Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
File: RbmFSwRFlObPCEb7Qd57CQj7X3I.mft (raw, json)
Hash identifier: GfWq/ZsviIH+XAVciu+TXZ95XYJvOpeVQlt6QFtdWpk=
Subject key identifier: F8:92:76:65:55:E5:EB:BB:5A:3D:9F:A5:C7:A6:CA:3F:CA:0B:BA:06
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 019A4E4F4DCD7A190953294428231A46D993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
Manifest number: 171B
Signing time: Tue 04 Nov 2025 10:00:11 +0000
Manifest this update: Tue 04 Nov 2025 10:00:11 +0000
Manifest next update: Wed 05 Nov 2025 10:00:11 +0000
Files and hashes: 1: La2OHk40xT9jVzdbL8VM1zaNhwM.roa (hash: L4NT7hhkbemzTZ1h36oxCLeAgJ9PnHHf7M9ufVdCkYE=)
2: RbmFSwRFlObPCEb7Qd57CQj7X3I.crl (hash: 8xSv/uVQ6utcfKYYkzLrnPJt18XIJ7Ub8mnbKfk9Xzk=)
3: oqbSDVyffYW6POB_Swdu2RDuL0U.roa (hash: sIzz4Hddo5JRH5QoMZorIpCfLRHXcarNIkRS1cu9s/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:4d:cd:7a:19:09:53:29:44:28:23:1a:46:d9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: Nov 4 10:00:11 2025 GMT
Not After : Nov 5 10:00:11 2025 GMT
Subject: CN=f892766555e5ebbb5a3d9fa5c7a6ca3fca0bba06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:69:93:d7:58:68:2f:e7:44:80:e5:24:d0:54:
95:1e:cf:80:52:b8:33:16:4b:f5:ef:39:5a:7c:55:
75:1b:5b:10:6b:58:1d:bc:a7:17:e2:90:e1:6b:1c:
7f:5c:aa:e0:7c:df:a3:d1:37:02:74:bb:4f:e7:e2:
44:8e:0b:b0:e6:33:59:94:96:c2:f2:ef:2e:1a:81:
d2:8c:4c:db:10:30:aa:54:6d:34:63:8a:1d:f0:b3:
6a:26:b5:6c:16:2f:9e:be:54:7e:04:1d:22:c1:f6:
5e:cc:75:ac:55:ca:05:bd:e0:ff:ed:3b:a2:c2:cc:
d3:7c:da:bf:27:1f:df:9a:55:a0:55:4b:59:35:8a:
52:bf:61:a7:df:ef:a6:e9:da:84:d0:05:e8:0c:e5:
98:60:0d:64:66:e2:8d:60:b0:d9:86:73:41:86:f4:
1d:db:fb:c4:ee:b4:77:7a:c4:c3:cb:24:b5:1a:c0:
ec:6b:ab:04:20:17:16:9b:3f:0e:88:4b:1e:2f:23:
d5:fc:7c:54:52:7c:16:c4:84:d6:3f:e0:46:48:62:
31:79:ae:31:99:fe:aa:6f:71:c9:64:6d:df:e4:a6:
1f:f8:0d:fc:e8:92:67:4c:ed:0e:f1:94:c1:c3:e5:
e4:4b:36:f0:94:ef:77:1c:8c:49:26:00:ef:f0:3b:
5d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:92:76:65:55:E5:EB:BB:5A:3D:9F:A5:C7:A6:CA:3F:CA:0B:BA:06
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:87:31:41:2e:8c:7a:07:85:ec:9d:b3:a3:33:49:97:32:49:
35:5e:ab:d3:6e:27:5c:b7:e0:37:1f:3a:c3:64:e7:5c:38:d7:
db:2c:d5:0c:af:43:78:91:45:74:df:31:b9:35:30:87:62:34:
2b:f7:00:af:39:13:60:44:b8:9e:09:20:d1:5d:d8:30:0d:33:
18:af:0e:d5:43:32:4f:85:95:33:db:b2:30:2f:8b:0c:f8:c0:
93:28:4d:7d:90:4c:b7:bb:9a:f9:c9:ac:11:19:fb:6a:66:4e:
a6:c8:c5:3d:97:21:f3:1d:c2:10:a7:bf:65:3b:da:1b:a1:47:
19:63:ea:83:ac:97:d7:b7:41:fe:4f:4b:d7:d1:4b:75:23:5f:
a3:9a:47:32:88:52:e8:a3:29:33:97:e0:24:03:ee:a1:87:61:
dd:f4:8a:3f:0a:07:0e:c6:dc:a3:f7:b1:28:7d:10:8a:e8:e6:
3f:7c:5a:2a:2d:ab:4a:a4:09:ab:95:5d:dc:59:cc:27:9d:c2:
6b:5e:d1:38:73:6f:36:5f:65:12:2f:7d:f9:d5:42:02:b0:ae:
de:d3:79:59:b7:56:4d:c1:f7:0a:ce:e6:8c:26:cc:c0:b3:12:
2a:60:3c:f4:c7:71:1b:62:fa:72:94:f9:b9:bc:d7:9e:4a:95:
6a:69:52:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:13 2025 by rpki-client