Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
File: RbUATsPPXBp1UYXW9AaDxkbMlOw.mft (raw, json)
Hash identifier: d/SZtQQq5q5rONbi0eRzzxsCxt1Vz+MLoTUqhSGJMc4=
Subject key identifier: 49:96:B5:10:63:03:0A:B8:E4:9F:E7:88:A1:44:A1:4A:61:9A:0C:BA
Authority key identifier: 45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
Certificate issuer: /CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Certificate serial: 019A500722B3CA54F3DCA03F8670B44BA905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
Manifest number: 0B4A
Signing time: Tue 04 Nov 2025 18:00:35 +0000
Manifest this update: Tue 04 Nov 2025 18:00:35 +0000
Manifest next update: Wed 05 Nov 2025 18:00:35 +0000
Files and hashes: 1: RbUATsPPXBp1UYXW9AaDxkbMlOw.crl (hash: oV0YEwn12GcaSNAS6sCzDx+3ZaUlGAFfcE88b+9zyTU=)
2: cg41KOlM1vNAwrdMnvNHppcwT4c.roa (hash: QsQ4ZMCLxuolAifAsH1HBIsIugUjZ4tjy04rNn/2wxI=)
3: iuqsr8mDy4hdl6U1K1v1iSpNchQ.roa (hash: 1qvvVB0UpfZrwtI6t2Uw+kulc+5R7APEpoKz6kq0OuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:22:b3:ca:54:f3:dc:a0:3f:86:70:b4:4b:a9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Validity
Not Before: Nov 4 18:00:35 2025 GMT
Not After : Nov 5 18:00:35 2025 GMT
Subject: CN=4996b51063030ab8e49fe788a144a14a619a0cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:44:6d:49:8e:4e:6f:4b:31:35:ec:32:8d:
f1:05:32:d8:55:e2:98:38:ef:c4:39:18:3a:ab:7e:
1e:f3:96:b5:a4:0e:69:f9:a9:84:d5:4a:74:93:12:
9e:78:8d:14:64:a8:56:16:b1:8d:52:e6:bf:4d:31:
2a:1f:f1:02:9d:ab:35:1f:35:4f:4e:d3:41:65:cc:
65:c9:6a:9b:0f:0d:34:9c:2c:14:c1:51:cb:30:11:
95:e6:df:68:95:e8:1f:de:4b:18:32:c7:74:d3:4c:
96:f3:8f:1e:19:72:25:2c:7d:b6:a7:98:fb:47:70:
47:0c:75:79:86:da:35:00:09:f1:2b:f0:6c:b7:92:
9e:56:fe:c6:bb:8c:9d:79:fc:4c:ea:74:56:77:c7:
94:e9:6a:27:d6:62:43:21:b9:82:77:f1:f9:64:de:
1d:9d:f1:89:f6:e5:1f:7a:40:a3:0e:be:46:e4:9f:
f4:10:07:e6:cb:a9:c2:0d:4b:8b:df:47:d7:a9:75:
40:b8:15:ac:5d:56:fd:1b:e6:dc:60:27:9d:13:c4:
45:ac:98:3a:f5:a0:b4:a8:fd:ba:42:07:e7:66:32:
0c:55:88:32:58:ee:85:8d:d5:18:cc:fd:72:fa:48:
73:ac:6a:7e:cb:20:8a:9c:80:a4:a2:41:df:c8:6f:
75:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:96:B5:10:63:03:0A:B8:E4:9F:E7:88:A1:44:A1:4A:61:9A:0C:BA
X509v3 Authority Key Identifier:
keyid:45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f3:a9:62:6a:22:34:c6:14:61:1d:4e:72:3d:73:9d:b0:85:
7c:ad:7e:13:bc:04:b7:bf:9d:1e:cf:a7:dc:2d:45:ad:8f:ea:
45:5b:53:18:f7:68:6b:6a:62:38:ef:7d:40:7f:fd:4f:e5:ce:
90:44:3c:ba:81:74:cc:49:df:2a:65:84:aa:30:5a:6f:1b:6e:
90:3e:2e:b7:79:a0:2f:03:14:22:98:cc:21:d5:4f:41:fd:b1:
7f:6c:c5:50:28:48:77:71:f8:e5:4d:a9:a6:e4:54:ac:7e:89:
b8:bb:20:c3:a1:67:80:fa:4b:fc:a9:99:99:40:f1:47:3b:8b:
a8:5b:f0:83:3b:d5:ee:7f:a6:66:fc:94:8c:b7:82:7e:2a:5f:
ee:7e:7c:28:ce:b7:12:d0:99:a9:3f:68:ed:a0:4d:d6:ba:b4:
65:22:10:b9:a7:a0:f2:51:c0:af:9c:90:27:9a:4e:0f:f3:f9:
aa:29:24:6b:c1:2f:49:e0:58:67:9e:ac:ea:ba:68:36:82:e6:
73:77:3c:a4:4d:40:6a:f8:52:e0:96:e6:61:e7:68:d8:c4:b5:
d7:6d:45:78:e0:0e:6c:73:6a:4d:3c:b1:5b:63:dc:43:36:03:
fe:96:04:27:34:4d:ef:4b:d0:fa:36:11:33:ff:d2:b0:8d:a1:
2d:91:23:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:43 2025 by rpki-client