Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
File: RBBkfZUukSEiD0FOiKXd1ivII3s.mft (raw, json)
Hash identifier: MBv3qQpc/JslfEPuKJS98UCNS3ZMqYfIjx/C7+dF5yM=
Subject key identifier: 40:B1:1E:C0:41:18:32:AC:85:B6:92:51:B5:A5:77:F4:B1:7C:34:28
Authority key identifier: 44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B
Certificate issuer: /CN=4410647d952e9121220f414e88a5ddd62bc8237b
Certificate serial: 0198733D3C6A3F1C7745BD6847184829435D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
Manifest number: 4A
Signing time: Mon 04 Aug 2025 04:00:49 +0000
Manifest this update: Mon 04 Aug 2025 04:00:49 +0000
Manifest next update: Tue 05 Aug 2025 04:00:49 +0000
Files and hashes: 1: RBBkfZUukSEiD0FOiKXd1ivII3s.crl (hash: nd37oBvYUKPGdLSmUwR7EnZ57Rz6rUBmj39nBUJmSoA=)
2: p12I-ru8S8FXjKziObzMY5uNEZE.roa (hash: AoXZbQHCJONRAMAiMe6YpP5PYiXNKcBqe2FpH/bOcvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:3c:6a:3f:1c:77:45:bd:68:47:18:48:29:43:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4410647d952e9121220f414e88a5ddd62bc8237b
Validity
Not Before: Aug 4 04:00:49 2025 GMT
Not After : Aug 5 04:00:49 2025 GMT
Subject: CN=40b11ec0411832ac85b69251b5a577f4b17c3428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:29:da:14:5f:d7:af:97:93:a2:3e:ca:d1:fe:
ca:c0:a5:dd:21:d4:04:4d:95:8f:e2:88:f9:83:58:
84:dd:2b:a6:2e:d0:27:4a:83:ee:0a:31:9f:66:df:
34:08:36:f6:10:07:65:81:3a:b2:d0:87:50:b6:d7:
f0:93:6d:15:97:5e:9f:23:35:3c:dd:29:ac:5c:6f:
ce:1b:21:da:88:d6:bb:6e:fa:22:a2:02:3f:3b:4e:
24:c0:aa:35:1b:24:53:29:9e:04:a7:5a:f6:ac:30:
c2:fa:bb:11:81:70:f8:81:50:3e:72:31:67:84:7c:
1a:a0:ea:d9:88:5f:00:a1:7d:fd:86:35:91:b9:5e:
98:f4:bb:20:91:2f:79:1b:d0:b2:1d:ea:7d:1c:97:
4d:12:b2:3d:33:fa:57:9e:3e:53:5d:1f:06:d7:70:
a1:69:36:12:20:d5:ae:c5:ae:f5:80:34:d5:ff:ea:
36:4e:66:93:6d:32:24:d2:74:58:01:17:dc:2f:cf:
fc:b8:bd:74:0e:22:65:92:cd:e9:28:8b:d5:cd:08:
78:25:d0:97:01:8b:7f:fd:9a:30:8f:c5:50:81:a5:
77:98:8f:45:f6:90:cf:89:88:80:49:0e:64:06:5d:
d3:c0:07:6f:b1:b1:a7:2d:5e:cc:91:03:48:48:11:
dd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B1:1E:C0:41:18:32:AC:85:B6:92:51:B5:A5:77:F4:B1:7C:34:28
X509v3 Authority Key Identifier:
keyid:44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:df:94:af:19:f0:b2:b7:c4:a9:d8:fd:9b:25:b1:f7:0a:a2:
b5:ad:8c:3f:83:4e:69:51:53:7e:93:40:43:58:a8:97:85:7c:
de:f8:65:67:85:8c:3a:23:6a:48:3a:7e:60:08:c3:50:57:41:
3b:59:62:2a:13:20:0c:66:0c:39:d7:db:80:6b:cb:05:35:56:
3c:69:e8:94:8b:8d:0b:0e:e8:4d:d1:90:06:06:05:3c:b4:a2:
a2:21:ab:45:76:14:3f:e7:ff:3b:2b:49:5b:ef:5c:f5:88:6e:
12:41:25:96:cf:09:13:4c:b6:47:86:04:e3:f1:38:c5:02:ac:
df:7e:a6:1f:d9:1c:a4:c6:db:1e:34:a5:b4:ad:f3:68:53:7e:
7e:6f:6a:3d:f5:81:cb:85:8f:f5:86:89:34:c7:36:7a:52:ab:
07:2c:bc:8f:f3:a4:95:20:36:68:fb:3e:49:e0:7e:23:f3:ce:
1e:c4:48:8e:91:48:c0:e5:9d:37:df:6a:f4:71:5b:60:58:23:
ed:b1:55:c5:d3:c4:85:a9:ae:6a:c7:71:89:79:2f:7e:0b:18:
76:6f:e8:fe:cb:d9:18:4d:ca:59:0f:ea:52:3b:64:b9:3d:f0:
60:33:78:f9:c0:85:30:51:74:19:ac:ae:e3:10:ea:65:8a:05:
28:ee:0a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:51 2025 by rpki-client