Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
File: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft (raw, json)
Hash identifier: 0DYNbmoZf+kxlaWdGFJvSSNd0j1vEmr/OvMP3IyXbMU=
Subject key identifier: 0A:4D:DC:D4:48:DD:2E:C4:20:C9:37:66:B1:C8:90:A3:D9:99:05:5B
Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
Certificate issuer: /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Certificate serial: 0197B77C38341A8FA9B8A2521C96F28B9F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:00 +0000
Manifest this update: Sat 28 Jun 2025 17:01:00 +0000
Manifest next update: Sun 29 Jun 2025 17:01:00 +0000
Files and hashes: 1: ArR_qdqqwy8JJ4d9cTJadzHk7s0.roa (hash: 3c+azDmhzkHSEBi1SBo0t88glQEIBlV01Qc6ZBYXFN8=)
2: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl (hash: WyneBueUuo6RIPrFFSgNDCDr6CWWsOdFL5219T9sThQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:38:34:1a:8f:a9:b8:a2:52:1c:96:f2:8b:9f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Validity
Not Before: Jun 28 17:01:00 2025 GMT
Not After : Jun 29 17:01:00 2025 GMT
Subject: CN=0a4ddcd448dd2ec420c93766b1c890a3d999055b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:4e:5e:82:d2:46:c1:16:9a:10:90:66:1a:6f:
cc:16:c5:96:f4:7a:19:79:49:3c:b4:54:e3:4a:76:
7c:f2:66:ed:5f:b2:05:dc:e5:3a:59:56:9b:cb:7d:
90:71:7b:f6:1b:6c:fd:f3:34:c0:23:4c:97:c5:f7:
bb:94:77:87:39:9d:b2:b2:d5:93:46:14:eb:ea:82:
6b:6a:be:e7:42:4d:39:49:63:ee:3e:33:34:34:52:
69:3e:97:4f:c4:73:f3:6a:f1:02:a3:71:3e:6c:a6:
65:ec:24:de:46:62:6b:16:77:ef:12:3c:7d:ea:f1:
74:63:e5:a2:f7:45:92:ab:5c:04:f0:fe:00:d3:49:
a4:48:3f:ab:b0:67:b6:11:b9:71:04:3a:54:dc:89:
66:fa:90:03:ef:7b:65:16:ea:46:6f:90:31:e9:72:
35:1d:25:1a:14:61:f3:cb:26:e8:aa:7e:a6:b7:53:
0f:f3:08:a5:82:03:2a:cb:11:67:b6:1f:7f:92:c1:
ed:2c:0f:b2:f7:3e:70:df:77:37:d7:aa:d0:25:df:
3b:1c:11:9e:8b:c8:5b:6c:17:b4:11:37:ef:8b:05:
49:0d:c4:5d:62:a4:b5:15:30:aa:86:f4:44:c6:a3:
33:ba:2f:d3:3d:f1:08:40:f5:58:77:cd:4e:99:7b:
e7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4D:DC:D4:48:DD:2E:C4:20:C9:37:66:B1:C8:90:A3:D9:99:05:5B
X509v3 Authority Key Identifier:
keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:08:73:e0:15:ad:71:57:69:be:98:80:0c:6e:e0:d0:c7:b5:
31:b2:20:78:04:c9:4f:7c:aa:6f:ff:c0:01:f9:81:71:2e:f3:
75:d3:8f:54:76:08:3e:f5:ab:c9:f6:e0:72:35:6c:d5:ed:ff:
1b:af:2b:57:02:a1:07:a0:db:18:a7:ae:ce:10:1e:1c:4b:38:
9e:91:8f:6b:7c:bc:b6:f8:71:b9:73:60:b9:6a:d7:17:2c:98:
1b:8d:9c:9d:32:c7:86:3d:70:da:05:a3:c3:00:fe:17:eb:22:
1a:3e:33:80:6e:3f:47:c8:cc:64:3a:01:1c:26:5f:8e:8f:ae:
18:29:f5:84:1d:aa:b4:8c:31:00:9c:ff:73:d3:aa:8f:70:79:
e6:5d:6b:e5:a5:57:91:56:ae:87:72:8b:f8:79:2e:b9:a1:1d:
ec:c6:d4:64:6e:e7:0d:8c:ca:e4:68:e6:2b:9a:5f:94:8b:2a:
f1:d5:e3:af:f0:ad:88:cf:f7:25:22:1b:c4:c6:2d:d9:ca:0f:
dd:75:6c:57:0f:a9:a4:65:66:9a:b7:cb:ea:53:d5:ca:4b:62:
2b:b4:ee:1c:fd:cf:36:c4:c1:53:7f:a4:13:1c:55:17:ba:dc:
17:dd:65:f9:74:b8:e3:a2:81:5b:0c:e2:db:f5:a3:03:0f:26:
a9:b0:9f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:35 2025 by rpki-client