Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
File: CBg0SlIKOZknm7gkfheeiEBuNXg.mft (raw, json)
Hash identifier: iVRDv8TeOVIvj0cbmR97whP42mTwImKlJev+2olFdtM=
Subject key identifier: 6F:7A:84:FF:AD:49:75:CF:16:EC:6A:BE:81:6E:33:75:4E:60:02:5B
Authority key identifier: 08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
Certificate issuer: /CN=0818344a520a3999279bb8247e179e88406e3578
Certificate serial: 0198D404C46BDD19EF3BA9118F294FEF178D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
Manifest number: 0916
Signing time: Fri 22 Aug 2025 23:02:18 +0000
Manifest this update: Fri 22 Aug 2025 23:02:18 +0000
Manifest next update: Sat 23 Aug 2025 23:02:18 +0000
Files and hashes: 1: B-j6lkFyqvjbC_PQncwIGbX8TJo.roa (hash: UphQUvnVM6eEU6Z6D8ssHUSQvyAzogcc5pnYk33x3jA=)
2: CBg0SlIKOZknm7gkfheeiEBuNXg.crl (hash: c4CGmn+eeFi28E2wPtIYCqGBYj2YZh3UFWf0evwNydQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:c4:6b:dd:19:ef:3b:a9:11:8f:29:4f:ef:17:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0818344a520a3999279bb8247e179e88406e3578
Validity
Not Before: Aug 22 23:02:18 2025 GMT
Not After : Aug 23 23:02:18 2025 GMT
Subject: CN=6f7a84ffad4975cf16ec6abe816e33754e60025b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f9:9c:bd:50:d3:59:90:50:b4:4b:ca:05:f5:
51:1d:0b:ac:d5:8c:3f:eb:86:4b:ba:9a:bf:b8:81:
a5:57:c7:b0:9b:51:38:f6:24:23:01:1a:86:0b:82:
55:75:96:c7:8f:bc:57:b2:35:6a:5e:90:97:38:19:
51:bd:32:bb:05:9f:62:be:98:ba:fe:f9:75:5c:d6:
d6:a6:09:32:b0:32:d8:7a:2e:ca:64:6f:01:4b:de:
01:0b:fa:5b:11:8b:81:2c:d9:45:1e:54:e8:75:99:
81:13:ac:79:a7:1e:40:ad:01:c5:30:ac:26:a9:60:
1c:71:90:9e:ee:26:c1:ef:e8:eb:41:6d:d9:3b:a8:
38:97:8e:e3:8b:d2:bf:7e:f9:4f:45:58:e9:f9:38:
e3:12:13:11:28:a7:97:8b:fa:7f:24:d7:1a:56:31:
f8:75:90:95:3d:31:cd:c2:a5:79:e0:b6:07:70:50:
a9:58:e0:fb:f7:f9:6c:a5:39:89:e8:7e:fb:38:09:
7d:55:50:9c:25:8c:b7:b9:3c:de:92:13:a6:23:b9:
aa:9e:13:5f:d9:ae:ae:09:0c:92:4c:0b:a9:f6:3c:
2e:05:10:7d:17:42:ed:01:59:77:e1:7d:e0:9c:80:
b3:1f:06:31:e5:5a:77:a2:26:f1:0b:93:87:44:45:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7A:84:FF:AD:49:75:CF:16:EC:6A:BE:81:6E:33:75:4E:60:02:5B
X509v3 Authority Key Identifier:
keyid:08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:7c:36:1e:f4:7a:8a:55:c9:62:c6:d9:f4:70:aa:5a:f7:42:
8c:ee:97:9c:3e:66:b5:a8:53:73:d5:dc:82:f6:19:36:18:1b:
64:96:85:cf:3d:e0:e2:fe:62:cf:6a:65:fd:4c:d6:5b:c6:ab:
07:c4:19:9e:ae:ee:ae:dc:c1:04:51:ea:24:b6:e5:fe:5b:05:
e9:98:4a:c3:b9:d8:69:dc:fa:3c:69:a4:78:d8:2e:e4:c7:5b:
ab:66:77:10:8b:ba:e2:67:7d:f5:71:20:79:bc:b8:4c:8b:4b:
59:44:24:a5:04:95:4b:4b:f3:c8:8a:f5:7a:85:56:e1:45:d9:
72:3d:6e:3f:86:1e:92:2a:f9:cd:9a:df:3c:00:73:ca:e9:4a:
69:6d:ff:f9:e7:04:8d:d5:19:3a:2d:e6:f0:1f:f1:ac:f0:80:
fc:02:70:f7:8a:7c:1c:0a:d7:5f:b3:1c:1e:ec:6d:0e:ca:5f:
fc:c7:c6:ed:bb:17:91:d0:c1:4b:e6:91:30:6c:d4:75:56:71:
c1:ee:1e:5d:6f:14:df:c1:af:b0:d5:eb:d4:1e:b9:87:94:76:
45:12:9e:c2:25:0e:15:58:1e:e1:d5:d9:e6:34:17:c9:2b:f3:
9f:81:31:b2:2c:0d:7d:a7:06:94:fd:b0:28:1b:32:41:b3:1f:
9f:e8:9b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:24 2025 by rpki-client