
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
File: CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json)
Hash identifier: T9kF0goHusOm/4YO/oqyHf4mzVvi179fSdseeITkWmA=
Subject key identifier: B1:9F:FB:01:B6:3F:8A:19:59:46:2A:41:2B:5B:AD:0A:46:8A:66:78
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial: 0199FBEC1F9CA728790F6E0B67A70E4FCBE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:02:59 +0000
Manifest this update: Sun 19 Oct 2025 10:02:59 +0000
Manifest next update: Mon 20 Oct 2025 10:02:59 +0000
Files and hashes: 1: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: ensNAbLihFoodOgH2Y/28GGAXuv8V4FQwBH4UUePuzI=)
2: oAvccpdYptAzS_BGXpnm48hNKj0.roa (hash: UcqHCV81R5HjZRazwae448gGQvQVwy5vVk7J2zutre4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:1f:9c:a7:28:79:0f:6e:0b:67:a7:0e:4f:cb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
Validity
Not Before: Oct 19 10:02:59 2025 GMT
Not After : Oct 20 10:02:59 2025 GMT
Subject: CN=b19ffb01b63f8a1959462a412b5bad0a468a6678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8a:22:fc:0a:ef:31:ea:f4:00:04:04:95:06:
51:64:62:bf:ca:f4:b0:97:3a:ba:f1:94:af:75:ce:
b7:f4:a3:d8:7f:e3:47:1c:39:36:77:0d:4c:29:c8:
95:18:1b:81:88:a1:d9:08:44:8d:86:70:d1:1d:f5:
9d:88:5e:38:31:e1:72:a8:53:af:7c:4e:90:1c:cc:
3e:ee:b4:cb:b5:19:3f:2a:86:39:40:63:f7:c8:a0:
8d:5d:ff:ae:46:ff:e2:6d:5c:27:ea:8d:44:7d:aa:
f8:31:be:25:13:ec:00:5f:31:3d:66:38:bd:4f:a5:
7f:34:de:6d:3c:30:a9:ab:b4:35:e2:74:71:f7:5c:
14:63:79:45:51:a9:d7:0f:eb:a2:64:e7:ec:fa:59:
ba:3c:1b:87:f3:dd:6c:26:18:1b:51:1b:80:b9:96:
ed:c7:d7:85:ab:eb:b2:96:17:15:8e:1f:17:fb:4e:
e5:b5:5f:75:04:e2:4c:15:36:0a:7d:bc:22:9b:89:
dd:65:0e:59:39:2e:bc:4b:70:db:1d:5a:0d:2a:ab:
52:08:48:90:29:de:fd:cc:0e:45:6b:9d:9a:61:38:
a4:8f:da:ca:79:af:62:9b:52:14:0c:f1:83:9c:65:
41:3c:e4:31:cd:01:e2:8e:37:61:28:65:3c:37:b9:
ab:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9F:FB:01:B6:3F:8A:19:59:46:2A:41:2B:5B:AD:0A:46:8A:66:78
X509v3 Authority Key Identifier:
keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1e:17:94:dc:5b:4f:16:2c:58:dc:93:71:45:82:2b:3a:4b:
17:8d:22:0e:b4:a1:96:97:3d:c5:26:28:0f:6e:7b:a1:01:f3:
80:cb:f3:0d:de:af:09:ae:29:88:1f:e6:41:8f:f3:ba:59:a2:
c5:fe:e3:b8:a5:7b:8d:41:f7:da:22:78:1d:1d:d5:06:d0:76:
6a:23:65:d8:bf:81:48:ad:b1:b3:30:ca:df:56:f1:65:6a:f6:
58:e2:5d:2e:13:aa:b1:85:91:3d:e3:f6:ee:9e:fc:54:b3:03:
fb:96:0f:8e:f3:d1:3f:3d:9a:e6:33:b7:d8:0d:47:a0:dd:a0:
91:59:b0:3b:68:a6:6f:28:4a:92:28:71:1d:85:ed:d0:b7:0e:
79:2d:f9:db:13:3b:a2:cd:ec:c8:da:71:5c:81:c0:e4:45:20:
73:5c:26:e3:76:68:38:48:00:94:36:88:d7:94:e6:9e:22:1d:
96:12:8f:92:11:ac:c8:55:b8:d9:76:50:d6:88:d8:44:c9:c3:
9a:33:b1:f2:79:9e:85:0c:91:8f:2d:36:a3:68:b1:df:15:37:
ac:4a:8c:cf:7d:b4:4b:e5:11:3a:87:83:d5:53:06:9d:92:00:
36:1b:74:4c:99:3f:ae:f7:ad:96:04:cb:96:fe:51:eb:f8:85:
ca:c4:1e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:12 2025 by rpki-client