c:b6:c5:63:99:db:43:be:
70:5e:62:7b:02:8f:a4:96:fe:38:27:0e:bb:2d:36:
ba:64:ee:0e:2f:76:7a:fe:ec:05:a0:47:59:b4:e9:
14:75:8a:2e:3f:79:98:3e:cb:dc:5a:bf:b2:21:a6:
4f:36:64:d0:3f:f5:69:08:98:3c:ae:6d:30:9d:9d:
e5:5d:0e:bc:ec:53:5f:51:8d:3d:6d:70:75:af:5d:
4b:16:9e:e1:a3:a6:a7:69:42:af:c5:04:d5:dc:cf:
81:f8:02:6b:ba:b7:fb:a1:e1:0e:67:3f:80:30:1f:
50:9f:43:21:0b:c1:d1:23:06:9d:97:b4:69:88:08:
df:da:97:5e:90:35:87:1c:a0:54:01:b0:9c:42:2c:
7b:53:03:2d:ef:86:22:ec:f8:b0:13:83:31:5a:24:
5b:30:48:3d:43:89:a9:72:6d:e8:47:fa:83:4e:a6:
47:a8:0e:fa:bb:70:06:eb:3d:45:a0:29:a9:f6:e9:
7a:67:14:69:3c:d9:33:2c:35:1b:5b:0c:79:99:76:
eb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:42:66:0F:2F:5E:DB:C2:A1:62:9F:6A:14:04:73:0E:7B:9D:5C:04
X509v3 Authority Key Identifier:
keyid:44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b0:cb:e4:07:98:55:a7:7a:42:0e:37:1a:fe:5e:5a:d7:2e:
6f:03:0c:66:db:36:e4:9a:8e:0b:f4:d4:c2:fe:84:ca:49:82:
ea:de:c9:33:a1:82:db:ee:9e:ec:fe:a6:c8:18:92:16:12:cf:
7f:10:7b:a9:bc:65:8e:45:6d:c0:5a:5e:45:c2:70:14:74:6a:
6b:90:b2:f9:5f:d7:1d:1c:55:eb:d3:96:14:3d:0a:30:78:9f:
9b:87:85:20:d0:5c:11:6a:78:ce:c5:f0:1d:8f:84:95:75:be:
44:b7:07:23:a3:8b:f2:97:29:52:60:5b:50:7f:57:ce:2f:0d:
2f:ff:08:c1:1e:36:e3:c8:eb:9d:a4:96:4f:04:25:6f:ea:62:
49:d5:33:88:79:5a:03:13:59:df:40:4c:5f:cc:0f:6b:0c:2b:
15:8b:c6:cd:58:ed:66:8d:51:52:33:f0:9a:5f:23:9a:2c:44:
3b:11:49:bb:3e:0e:45:c8:8e:7f:19:2f:93:09:25:71:ef:bc:
b1:24:63:ec:7e:60:a3:8a:b2:f7:c6:28:6d:9b:bd:9e:c5:d7:
36:88:ee:8a:8a:b3:ab:8b:d3:63:48:f3:32:94:4e:ed:0c:11:
e8:77:89:0a:a9:03:37:25:aa:2e:a0:91:d7:c3:c2:8f:d6:1d:
87:f0:a9:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvDRn0VOF16FyHHHNij9tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MTA2NDdkOTUyZTkxMjEyMjBmNDE0ZTg4YTVkZGQ2MmJj
ODIzN2IwHhcNMjUwODIzMDcwMjE3WhcNMjUwODI0MDcwMjE3WjAzMTEwLwYDVQQD
Eyg3MTQyNjYwZjJmNWVkYmMyYTE2MjlmNmExNDA0NzMwZTdiOWQ1YzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Wc3mxsK3HP8JGf3bD0YyP4iSpDh
L1oizonx1yAWk3T4QWQPCRPEUpKOfOc92WiuD2GsPLbFY5nbQ75wXmJ7Ao+klv44
Jw67LTa6ZO4OL3Z6/uwFoEdZtOkUdYouP3mYPsvcWr+yIaZPNmTQP/VpCJg8rm0w
nZ3lXQ687FNfUY09bXB1r11LFp7ho6anaUKvxQTV3M+B+AJrurf7oeEOZz+AMB9Q
n0MhC8HRIwadl7RpiAjf2pdekDWHHKBUAbCcQix7UwMt74Yi7PiwE4MxWiRbMEg9
Q4mpcm3oR/qDTqZHqA76u3AG6z1FoCmp9ul6ZxRpPNkzLDUbWwx5mXbrBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFCZg8vXtvCoWKfahQEcw57nVwEMB8GA1UdIwQY
MBaAFEQQZH2VLpEhIg9BToil3dYryCN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkJCa2ZaVXVrU0VpRDBGT2lLWGQxaXZJSTNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xN2I4OGQtMWFmYy00NDA3LWIwMTgt
NTQ1ZGNhODBiZjQ5LzEvUkJCa2ZaVXVrU0VpRDBGT2lLWGQxaXZJSTNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8xN2I4OGQtMWFmYy00NDA3LWIwMTgtNTQ1ZGNhODBiZjQ5
LzEvUkJCa2ZaVXVrU0VpRDBGT2lLWGQxaXZJSTNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLDL5AeY
Vad6Qg43Gv5eWtcubwMMZts25JqOC/TUwv6EykmC6t7JM6GC2+6e7P6myBiSFhLP
fxB7qbxljkVtwFpeRcJwFHRqa5Cy+V/XHRxV69OWFD0KMHifm4eFINBcEWp4zsXw
HY+ElXW+RLcHI6OL8pcpUmBbUH9Xzi8NL/8IwR4248jrnaSWTwQlb+piSdUziHla
AxNZ30BMX8wPawwrFYvGzVjtZo1RUjPwml8jmixEOxFJuz4ORciOfxkvkwklce+8
sSRj7H5go4qy98YobZu9nsXXNojuioqzq4vTY0jzMpRO7QwR6HeJCqkDNyWqLqCR
18PCj9Ydh/CpFA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:02 2025 by rpki-client