Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
File: rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json)
Hash identifier: wy9wts2LH+C9dfikrjAW5yeTk0+uZt1+YzfmNRtpKzM=
Subject key identifier: 1A:52:50:64:D2:9B:E5:E2:C0:08:5A:D9:8A:DC:05:A6:95:3E:FA:14
Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
Certificate issuer: /CN=adb365acf6f918499707dda13f033e2cd6110308
Certificate serial: 019A52D27909A72FAA8C824A4BFAD8766FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 07:01:56 +0000
Manifest this update: Wed 05 Nov 2025 07:01:56 +0000
Manifest next update: Thu 06 Nov 2025 07:01:56 +0000
Files and hashes: 1: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: 0Yhgp7iP87AHfsxHGn3D76m9tyhg4HwhPpvhsZBl0Dg=)
2: zexQv7MMnSMTcRcSk7PaXdu5bh4.roa (hash: VAN/TauThH6QEZkrRALg6rnqCv24/be16q83SWwAfVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:79:09:a7:2f:aa:8c:82:4a:4b:fa:d8:76:6f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308
Validity
Not Before: Nov 5 07:01:56 2025 GMT
Not After : Nov 6 07:01:56 2025 GMT
Subject: CN=1a525064d29be5e2c0085ad98adc05a6953efa14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cd:79:14:6d:c2:38:ce:48:4f:86:ff:17:bf:
c6:a3:ac:ac:5a:f0:f9:50:c0:2a:ef:2e:c8:45:86:
4d:42:b3:25:99:e7:5e:f0:27:31:a1:cc:ed:0c:d1:
6e:3d:80:b6:02:bb:67:37:a6:cd:ef:16:e9:70:60:
21:32:c0:52:92:09:ee:f0:9f:58:8e:37:fe:af:f2:
14:17:01:49:00:7d:09:e7:93:b6:9e:02:a9:e9:99:
81:4f:c6:b1:10:79:60:2b:e3:70:e2:56:9c:32:d5:
c3:fb:21:32:4e:43:03:d8:28:f1:dc:5e:4a:aa:11:
b9:47:16:11:56:cc:d3:fb:05:a7:3a:87:91:bc:0f:
bc:7e:97:ac:a1:00:5f:8d:39:99:62:46:bb:18:d0:
3a:d9:43:e2:2e:93:a0:9b:90:b8:1c:9d:85:01:b9:
4c:6a:e1:34:4a:0e:41:6f:79:06:f5:29:5c:20:3b:
68:af:fb:f8:3b:e6:10:06:16:40:ef:22:70:69:b2:
21:4c:af:96:04:6b:49:00:46:d6:d2:5d:f8:48:a4:
a2:28:a7:e7:dc:28:86:46:d0:dc:d6:29:cf:07:68:
d4:8a:20:af:87:a6:6f:8e:fc:d9:fb:91:80:8e:a3:
ae:b2:12:d1:1b:d0:78:07:70:0d:4f:64:af:7f:d2:
03:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:52:50:64:D2:9B:E5:E2:C0:08:5A:D9:8A:DC:05:A6:95:3E:FA:14
X509v3 Authority Key Identifier:
keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:07:b0:69:01:1d:ef:65:d1:b2:cf:fa:d9:6b:92:9f:93:15:
1a:6b:84:bb:05:f3:65:21:fc:ff:54:ee:2f:d6:7c:a3:ef:c0:
dc:c1:26:e1:1b:32:e2:7b:a9:3b:9a:4e:68:4c:eb:7a:93:3e:
5a:9f:da:12:64:f9:e5:16:15:81:56:8d:b7:3d:06:53:ea:0b:
8b:66:37:4e:00:45:be:36:4e:83:3e:8f:2d:fb:a9:2d:3a:b6:
4c:e8:9b:c6:30:d0:3a:0f:b1:07:11:51:17:19:c0:41:fe:a7:
f7:8c:45:9c:8f:7e:05:24:6d:15:6d:57:ca:7c:6b:99:42:1e:
80:d8:59:30:2d:55:6f:5e:0a:e6:24:10:61:53:50:49:96:c8:
4d:4c:fa:74:3b:b3:63:67:8d:67:97:7a:0c:31:d7:42:b9:81:
82:50:7b:1e:68:45:45:43:96:bc:80:77:5d:56:24:e7:89:3e:
44:27:f1:ea:d6:86:d2:5b:ef:14:16:d4:7b:a4:5c:d3:52:71:
17:51:f4:67:9b:3d:10:e5:31:41:35:f5:48:7c:86:c1:3c:36:
33:d5:da:92:b5:36:11:27:9a:f3:a3:ed:87:e5:09:8c:1d:83:
75:ef:8e:0a:24:7d:54:24:8e:63:d0:f3:e0:cc:3e:65:5c:8d:
f9:7b:4c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:29:56 2025 by rpki-client