Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
File: RbmFSwRFlObPCEb7Qd57CQj7X3I.mft (raw, json)
Hash identifier: vtlJC6uoedzfM6Y6Kp98QIwPjv/DLVm6ij0XdG/sGWM=
Subject key identifier: 8E:B5:78:CA:D3:DF:BA:3E:9E:E2:DC:0A:F4:9C:21:84:B2:32:FB:68
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 0198741946B3BFEBC04C651250FE3EA30E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
Manifest number: 161F
Signing time: Mon 04 Aug 2025 08:01:10 +0000
Manifest this update: Mon 04 Aug 2025 08:01:10 +0000
Manifest next update: Tue 05 Aug 2025 08:01:10 +0000
Files and hashes: 1: GB4vRJKp1DpnLIyb1KpSYzz8PU0.roa (hash: DcKOdI8R5b7iU4m9qsOPQJ0xQOvD2fBXmJ4gstnNJBY=)
2: RbmFSwRFlObPCEb7Qd57CQj7X3I.crl (hash: G3E+3hRXfyyjgV68EseJichSP00nFt0+w8Vo9PGkuA4=)
3: yu9wHeNN9TadONpdFJDPVyyoWGY.roa (hash: PEOTovTwm3OBSyT0paVn7ex6UZ0Hs/vcgcpTRm80FKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:46:b3:bf:eb:c0:4c:65:12:50:fe:3e:a3:0e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: Aug 4 08:01:10 2025 GMT
Not After : Aug 5 08:01:10 2025 GMT
Subject: CN=8eb578cad3dfba3e9ee2dc0af49c2184b232fb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:1f:9c:a7:b5:6f:4f:0f:21:f3:58:eb:1c:
ac:74:45:70:c8:5d:70:02:9b:b5:48:8a:41:13:d6:
25:1a:f5:2d:55:f8:1a:6b:b2:00:4a:68:a3:c9:04:
9a:d3:b1:a6:da:4c:f0:e1:17:06:9a:23:6c:2c:7c:
2d:83:8a:13:28:a9:14:44:c9:5c:a8:17:32:aa:36:
00:b2:30:71:7d:44:d3:a9:80:b8:08:91:f1:f2:5b:
8c:6b:77:00:03:92:50:b2:e8:9d:f2:f8:2d:a9:fb:
de:a5:1d:e3:76:dd:b0:e9:50:12:f0:ce:26:66:b1:
8b:6d:a1:49:90:4f:02:28:f8:f8:a5:bf:91:25:27:
bb:c3:eb:69:ef:91:b2:45:95:38:d4:24:23:18:d3:
fe:2b:ee:3b:94:c4:c7:5f:92:a7:c4:de:70:4f:06:
27:25:23:bb:75:98:94:47:ce:37:29:c8:53:61:fd:
11:bb:ad:80:cc:59:30:8f:aa:a1:af:10:0b:e0:34:
d5:49:52:96:09:84:be:96:03:90:13:b7:b9:c7:7a:
83:22:ca:d7:38:5d:71:9a:e5:e1:40:a1:3e:77:68:
d1:32:2f:2a:38:c5:73:14:a1:1a:48:9d:e5:8d:c0:
4e:de:8b:7e:a3:cc:7e:54:f3:f8:f8:65:7c:80:75:
e4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B5:78:CA:D3:DF:BA:3E:9E:E2:DC:0A:F4:9C:21:84:B2:32:FB:68
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f5:5a:af:d8:d6:ab:54:80:84:69:45:6b:ce:8a:c5:c4:a1:
35:d2:ff:30:c1:1a:d5:cc:e2:1a:0e:eb:c7:b1:07:11:af:a0:
