Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
File: RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft (raw, json)
Hash identifier: JO1tcq2pVjouGwuAM5F1K0WqhQ9dWODPhZjuVMYMv9c=
Subject key identifier: 21:A1:A0:87:27:8A:DD:D9:B7:FC:C9:61:4C:DC:71:CA:D8:AD:4E:85
Authority key identifier: 44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
Certificate issuer: /CN=4410d28a9274f9df1065b7f62f8b8997739c047d
Certificate serial: 01987F0A2F3809506742F78A3626DF85D3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
Manifest number: 038C
Signing time: Wed 06 Aug 2025 11:00:30 +0000
Manifest this update: Wed 06 Aug 2025 11:00:30 +0000
Manifest next update: Thu 07 Aug 2025 11:00:30 +0000
Files and hashes: 1: RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl (hash: WvEkzwWZQOsN9A+nVKV5MzXZTRBgvRRAg5MxB4UJWQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:2f:38:09:50:67:42:f7:8a:36:26:df:85:d3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4410d28a9274f9df1065b7f62f8b8997739c047d
Validity
Not Before: Aug 6 11:00:30 2025 GMT
Not After : Aug 7 11:00:30 2025 GMT
Subject: CN=21a1a087278addd9b7fcc9614cdc71cad8ad4e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:88:19:04:a9:78:e7:fd:9d:7d:86:85:12:5e:
18:b7:fa:5a:5a:8f:34:fe:45:50:cf:0b:bd:a8:a4:
5e:0d:93:9d:ed:93:29:69:e4:1d:19:84:6d:76:4e:
ad:80:d7:1d:86:77:97:70:c4:5a:09:6b:a3:3c:b2:
d6:6c:c8:1f:75:d0:c3:d6:53:65:eb:55:b2:06:fa:
d5:92:41:7f:5d:42:ff:1b:db:0a:96:0f:2e:69:23:
34:33:48:5b:c1:65:35:51:e7:22:44:03:78:5c:e6:
31:ff:2d:39:b8:56:86:2b:1a:be:b8:b3:fb:c3:39:
50:a2:32:26:d1:64:6a:2b:b4:a4:d4:09:eb:47:00:
1c:e0:03:5f:c6:b0:95:68:c6:6b:6b:5d:e7:45:40:
20:ed:a0:8b:b9:7c:41:e1:bc:82:2a:0a:1a:5c:eb:
4b:5a:9e:c5:f5:fa:8b:c9:18:89:a6:4c:18:8c:1e:
17:5b:ec:e8:39:bd:1d:7a:ce:00:b9:2b:b4:d9:ff:
40:08:be:08:fa:5d:7e:6e:6d:7e:c9:64:70:c8:56:
06:1b:0c:7d:30:fa:ef:8d:18:bc:ed:0a:26:76:3b:
d9:86:d9:11:48:a8:f7:fe:44:6a:d8:71:0f:40:87:
01:f3:7b:6c:da:97:e4:ef:f5:3e:a9:6d:dd:e8:c0:
d9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A1:A0:87:27:8A:DD:D9:B7:FC:C9:61:4C:DC:71:CA:D8:AD:4E:85
X509v3 Authority Key Identifier:
keyid:44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1e:3c:a3:80:78:5f:10:db:39:a8:af:94:05:82:2f:a8:a1:
6c:01:1f:84:24:4c:1f:e8:cf:80:65:1f:c6:8d:cf:72:ef:de:
