Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
File: rbNlrPb5GEmXB92hPwM-LNYRAwg.mft (raw, json)
Hash identifier: 4YJKRW/gfp9xloZ5j5p7YcLlN8svWeQu04ZOslBzWD4=
Subject key identifier: 19:F0:6F:4C:2A:5B:33:65:A9:39:B1:82:32:20:C2:D2:C1:58:A3:75
Authority key identifier: AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
Certificate issuer: /CN=adb365acf6f918499707dda13f033e2cd6110308
Certificate serial: 019894B81D51101868B75AC3C36FFDC78942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
Manifest number: 162A
Signing time: Sun 10 Aug 2025 16:02:30 +0000
Manifest this update: Sun 10 Aug 2025 16:02:30 +0000
Manifest next update: Mon 11 Aug 2025 16:02:30 +0000
Files and hashes: 1: rbNlrPb5GEmXB92hPwM-LNYRAwg.crl (hash: M/u8oZPqOPK1VLa05JixJdLwFYQppv0FeOlm74d0PdU=)
2: zexQv7MMnSMTcRcSk7PaXdu5bh4.roa (hash: VAN/TauThH6QEZkrRALg6rnqCv24/be16q83SWwAfVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b8:1d:51:10:18:68:b7:5a:c3:c3:6f:fd:c7:89:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adb365acf6f918499707dda13f033e2cd6110308
Validity
Not Before: Aug 10 16:02:30 2025 GMT
Not After : Aug 11 16:02:30 2025 GMT
Subject: CN=19f06f4c2a5b3365a939b1823220c2d2c158a375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:19:a3:82:a3:a5:d5:59:b9:ef:31:cf:b0:
73:b2:38:74:0e:af:b2:b9:e6:c5:02:0b:54:9b:3e:
e7:71:b1:fe:7e:75:bb:5a:75:29:6c:a0:d6:75:f6:
bd:9f:20:69:1f:1e:36:fe:79:4f:33:71:c1:bc:9c:
85:00:93:22:90:10:16:2a:c5:bb:3a:c3:f3:73:5c:
63:4f:03:e8:e4:74:a8:99:13:7a:6f:68:02:70:20:
b4:a6:2d:39:ab:dc:e2:8b:92:aa:2f:1d:f3:e1:05:
c9:90:3a:88:2f:28:39:16:f0:7f:fe:a3:b9:dd:c1:
dc:18:a2:8b:55:42:14:5f:1c:c5:60:bb:7f:60:1f:
51:96:91:10:a9:3b:7f:47:df:a6:b2:53:1d:82:00:
40:2b:9a:e7:2e:80:66:8c:7f:f8:23:c0:3c:7e:e2:
15:ae:94:c9:fd:53:57:ad:74:50:ea:34:0e:46:bb:
9a:a8:d5:60:e4:9a:cb:4d:08:10:c2:8a:34:14:4b:
18:c1:2e:ca:c5:85:85:9d:c6:9f:29:23:16:19:76:
8f:72:40:e7:13:47:ae:d6:ca:2b:ca:e8:22:48:c0:
7e:78:08:42:49:75:f5:61:7d:5d:41:17:d4:a4:35:
33:a9:8c:df:62:7a:b8:cb:fb:ad:cc:34:3e:49:98:
14:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F0:6F:4C:2A:5B:33:65:A9:39:B1:82:32:20:C2:D2:C1:58:A3:75
X509v3 Authority Key Identifier:
keyid:AD:B3:65:AC:F6:F9:18:49:97:07:DD:A1:3F:03:3E:2C:D6:11:03:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbNlrPb5GEmXB92hPwM-LNYRAwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a68387-861a-4b93-a3fc-adadd6295822/1/rbNlrPb5GEmXB92hPwM-LNYRAwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:90:c7:e2:c2:77:7a:65:ee:69:0b:cc:b8:63:67:40:46:c1:
e9:ed:35:7c:47:e1:5f:cb:74:d6:71:72:9b:3c:ff:93:dc:a7:
f3:2a:88:53:da:05:ca:c9:8e:04:e9:91:65:eb:34:57:93:4b:
f3:14:58:d7:7b:24:9d:f0:f0:62:50:46:20:8b:28:06:95:8d:
19:49:63:33:5f:c6:10:58:f9:9f:44:7b:3e:4f:f2:13:29:88:
09:39:48:42:0b:88:0a:29:e3:24:e1:12:c4:1b:cd:db:36:3e:
7d:23:f6:e5:72:27:40:4f:df:cf:88:06:3b:68:f1:38:95:05:
e4:f2:16:ac:08:7f:33:ef:7e:79:ad:11:51:78:e4:ac:8e:9d:
a3:b5:66:28:cd:f9:b8:c1:61:7d:42:fa:51:0a:c7:e5:df:1f:
a1:1e:d8:84:6a:05:5e:72:68:43:9f:ab:c4:42:68:ce:b2:61:
27:7c:d9:8e:04:99:7e:88:97:f4:16:26:56:54:02:9a:8c:6a:
4c:15:41:c1:49:0d:73:e9:26:8f:31:70:a3:e3:82:22:18:b0:
2f:b2:58:eb:0f:d8:a8:d9:ea:ef:19:b1:c5:2f:3a:0a:3e:ba:
bf:c5:eb:2e:b4:34:6b:c2:0b:e9:8b:49:cf:5a:aa:4b:2e:b4:
5d:e4:31:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:06:00 2025 by rpki-client