Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
File: rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft (raw, json)
Hash identifier: WIaQ+wX93/AjWWEXXt+sZVsuMnY5o4vFFuxpAjZm+kg=
Subject key identifier: AB:C4:D1:65:36:D8:FC:32:87:32:D9:A3:54:05:48:5D:E7:A8:FD:23
Authority key identifier: AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
Certificate issuer: /CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Certificate serial: 019A4D7409930C1D4798E9A984D555E2FD2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 06:00:41 +0000
Manifest this update: Tue 04 Nov 2025 06:00:41 +0000
Manifest next update: Wed 05 Nov 2025 06:00:41 +0000
Files and hashes: 1: 82G84G32y1mgU0Q3YtZB3rFx4UE.roa (hash: lPGmw8XEMipvSgR8GKq/jdBXSYYQonaEL52/1uh2Mmo=)
2: Deo2xTMuFm8QocUJ-a4RvviXgQw.roa (hash: nYDs1ZDulSnhALP5AjppGJbC8hnqemDJikGGe6pDTwQ=)
3: rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl (hash: V4nIM/OKsTL8vl7U+vn6s7ONqyfvVvlh+zLdvWNX4wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:09:93:0c:1d:47:98:e9:a9:84:d5:55:e2:fd:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Validity
Not Before: Nov 4 06:00:41 2025 GMT
Not After : Nov 5 06:00:41 2025 GMT
Subject: CN=abc4d16536d8fc328732d9a35405485de7a8fd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9a:f8:c2:cb:52:fe:0a:f7:c5:e0:3d:32:dc:
23:47:1f:95:3a:6a:7b:4f:19:ef:db:27:7d:84:cb:
e3:b6:e1:18:5e:07:2a:5f:93:e8:c2:73:66:29:5e:
f5:8a:ff:ad:6d:ff:ca:b5:67:91:d8:bb:e3:06:1b:
9a:74:74:37:77:73:40:8e:f9:01:30:53:fe:be:5b:
d9:03:a2:44:34:70:b5:e5:5c:a5:a4:6a:4e:d5:3b:
ba:fc:47:87:b3:c6:a8:5a:66:75:3b:b8:d8:40:e8:
23:fc:23:26:ec:0c:ac:d0:d3:a2:25:cc:74:98:cd:
26:e4:1b:38:33:d8:0e:a3:c6:f3:6d:7d:3c:8c:19:
f6:0a:8d:95:fc:3b:cf:37:03:4e:57:f6:38:08:40:
a0:a7:f7:c8:01:20:65:ab:3b:b9:44:a9:bc:d3:a8:
ee:a7:c1:bc:c8:0a:94:23:36:5c:a3:a4:a6:d3:7a:
ca:13:29:0c:18:c8:4a:31:03:be:28:d5:40:20:d1:
be:d8:a7:ed:9c:68:76:66:0a:6c:e1:f4:d8:d5:1f:
c3:27:18:03:7f:ae:a3:15:3c:53:cc:67:5b:b9:e9:
d3:15:d2:f7:fe:8a:fb:ae:1d:76:a5:54:17:0d:68:
ed:fd:46:b9:e2:2b:ab:9c:11:4a:78:08:47:0e:5a:
28:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C4:D1:65:36:D8:FC:32:87:32:D9:A3:54:05:48:5D:E7:A8:FD:23
X509v3 Authority Key Identifier:
keyid:AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:68:d3:b6:8f:78:09:fc:ee:e3:51:2c:36:55:38:92:ba:7a:
7a:d5:0b:c2:da:2d:34:ca:f9:9e:c9:6e:d9:f1:4d:bd:2b:9d:
83:81:db:e7:90:5a:18:62:1f:c6:b4:59:76:02:cf:a3:cc:39:
ca:0f:0b:23:de:e8:82:0a:c7:b6:29:61:28:53:fc:95:86:45:
cf:50:f3:68:79:66:d9:3c:39:fa:96:a6:8a:49:48:65:67:16:
5e:ec:4d:b6:4a:8b:2c:53:b8:9b:17:60:e8:52:76:35:09:f2:
ef:4c:d1:3b:fc:cd:f3:f3:2f:e6:27:ec:7e:b1:ae:e5:dc:40:
d0:68:a9:5c:46:a6:5f:38:ea:8e:ba:ef:00:b1:7e:eb:2f:63:
81:88:dd:6e:6f:f9:2f:d4:34:84:5d:6c:ed:e5:01:b2:9c:2c:
4c:fe:12:2c:88:67:7c:47:50:18:06:5a:3c:e9:53:3d:2c:61:
2d:ef:c6:99:2d:89:c0:dd:a5:f9:d1:9d:19:40:42:62:d5:b6:
f1:24:d7:ee:d2:9a:43:ba:49:04:c1:36:97:4b:76:72:45:35:
68:fc:0a:87:6c:fc:ea:0e:b4:58:f4:ac:84:cb:0f:84:b3:25:
d7:aa:a3:e5:f0:7c:a6:49:8e:19:47:74:15:63:9a:cf:65:6d:
8e:bf:e7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:08 2025 by rpki-client