Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
File: RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft (raw, json)
Hash identifier: g4sy4B6VohNoNJBjvODTqlCqvUmGj7S/n7fIUFo9isE=
Subject key identifier: 98:C7:C2:28:49:42:71:6E:8F:EC:45:49:AF:47:C0:EF:63:9B:CD:EB
Authority key identifier: 44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71
Certificate issuer: /CN=4419e02f046e1bfb5927fe731ff725e469599171
Certificate serial: 019A4EF41FDE16FD819D831ABF9F9392A762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
Manifest number: 1205
Signing time: Tue 04 Nov 2025 13:00:12 +0000
Manifest this update: Tue 04 Nov 2025 13:00:12 +0000
Manifest next update: Wed 05 Nov 2025 13:00:12 +0000
Files and hashes: 1: RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl (hash: DplzknmfpVgG3L6w84/uqQOsbayR/6E1Effpm8YKuV8=)
2: j6btVEkYHnL9gWowTqe50VXUUIk.roa (hash: eFOZX5z3pNhRrEXFNmogu9OUe+ItbR9kd5gawg90+UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:1f:de:16:fd:81:9d:83:1a:bf:9f:93:92:a7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4419e02f046e1bfb5927fe731ff725e469599171
Validity
Not Before: Nov 4 13:00:12 2025 GMT
Not After : Nov 5 13:00:12 2025 GMT
Subject: CN=98c7c2284942716e8fec4549af47c0ef639bcdeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0a:04:54:ba:6b:af:29:09:44:51:c7:fb:24:
32:d7:e0:0a:2a:67:0c:eb:9f:c2:a8:d3:70:0f:08:
80:9d:50:69:00:5a:08:1c:55:b7:a6:d0:7d:27:7a:
41:4f:06:d2:49:cb:aa:14:f6:ba:61:1d:a3:6b:d5:
b5:65:30:b6:d5:25:b7:2a:b5:7d:90:a5:9b:39:78:
82:c0:f9:f3:1a:a7:54:d0:2b:2a:b8:7d:18:bc:dc:
65:29:87:ad:3e:79:a0:7c:ab:84:a1:d0:65:28:fd:
e3:c5:55:84:cf:af:7f:56:f3:81:b5:98:e6:c6:b2:
cd:6a:84:1b:87:c4:39:9a:13:d7:43:74:fb:b8:73:
ca:ec:80:fb:a8:87:33:de:a7:b6:27:12:a9:a9:49:
ee:66:6c:5f:f3:42:35:fd:18:89:ce:7f:dd:ce:14:
2e:5d:ec:d3:65:99:c7:4d:56:00:90:b6:14:39:05:
a6:5a:d9:12:02:1c:7c:65:66:6b:5e:e3:ee:f7:bf:
d2:6f:83:22:76:c8:27:ca:df:80:0c:43:d2:11:59:
7a:22:45:3b:6d:25:3e:59:24:2c:c9:cb:d3:5e:84:
0a:62:e4:b8:52:7a:1b:e6:94:e5:15:f5:fc:a3:54:
19:64:45:c4:40:e8:94:91:f4:df:09:27:95:0f:fe:
97:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C7:C2:28:49:42:71:6E:8F:EC:45:49:AF:47:C0:EF:63:9B:CD:EB
X509v3 Authority Key Identifier:
keyid:44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f6:28:2e:17:d1:83:84:f7:04:51:c5:7e:d0:df:4e:12:31:
55:db:bf:c2:17:a3:9e:d1:cf:94:38:95:cc:f2:58:14:22:45:
2a:35:3b:c3:c2:86:58:4d:3c:95:1d:2a:9b:9e:4e:ab:0b:28:
52:eb:84:55:fa:12:6b:49:2b:db:42:7a:ca:fc:45:eb:a1:8a:
66:e8:c3:a8:58:86:70:6b:3a:1d:02:1a:e9:bd:12:99:e9:48:
2f:7d:91:d3:6c:9c:f0:a3:cf:e0:38:56:a1:00:79:e5:f5:62:
51:79:c2:dd:9b:99:67:ec:3a:e5:7e:5c:32:81:09:ff:58:8e:
e5:3f:ab:ca:3f:38:c6:e3:37:fc:6e:c5:22:bc:31:e8:75:ec:
ac:58:ef:49:66:36:f1:7d:04:96:81:1d:63:d9:27:45:13:d9:
bc:84:d3:bf:c2:53:ff:1e:23:ab:b9:0d:87:90:55:2d:2a:a9:
53:54:0f:b7:b9:62:60:40:c3:75:ab:2c:7b:f7:e0:3b:15:8b:
a3:2e:09:95:bf:12:70:d7:01:73:1a:40:d9:e0:58:f3:eb:d0:
03:33:25:39:44:58:bb:e5:72:71:e2:c5:bc:72:3a:6c:e2:5f:
34:dc:bd:5e:5a:d0:53:66:0f:b9:85:fc:14:16:75:4f:bf:9a:
8d:fb:a9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:28:22 2025 by rpki-client