Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
File: rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft (raw, json)
Hash identifier: HhYiBzu/TB+gLrmz+g0DU1zqfXRqGUk1KwRKZtPziAY=
Subject key identifier: 1A:A3:84:DE:8B:09:62:E1:99:75:B0:A1:08:D4:D2:B4:F0:EA:57:AB
Authority key identifier: AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
Certificate issuer: /CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Certificate serial: 01987374084B4B30A52CBCBA6BC6E73C8FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
Manifest number: 0D3F
Signing time: Mon 04 Aug 2025 05:00:40 +0000
Manifest this update: Mon 04 Aug 2025 05:00:40 +0000
Manifest next update: Tue 05 Aug 2025 05:00:40 +0000
Files and hashes: 1: CDUJExHuCJVPUownDG0KoC95j6g.roa (hash: ec1LWrgiCmmzqFwlIQnZ7qEB99QoLDe3mTnBITPZ9Fo=)
2: rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl (hash: yiKHbrLFMvgIZUy53SdfRsIgfSfFhdwtfMcF5+QpWuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:08:4b:4b:30:a5:2c:bc:ba:6b:c6:e7:3c:8f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbc5f7721a4accb9635de175bbc6d31e17c9a8d
Validity
Not Before: Aug 4 05:00:40 2025 GMT
Not After : Aug 5 05:00:40 2025 GMT
Subject: CN=1aa384de8b0962e19975b0a108d4d2b4f0ea57ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:01:07:cb:b8:75:60:9b:b3:e6:68:77:c7:
1d:16:b5:3d:c0:11:03:9f:ee:4d:9b:73:c0:49:d6:
78:35:25:45:da:b2:4c:c1:78:2a:27:d7:8d:84:dd:
bc:b3:0f:58:fa:a9:d6:ff:62:d3:c9:42:4b:ee:86:
04:7e:48:ba:4a:0b:f7:21:00:64:ce:e2:fb:dd:23:
2c:bd:fd:c8:4a:cf:21:d2:2f:f3:fc:6e:02:20:ce:
04:95:e5:b6:de:73:0c:e7:30:45:ec:cf:64:68:34:
09:ec:b3:0a:cd:7d:f3:bf:7a:5a:28:e8:eb:85:ac:
e5:1a:c5:f1:95:7b:92:1a:9d:ce:c9:0b:d6:80:5e:
52:4b:63:f7:4e:8c:28:dc:1b:bf:0d:23:77:b1:e5:
c7:d5:44:8b:00:58:cc:36:0c:97:5c:72:34:e1:18:
e9:ad:ab:9e:d7:0c:ca:30:0b:9c:67:22:1e:a1:41:
5d:95:9f:98:28:46:44:3b:f0:59:04:12:50:cc:8d:
c4:1f:87:ec:a7:78:c5:00:37:d1:2f:05:56:27:3d:
c0:11:99:ed:bc:ea:01:5c:6f:23:51:d3:72:1f:dd:
e0:74:60:3b:32:bc:32:d5:95:4f:85:84:e0:ed:de:
f0:64:8f:a3:29:04:2b:c2:aa:5d:66:82:bb:61:d0:
84:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A3:84:DE:8B:09:62:E1:99:75:B0:A1:08:D4:D2:B4:F0:EA:57:AB
X509v3 Authority Key Identifier:
keyid:AD:BC:5F:77:21:A4:AC:CB:96:35:DE:17:5B:BC:6D:31:E1:7C:9A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbxfdyGkrMuWNd4XW7xtMeF8mo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d021f9-a001-452b-a5ee-abbf1f078ad3/1/rbxfdyGkrMuWNd4XW7xtMeF8mo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:63:35:bb:c5:af:52:c2:54:ca:5f:a1:ff:54:47:7d:13:c0:
46:a2:d4:0d:db:89:2b:c6:30:f5:c9:1d:35:7a:ab:bd:95:0c:
ed:ed:2f:3a:51:b3:d7:70:dc:11:1f:e7:78:5d:d8:e0:87:80:
ce:48:85:2d:15:e7:45:c5:00:89:03:73:ab:67:ec:4b:fa:aa:
06:b5:26:d3:59:af:94:c2:92:8d:a1:c8:de:49:5e:2b:c5:90:
7a:23:aa:f6:75:cb:31:66:27:5d:89:9a:02:21:6f:ef:60:85:
05:fe:a5:80:85:1c:8f:e3:6d:94:b7:6e:18:64:79:5f:fc:b2:
72:46:0b:92:0b:b1:a9:e4:0a:4a:5d:24:69:a5:b8:22:12:0a:
46:22:ea:07:5f:78:43:27:84:ac:a8:13:f6:3d:7a:4d:69:a0:
cc:9b:4e:11:04:a7:da:6a:18:05:d9:d3:fd:d8:c5:87:f3:69:
65:e6:eb:22:4b:0d:5e:1b:30:2a:8c:08:d6:fd:fd:dd:85:48:
82:1a:06:d0:f5:08:21:60:c0:54:45:3d:ac:6a:19:8a:01:8c:
f3:76:07:9f:d1:fc:e6:2d:2d:cb:5b:12:28:7c:52:87:97:c8:
29:25:5f:1d:05:13:b2:ca:9d:ef:60:6b:37:5e:9d:a7:18:63:
66:83:a8:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdAhLSzClLLy6a8bnPI/CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYmM1Zjc3MjFhNGFjY2I5NjM1ZGUxNzViYmM2ZDMxZTE3
YzlhOGQwHhcNMjUwODA0MDUwMDQwWhcNMjUwODA1MDUwMDQwWjAzMTEwLwYDVQQD
EygxYWEzODRkZThiMDk2MmUxOTk3NWIwYTEwOGQ0ZDJiNGYwZWE1N2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4oBB8u4dWCbs+Zod8cdFrU9wBED
n+5Nm3PASdZ4NSVF2rJMwXgqJ9eNhN28sw9Y+qnW/2LTyUJL7oYEfki6Sgv3IQBk
zuL73SMsvf3ISs8h0i/z/G4CIM4EleW23nMM5zBF7M9kaDQJ7LMKzX3zv3paKOjr
hazlGsXxlXuSGp3OyQvWgF5SS2P3Towo3Bu/DSN3seXH1USLAFjMNgyXXHI04Rjp
raue1wzKMAucZyIeoUFdlZ+YKEZEO/BZBBJQzI3EH4fsp3jFADfRLwVWJz3AEZnt
vOoBXG8jUdNyH93gdGA7Mrwy1ZVPhYTg7d7wZI+jKQQrwqpdZoK7YdCEBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqjhN6LCWLhmXWwoQjU0rTw6lerMB8GA1UdIwQY
MBaAFK28X3chpKzLljXeF1u8bTHhfJqNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9kMDIxZjktYTAwMS00NTJiLWE1ZWUt
YWJiZjFmMDc4YWQzLzEvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9kMDIxZjktYTAwMS00NTJiLWE1ZWUtYWJiZjFmMDc4YWQz
LzEvcmJ4ZmR5R2tyTXVXTmQ0WFc3eHRNZUY4bW8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWM1u8Wv
UsJUyl+h/1RHfRPARqLUDduJK8Yw9ckdNXqrvZUM7e0vOlGz13DcER/neF3Y4IeA
zkiFLRXnRcUAiQNzq2fsS/qqBrUm01mvlMKSjaHI3kleK8WQeiOq9nXLMWYnXYma
AiFv72CFBf6lgIUcj+NtlLduGGR5X/yyckYLkguxqeQKSl0kaaW4IhIKRiLqB194
QyeErKgT9j16TWmgzJtOEQSn2moYBdnT/djFh/NpZebrIksNXhswKowI1v393YVI
ghoG0PUIIWDAVEU9rGoZigGM83YHn9H85i0ty1sSKHxSh5fIKSVfHQUTssqd72Br
N16dpxhjZoOo4Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 13:58:10 2025 by rpki-client