6a:68:41:f5:df:5a:cf:00:40:9e:b5:3e:8b:86:6f:75:01:e1:
ae:55:f2:05:13:4b:cd:be:c3:ac:ee:1a:05:9f:c4:96:0d:0d:
28:aa:9c:ed:70:5f:01:c6:ba:ec:59:72:7a:82:26:a9:6a:54:
2b:54:26:5b:97:d1:55:74:54:8c:6d:07:68:c4:db:5d:76:5b:
0a:10:96:db:0c:0b:3f:4b:1e:6d:29:90:46:fc:ae:58:2f:d9:
d5:b3:50:ab:ca:f6:e4:bf:1c:e2:87:d1:8a:9a:7a:4c:db:77:
05:44:a5:c8:74:e3:c0:fe:72:18:50:47:b3:f1:16:d7:77:56:
2a:8e:9f:e9:32:2e:e6:6a:20:54:9a:36:92:e9:91:af:1d:9d:
41:33:9f:7b:58:c8:a2:69:28:73:81:25:d5:c8:4c:20:f7:35:
e2:f0:4a:84:81:33:a8:13:ad:7b:50:15:da:59:7d:19:c1:7f:
9d:df:88:99:cc:a0:ba:0f:5c:5e:64:6f:56:09:b6:e0:04:4a:
5a:d5:d6:7e:c2:e7:ff:25:a4:89:0a:69:54:8a:60:60:8a:c3:
07:ae:a5:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/Ci84CVBnQveKNibfhdPhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MTBkMjhhOTI3NGY5ZGYxMDY1YjdmNjJmOGI4OTk3NzM5
YzA0N2QwHhcNMjUwODA2MTEwMDMwWhcNMjUwODA3MTEwMDMwWjAzMTEwLwYDVQQD
EygyMWExYTA4NzI3OGFkZGQ5YjdmY2M5NjE0Y2RjNzFjYWQ4YWQ0ZTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIgZBKl45/2dfYaFEl4Yt/paWo80
/kVQzwu9qKReDZOd7ZMpaeQdGYRtdk6tgNcdhneXcMRaCWujPLLWbMgfddDD1lNl
61WyBvrVkkF/XUL/G9sKlg8uaSM0M0hbwWU1UeciRAN4XOYx/y05uFaGKxq+uLP7
wzlQojIm0WRqK7Sk1AnrRwAc4ANfxrCVaMZra13nRUAg7aCLuXxB4byCKgoaXOtL
Wp7F9fqLyRiJpkwYjB4XW+zoOb0des4AuSu02f9ACL4I+l1+bm1+yWRwyFYGGwx9
MPrvjRi87QomdjvZhtkRSKj3/kRq2HEPQIcB83ts2pfk7/U+qW3d6MDZFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGhoIcnit3Zt/zJYUzcccrYrU6FMB8GA1UdIwQY
MBaAFEQQ0oqSdPnfEGW39i+LiZdznAR9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkJEU2lwSjAtZDhRWmJmMkw0dUpsM09jQkgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8zM2FhMmYtYzQwOS00YzcwLWFlMGUt
OTA3ODM4YjU3MjVmLzEvUkJEU2lwSjAtZDhRWmJmMkw0dUpsM09jQkgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8zM2FhMmYtYzQwOS00YzcwLWFlMGUtOTA3ODM4YjU3MjVm
LzEvUkJEU2lwSjAtZDhRWmJmMkw0dUpsM09jQkgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGh48o4B4
XxDbOaivlAWCL6ihbAEfhCRMH+jPgGUfxo3Pcu/eamhB9d9azwBAnrU+i4ZvdQHh
rlXyBRNLzb7DrO4aBZ/Elg0NKKqc7XBfAca67FlyeoImqWpUK1QmW5fRVXRUjG0H
aMTbXXZbChCW2wwLP0sebSmQRvyuWC/Z1bNQq8r25L8c4ofRipp6TNt3BUSlyHTj
wP5yGFBHs/EW13dWKo6f6TIu5mogVJo2kumRrx2dQTOfe1jIomkoc4El1chMIPc1
4vBKhIEzqBOte1AV2ll9GcF/nd+Imcygug9cXmRvVgm24ARKWtXWfsLn/yWkiQpp
VIpgYIrDB66lSQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:17 2025 by rpki-client