6f:35:4b:11:2a:ed:5e:10:37:c9:76:67:58:dc:3b:27:ab:88:
b9:d7:c0:5a:8e:1e:b6:b8:11:16:dd:b2:7e:2d:2e:94:ea:12:
a2:0c:e9:d6:c5:bc:d6:04:80:ef:e5:0f:54:14:8b:f5:e1:eb:
a5:37:58:ce:35:35:ca:d9:f9:ad:32:f1:4d:11:46:d7:ff:18:
e8:d8:3b:ed:ec:ac:9f:32:25:fa:ae:45:d9:0c:14:87:3c:a3:
e8:12:39:bc:8c:31:6e:bf:e5:b0:29:61:85:f1:46:2f:15:1d:
1e:f6:27:0c:cc:a6:e6:a3:13:fe:10:e0:63:f3:2a:ce:c5:1b:
63:a2:ca:dc:a9:29:16:44:04:f1:e1:2d:a2:03:ce:b4:ca:2c:
94:6f:cf:a7:44:24:0b:82:6e:bb:c8:6e:7f:1e:10:04:2d:e4:
63:a5:f3:03:f5:39:93:7a:69:b9:23:bd:27:ed:d4:48:5c:3d:
34:0c:d7:31:9f:68:4a:eb:1e:94:16:11:37:82:d5:4e:3f:5f:
19:85:c1:f9:0c:42:b4:1b:3c:2a:93:eb:c4:f5:49:25:18:3b:
05:1e:1b:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GUazv+vATGUSUP4+ow6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1Yjk4NTRiMDQ0NTk0ZTZjZjA4NDZmYjQxZGU3YjA5MDhm
YjVmNzIwHhcNMjUwODA0MDgwMTEwWhcNMjUwODA1MDgwMTEwWjAzMTEwLwYDVQQD
Eyg4ZWI1NzhjYWQzZGZiYTNlOWVlMmRjMGFmNDljMjE4NGIyMzJmYjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS8fnKe1b08PIfNY6xysdEVwyF1w
Apu1SIpBE9YlGvUtVfgaa7IASmijyQSa07Gm2kzw4RcGmiNsLHwtg4oTKKkURMlc
qBcyqjYAsjBxfUTTqYC4CJHx8luMa3cAA5JQsuid8vgtqfvepR3jdt2w6VAS8M4m
ZrGLbaFJkE8CKPj4pb+RJSe7w+tp75GyRZU41CQjGNP+K+47lMTHX5KnxN5wTwYn
JSO7dZiUR843KchTYf0Ru62AzFkwj6qhrxAL4DTVSVKWCYS+lgOQE7e5x3qDIsrX
OF1xmuXhQKE+d2jRMi8qOMVzFKEaSJ3ljcBO3ot+o8x+VPP4+GV8gHXkuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI61eMrT37o+nuLcCvScIYSyMvtoMB8GA1UdIwQY
MBaAFEW5hUsERZTmzwhG+0HeewkI+19yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi81ZTYxMTYtNTZlNi00YzFkLTk2ODMt
NGIyMmZjNTE4NGEyLzEvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi81ZTYxMTYtNTZlNi00YzFkLTk2ODMtNGIyMmZjNTE4NGEy
LzEvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/Var9jW
q1SAhGlFa86KxcShNdL/MMEa1cziGg7rx7EHEa+gbzVLESrtXhA3yXZnWNw7J6uI
udfAWo4etrgRFt2yfi0ulOoSogzp1sW81gSA7+UPVBSL9eHrpTdYzjU1ytn5rTLx
TRFG1/8Y6Ng77eysnzIl+q5F2QwUhzyj6BI5vIwxbr/lsClhhfFGLxUdHvYnDMym
5qMT/hDgY/MqzsUbY6LK3KkpFkQE8eEtogPOtMoslG/Pp0QkC4Juu8hufx4QBC3k
Y6XzA/U5k3ppuSO9J+3USFw9NAzXMZ9oSuselBYRN4LVTj9fGYXB+QxCtBs8KpPr
xPVJJRg7BR4bug==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:54:54 2025 by rpki-client