Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
File: CBG8UM_tnQLlgZaiyByYjjC6EmA.mft (raw, json)
Hash identifier: nl4l2VXcTzwcOX9pjplrTI/bnxvSyw43NJHzrWdrut8=
Subject key identifier: 81:06:52:AD:ED:06:F2:5D:A5:CA:9E:25:D7:8D:E1:6D:A8:4E:8A:91
Authority key identifier: 08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
Certificate issuer: /CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Certificate serial: 0199FC8F7F3957FEDEF774DE65D21C566580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 13:01:26 +0000
Manifest this update: Sun 19 Oct 2025 13:01:26 +0000
Manifest next update: Mon 20 Oct 2025 13:01:26 +0000
Files and hashes: 1: CBG8UM_tnQLlgZaiyByYjjC6EmA.crl (hash: 3JK1mYGUg09EfeCu/GULOI2pkaUMyn6GwoF3uSgtA+Y=)
2: mWwPnP2S4g9JhxWYKKryZjEy1Ao.roa (hash: HyXUe+PYjqIKyOZOZZRdFXR1ckNBvzFOngXjiDgbrBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7f:39:57:fe:de:f7:74:de:65:d2:1c:56:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Validity
Not Before: Oct 19 13:01:26 2025 GMT
Not After : Oct 20 13:01:26 2025 GMT
Subject: CN=810652aded06f25da5ca9e25d78de16da84e8a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a4:37:d3:ee:20:34:f5:29:23:6c:4e:05:57:
4d:f8:88:34:12:f3:ab:7a:c7:79:1c:3d:4a:db:25:
6f:1e:07:a3:05:e8:bd:04:cc:95:6c:cc:8a:74:06:
75:cc:62:78:83:a7:1f:60:1d:17:42:d6:5f:44:c7:
c2:64:73:79:f1:3f:bf:99:a1:3e:8f:2d:9d:3f:1d:
73:da:72:b6:3a:a5:d8:20:9b:32:bb:fd:94:57:0f:
63:86:27:c5:55:ad:9a:0b:4f:73:c3:82:23:d8:b7:
0c:68:0d:ae:7f:8e:a6:8d:d8:42:e2:99:06:c7:85:
00:63:6a:f6:29:ce:04:cb:ef:85:b5:57:2b:80:01:
46:c3:ce:2b:ea:a7:78:60:7c:a5:a7:18:cb:ec:26:
5b:0e:34:0f:e6:f9:57:0d:05:0d:82:3a:bc:af:20:
c7:4b:fd:e0:51:b9:d2:3c:03:b4:3b:3c:54:73:7e:
4c:f0:78:94:b2:55:cc:14:74:3c:9d:53:2e:6c:88:
ce:bf:0a:ce:63:71:40:96:50:d6:77:54:99:a4:9d:
95:d0:fe:b4:a4:89:6e:92:96:09:16:de:57:f7:1c:
f8:20:ad:64:af:98:cc:ae:b0:a4:fa:e8:06:b1:b1:
d5:bd:62:1a:18:bb:7e:c1:81:f7:68:87:29:f1:42:
3d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:06:52:AD:ED:06:F2:5D:A5:CA:9E:25:D7:8D:E1:6D:A8:4E:8A:91
X509v3 Authority Key Identifier:
keyid:08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:80:48:8b:d8:b0:80:f4:86:ba:4d:ca:ac:8b:7f:e6:6c:26:
5a:8b:83:dd:5f:2e:e7:51:d0:8c:ca:75:54:d7:3f:06:08:b7:
e9:f1:4b:3f:bf:60:7a:f9:c2:7b:d9:ed:97:9a:36:ba:8a:62:
d0:8e:c4:37:7a:47:19:a9:6f:29:b3:b6:1f:00:01:b4:cc:95:
9f:d6:64:ab:77:74:39:d5:16:1b:6f:bd:34:39:61:21:6c:6b:
af:d2:a5:93:92:b9:6c:21:e0:c8:05:4d:28:d0:ae:c1:61:46:
69:b9:23:5a:2d:20:44:9c:11:2d:d9:b2:e2:5c:f1:f2:2b:1e:
67:bd:d8:0a:2e:6e:79:77:cb:57:df:b2:a8:d6:41:01:fd:d3:
67:9d:12:bd:25:81:1d:35:c0:e7:0b:4e:dd:6b:21:34:15:b5:
33:c8:f1:24:b6:17:b1:e0:9d:96:fa:c3:2f:34:41:82:4a:52:
57:32:de:a6:18:c9:c4:e2:9a:84:57:44:68:18:14:c9:5b:f7:
06:eb:81:6b:66:34:9b:70:74:4c:cb:f2:0e:92:81:82:8f:7f:
6c:b8:6a:66:07:b3:d4:5b:eb:08:84:6f:98:98:cf:e3:46:0e:
a5:b3:5b:46:c5:bb:d1:ae:07:c7:f3:ec:43:10:1e:3a:60:31:
0c:85:cb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:09 2025 by rpki-client