Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
File: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft (raw, json)
Hash identifier: Zetv0bpDUyHWvZFE27pJw9GUjeBMJlU32iz8dcn2AbQ=
Subject key identifier: 79:BB:80:D4:08:4D:A2:A9:85:D5:E5:1F:7E:DA:D2:20:6B:4B:F8:87
Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
Certificate issuer: /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Certificate serial: 0199FCC6515D524E24A1B1FA8461F82961AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:19 +0000
Manifest this update: Sun 19 Oct 2025 14:01:19 +0000
Manifest next update: Mon 20 Oct 2025 14:01:19 +0000
Files and hashes: 1: ArR_qdqqwy8JJ4d9cTJadzHk7s0.roa (hash: 3c+azDmhzkHSEBi1SBo0t88glQEIBlV01Qc6ZBYXFN8=)
2: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl (hash: BEBRg9uMaIcErD1j5I+qNzmK5wsv/Y/eW6mvo+KqYH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:51:5d:52:4e:24:a1:b1:fa:84:61:f8:29:61:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3
Validity
Not Before: Oct 19 14:01:19 2025 GMT
Not After : Oct 20 14:01:19 2025 GMT
Subject: CN=79bb80d4084da2a985d5e51f7edad2206b4bf887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:31:b7:44:f4:f5:c3:44:8c:56:96:4c:05:c2:
33:b0:e7:38:b2:6b:10:84:61:23:76:24:40:60:a4:
35:6e:2a:80:67:09:a4:f9:42:5e:4d:05:6f:f3:52:
58:b7:0a:9b:6f:2e:ed:da:de:53:e1:3c:d7:7d:7a:
ff:b2:45:8a:a3:db:e0:e3:19:fc:bf:be:f0:b8:27:
ab:7f:07:ca:d1:bf:3d:8e:11:15:07:72:70:0f:a0:
fa:e2:80:29:08:e6:e9:84:f9:46:bc:0a:28:8a:03:
99:be:e7:12:62:47:8c:60:d3:ac:52:ff:fa:17:14:
6a:ed:ee:19:5b:59:f6:20:46:91:9a:f7:94:65:41:
92:bd:21:28:af:a8:01:05:80:7f:4b:b2:c6:38:8b:
60:66:d1:d9:5e:ba:fa:c6:3f:65:31:02:09:e8:fb:
b3:33:75:4d:2c:c2:86:0b:a7:7e:34:24:02:5e:a3:
de:57:24:28:03:c2:aa:fa:82:89:46:ec:04:fd:1f:
8a:1b:d3:b3:f9:cb:90:42:2b:6b:d4:fc:d7:0c:9a:
ee:99:97:ac:f9:24:6c:d3:4b:90:67:ea:09:a4:c6:
67:0f:04:99:67:90:cf:df:f8:6c:ef:cc:0f:5d:25:
33:32:25:70:9d:43:01:58:55:91:8a:75:c2:f5:70:
e6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BB:80:D4:08:4D:A2:A9:85:D5:E5:1F:7E:DA:D2:20:6B:4B:F8:87
X509v3 Authority Key Identifier:
keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:18:9f:6a:ef:50:e1:1c:55:9a:ef:36:e8:1d:c6:ca:f9:50:
4e:df:c0:27:29:b6:28:8a:2e:19:ec:52:d5:9d:53:a8:ac:5a:
d6:f7:58:7f:40:66:95:75:1a:0f:3f:1a:38:f2:a3:23:4a:74:
b4:d4:bc:0c:f6:e5:f0:83:5c:9f:d5:2c:42:22:3d:61:46:b4:
d7:9a:fe:35:90:2b:c2:fa:76:ad:e8:93:2f:c0:2f:8b:a5:10:
c4:55:09:a4:06:27:ac:f7:c7:24:85:ba:b7:86:95:56:b6:b0:
c0:d6:1c:2e:50:f9:a9:6b:f9:1c:04:46:31:d4:24:46:7e:16:
0c:9d:c3:03:bb:e1:0b:e6:9f:ec:2f:94:ae:a0:e9:ad:bd:a0:
a3:d3:92:af:bc:ad:23:5f:c5:2b:dc:b5:89:45:fc:8f:49:f9:
1d:46:a9:03:1e:5b:72:69:7e:b9:0c:c3:e2:57:e4:30:80:77:
cf:77:4e:b9:4d:1c:f2:9f:dd:7a:4d:2d:95:c1:86:b0:bf:a8:
4a:18:5a:7d:77:0b:e5:a5:14:75:4a:46:db:a5:55:f8:43:c6:
64:f6:9c:45:1d:92:92:8c:f0:e1:4b:f2:be:75:62:e8:af:d3:
00:6c:d3:97:c2:29:71:60:b3:9f:3d:b7:6b:a8:2a:ec:47:1d:
60:e2:6a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:54 2025 by rpki-client