Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
File: cbbQ4ActDKspv6hzfeKlPlFBgnY.mft (raw, json)
Hash identifier: goHn5hIPp3j7aSpIsjZzb2xWAwP/bTH5J7u0kt5QLzI=
Subject key identifier: F2:74:FE:70:46:8F:5E:60:4F:F3:06:F6:79:F0:69:FE:2E:04:81:D5
Authority key identifier: 71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
Certificate issuer: /CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Certificate serial: 0199FC582AEBD230DDE68CE8D1E0231C4466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
Manifest number: 0767
Signing time: Sun 19 Oct 2025 12:01:00 +0000
Manifest this update: Sun 19 Oct 2025 12:01:00 +0000
Manifest next update: Mon 20 Oct 2025 12:01:00 +0000
Files and hashes: 1: cbbQ4ActDKspv6hzfeKlPlFBgnY.crl (hash: TDSne/PCb45ukyhQ8Ffapp0t4sK0OzfeWtBOLdRkKSo=)
2: m3oyez4opl0YbbQ1CR2fl2aO7F8.roa (hash: FqYvVOjK/elvRD3q2xJweF4ZvocMCS6cmWVMXbFh3Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:2a:eb:d2:30:dd:e6:8c:e8:d1:e0:23:1c:44:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Validity
Not Before: Oct 19 12:01:00 2025 GMT
Not After : Oct 20 12:01:00 2025 GMT
Subject: CN=f274fe70468f5e604ff306f679f069fe2e0481d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:31:fa:a0:8b:09:2c:3d:e0:df:54:a3:74:
e9:c1:d9:a5:0e:d9:ba:4c:84:87:00:22:b4:59:48:
36:a4:40:32:66:51:83:fa:96:5a:af:2b:92:54:d7:
01:ff:bf:52:4d:cb:67:09:06:72:b4:2c:fa:92:0e:
bd:9a:a1:90:0f:c8:86:2d:d5:ef:52:37:f8:f7:0c:
5b:a3:01:8d:43:dc:19:54:63:6e:a3:d3:14:a9:be:
4c:6c:83:1f:8b:7c:92:c8:13:61:ed:9c:90:61:dd:
19:28:9d:a1:f6:07:a1:79:f2:35:d7:6b:3e:ca:a0:
72:a0:ed:50:86:37:fb:b8:c6:06:55:7d:54:f6:3e:
37:eb:03:70:82:9e:6d:70:3b:84:ac:d0:85:84:97:
5d:46:8e:a1:8c:74:90:33:87:63:b1:b6:15:11:1e:
a7:59:0b:fd:d0:2f:ee:33:fb:92:e7:61:83:71:e7:
68:15:dc:cd:e4:7d:68:0e:72:b1:36:0c:15:3a:47:
3f:04:db:01:d9:ed:fd:ed:b4:41:f5:c2:19:a9:6e:
a7:c9:53:68:b0:16:32:ad:98:e2:0e:43:27:b4:31:
17:01:8d:ad:b9:f3:1d:58:35:0f:70:96:44:77:b9:
53:b6:b8:c7:22:6d:11:58:d5:e4:df:0c:5e:39:25:
03:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:74:FE:70:46:8F:5E:60:4F:F3:06:F6:79:F0:69:FE:2E:04:81:D5
X509v3 Authority Key Identifier:
keyid:71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:04:97:60:7d:d3:1e:96:c2:57:81:80:a9:0a:13:06:a1:6d:
90:07:6e:3d:96:c2:fc:3d:6e:17:1e:af:25:76:1f:a5:21:c3:
e2:5f:7c:09:26:51:b6:1e:d3:56:85:bc:6e:5e:93:10:03:22:
02:94:48:8b:6e:bb:44:2e:8b:0e:fc:c6:12:99:73:0b:29:33:
39:2e:bd:35:ce:ed:86:8a:16:62:99:55:ab:c7:c1:61:a4:90:
b8:6d:c9:55:b5:37:d8:87:9a:62:f5:db:f4:2a:ee:2e:f2:06:
58:f1:a9:00:c7:54:a3:ef:5c:a8:69:41:e7:25:42:90:cb:d8:
02:6f:50:17:c9:c9:2e:85:b9:31:4b:a4:57:86:c0:85:65:0b:
e0:0d:f2:83:d5:61:5e:85:45:bb:fa:2f:78:f3:30:aa:e3:ff:
41:94:c5:d1:6f:ca:ef:b5:03:3f:8f:02:27:98:da:0f:8c:fb:
4d:36:ea:d3:00:6b:06:c7:bf:fd:b7:bc:82:50:84:1e:8f:ac:
48:86:ae:58:6d:0f:7a:7a:05:c6:b7:b3:59:d7:89:fa:1b:bd:
e1:c0:86:f9:31:0c:00:d1:9d:82:ea:0b:47:ed:0b:4f:ac:48:
97:7b:11:57:15:e6:94:58:e3:44:78:8c:2a:cc:ba:be:4c:e7:
7c:68:03:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:50 2025 by rpki-client