
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
File: RBme-tyIgD3BoGVhD2R8_c4w9UE.mft (raw, json)
Hash identifier: ZdLPMhWnCtHQzCIQyubhVqRqpsx2NDSW3lcI4Lduvyk=
Subject key identifier: A5:9B:A4:6F:14:AB:9D:4C:6E:D4:DB:61:C3:03:39:93:BB:3E:6C:C5
Authority key identifier: 44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41
Certificate issuer: /CN=44199efadc88803dc1a065610f647cfdce30f541
Certificate serial: 019A5150AED9450E9D652C7856CC97035EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
Manifest number: 170B
Signing time: Wed 05 Nov 2025 00:00:33 +0000
Manifest this update: Wed 05 Nov 2025 00:00:33 +0000
Manifest next update: Thu 06 Nov 2025 00:00:33 +0000
Files and hashes: 1: RBme-tyIgD3BoGVhD2R8_c4w9UE.crl (hash: xdcpZXi0i+nAV7agtjtpgEz7x4TAWnBYkbHw44XIktI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:ae:d9:45:0e:9d:65:2c:78:56:cc:97:03:5e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44199efadc88803dc1a065610f647cfdce30f541
Validity
Not Before: Nov 5 00:00:33 2025 GMT
Not After : Nov 6 00:00:33 2025 GMT
Subject: CN=a59ba46f14ab9d4c6ed4db61c3033993bb3e6cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f7:77:11:69:fc:cf:2f:f3:f2:55:c1:a1:88:
f3:15:75:3d:e7:d2:a3:a1:d4:28:1c:cd:5b:85:9c:
60:16:14:9a:b4:8f:ad:81:5e:72:3d:5e:81:c0:75:
6a:da:ba:d0:11:a1:07:4e:16:d9:f4:ed:87:94:8a:
aa:7b:9f:3f:4c:ca:2b:2e:2f:64:de:79:4e:8f:4d:
7e:4a:58:0c:4f:43:71:a4:75:a9:86:cd:20:9d:6b:
8a:c9:ec:0a:94:6f:ce:99:a0:26:79:ef:5d:9f:55:
91:71:b5:f0:d8:a0:2b:b8:94:e6:d0:62:3c:5c:d5:
57:97:b4:1d:6d:26:87:d2:07:b2:b5:3b:13:b2:46:
b3:49:83:07:17:90:0d:fb:30:e8:42:5c:8c:ef:6c:
00:c3:3b:e2:d3:16:e7:9e:70:39:2a:85:0d:bf:ff:
a9:66:bf:7d:84:7e:49:c5:8c:9a:a0:42:08:4f:26:
d1:2b:70:d2:06:1c:fa:43:7d:76:69:26:02:63:8f:
2c:90:29:c0:f1:ff:97:37:cb:1f:da:4c:6d:95:20:
82:1b:a3:43:33:09:d8:94:73:8f:55:f4:ac:42:58:
eb:59:ca:2c:9c:78:77:74:8a:08:58:0b:bf:af:5b:
a3:17:92:c9:d7:d5:71:21:86:46:74:84:7c:61:18:
d7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9B:A4:6F:14:AB:9D:4C:6E:D4:DB:61:C3:03:39:93:BB:3E:6C:C5
X509v3 Authority Key Identifier:
keyid:44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:29:fe:28:86:24:93:3c:68:50:eb:aa:73:a1:64:ce:00:cf:
0b:b7:43:54:55:23:52:1b:1a:51:fe:a7:0e:c6:25:c3:67:18:
ba:bf:24:55:c5:96:eb:28:5f:34:cb:2e:84:ad:23:e1:89:b7:
39:05:d5:70:37:11:36:ba:cc:e9:b7:fe:95:7c:07:8a:73:78:
ab:7a:7a:85:32:fb:21:d1:c1:f7:63:25:c2:94:fb:41:27:30:
b6:7c:35:16:9e:bf:ec:ad:18:a6:8c:f8:ff:d1:be:f0:50:0e:
87:9d:1c:4a:fa:05:aa:85:f3:e9:e5:5a:dd:fa:80:ff:31:db:
00:5e:0a:51:da:7b:02:e4:5e:ee:63:5d:86:e2:0c:da:8a:e7:
94:5e:d9:08:d6:cd:57:88:9b:9c:eb:c9:62:30:05:6d:5e:d2:
44:2e:27:a4:e4:0d:b0:a1:fe:4f:dc:f5:f7:c9:8b:fd:e0:84:
de:5b:5f:17:e1:e6:27:c3:6b:b7:c2:3a:c7:b6:d3:a7:d2:62:
32:b9:19:b3:c3:61:f5:9e:3d:28:70:e6:10:36:e4:70:be:aa:
f5:e4:c2:2c:e2:4a:1b:8d:da:11:1f:b3:cc:bd:92:50:33:33:
65:38:15:da:f7:5b:e3:0d:2f:f5:60:34:ac:40:e2:56:ac:a9:
e4:02:b9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:01:01 2025 by rpki-client