Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
File: rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json)
Hash identifier: IzQoZLeDwoRHI5mVpMGsmIeWPorj2UtnJRsgNJS74S0=
Subject key identifier: 72:8D:70:8F:7B:55:F3:7E:7F:06:F6:C1:4D:CB:1D:AD:BD:29:5D:0B
Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
Certificate issuer: /CN=adb365acf6f918499707dda13f033e2cd6110308
Certificate serial: 019A54BF5521EA427501D3BD1346E8D2E8D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 16:00:16 +0000
Manifest this update: Wed 05 Nov 2025 16:00:16 +0000
Manifest next update: Thu 06 Nov 2025 16:00:16 +0000
Files and hashes: 1: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: 8M/kR1D0g0Q/+kNgj++oJvuEvn1qAk5aVmt8BWT6zhA=)
2: zexQv7MMnSMTcRcSk7PaXdu5bh4.roa (hash: VAN/TauThH6QEZkrRALg6rnqCv24/be16q83SWwAfVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:55:21:ea:42:75:01:d3:bd:13:46:e8:d2:e8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308
Validity
Not Before: Nov 5 16:00:16 2025 GMT
Not After : Nov 6 16:00:16 2025 GMT
Subject: CN=728d708f7b55f37e7f06f6c14dcb1dadbd295d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:49:14:1e:62:15:0c:4d:6b:31:f3:ec:12:cc:
eb:52:5e:11:ef:a9:ee:3f:76:4d:31:0a:f8:cd:67:
74:8d:17:b7:7f:a1:fc:a1:5d:e1:2b:0c:43:bd:33:
c3:e1:a8:54:8f:1a:99:c7:e5:5a:c9:64:c9:0d:39:
f2:17:c3:f5:b8:83:d0:75:09:e8:2f:9a:87:91:5e:
0e:be:2a:79:3c:f8:e8:32:51:3d:ed:89:72:2d:a8:
df:20:c1:53:d7:1a:e7:b5:89:67:c2:09:ce:f8:92:
8f:2c:00:dd:17:fe:68:11:f8:4f:9b:0b:3b:dc:cf:
d7:82:d4:50:0a:86:63:54:8b:e6:06:85:7a:50:07:
77:17:a7:c5:7f:7c:c8:a3:da:55:0d:a0:0d:86:14:
86:bf:8a:53:f8:64:b1:c1:f7:71:e3:66:75:c8:80:
87:2c:bf:5d:9b:5f:fe:0a:b0:16:32:4d:ec:78:d0:
63:6d:ca:c9:0d:7e:b0:c1:2c:ba:b7:b9:03:c6:0b:
f1:aa:2d:ea:94:15:33:21:96:4d:bb:cf:59:de:8a:
1b:af:c2:d7:05:9d:02:31:29:2b:f5:2a:62:48:94:
51:8b:c3:b9:22:06:b4:d6:a8:e5:d5:fb:d5:ec:7c:
89:61:eb:f2:e6:3d:c1:46:99:5c:ca:1e:eb:f5:5f:
30:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8D:70:8F:7B:55:F3:7E:7F:06:F6:C1:4D:CB:1D:AD:BD:29:5D:0B
X509v3 Authority Key Identifier:
keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e1:de:e8:91:69:d7:f7:54:ea:a8:e1:14:de:45:e1:5a:80:
a4:2a:b4:a2:b5:9e:a7:07:7a:58:a3:74:64:9d:a7:c0:0d:19:
1e:ca:19:7b:19:b0:f2:af:c7:5a:79:91:ff:da:c6:0e:e9:6d:
49:2a:6f:18:fa:9c:05:39:b9:22:a4:bc:c8:4e:9d:bd:de:48:
48:f7:51:07:b8:e7:55:b9:9e:85:2f:a2:a0:37:b9:2d:f1:ed:
df:5b:95:eb:d8:c5:ef:db:fc:b8:d2:a4:52:7a:98:e4:8f:8a:
5f:f4:d7:39:af:e7:c8:e8:b2:0a:4d:38:99:75:66:da:7d:ac:
e3:ca:f8:aa:73:64:62:c3:a6:d8:1f:37:1a:12:fb:89:8f:5f:
5a:2f:72:7c:ef:e8:38:8d:6e:7e:38:c6:5b:8c:e4:10:91:b2:
bc:e6:4f:5d:6c:b5:75:cd:bf:86:57:73:ac:24:c9:67:79:31:
54:a4:bb:61:78:80:b7:5b:55:6c:04:71:d7:8e:f5:30:e6:c4:
84:5b:f4:10:db:f7:7f:39:71:f7:3e:8e:6c:3f:a0:94:d8:d8:
3f:31:3a:91:d2:6a:4d:79:67:38:63:23:53:67:0e:07:85:17:
e0:05:21:6e:58:25:dd:a4:db:58:13:25:f8:c6:d9:58:10:7c:
cd:9c:38:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:15:48 2025 by rpki-client