
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
File: cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft (raw, json)
Hash identifier: TsUYVGUs4OLXiCClgc/J8l9Pt/0Gexl70MqHRRtIzAE=
Subject key identifier: 37:54:39:E8:8D:2F:47:40:9C:C4:15:3B:87:EE:AB:73:29:95:A3:B4
Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Certificate serial: 0198D7061F630387431EDFA947FA3F74FBA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 13:02:39 +0000
Manifest this update: Sat 23 Aug 2025 13:02:39 +0000
Manifest next update: Sun 24 Aug 2025 13:02:39 +0000
Files and hashes: 1: cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl (hash: +w4PKK4WgPCysNSm/HXJz6Bdas08CgexAjNPfsJRBbI=)
2: vCqdKv7R0SPqg2beE-raqVkN9dk.roa (hash: qav8+RSTbcmeaTuiZ2SE6ePjqRAE/0kbvGatcxDfqj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:1f:63:03:87:43:1e:df:a9:47:fa:3f:74:fb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Validity
Not Before: Aug 23 13:02:39 2025 GMT
Not After : Aug 24 13:02:39 2025 GMT
Subject: CN=375439e88d2f47409cc4153b87eeab732995a3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d2:dc:84:0a:6e:f0:09:9c:9a:d5:8c:38:fd:
2c:53:b7:a5:75:3d:08:c5:75:ac:e2:ff:e2:b5:52:
db:be:52:d2:aa:03:07:56:03:1b:9f:73:74:79:01:
e6:b2:8b:36:1e:b5:cc:d0:3a:5a:af:0d:97:9c:54:
76:d0:6e:f0:a9:ac:f1:fb:5f:bf:d1:1a:f2:91:43:
34:89:20:0f:23:8e:b6:b1:48:42:85:7d:93:dd:50:
30:6c:a1:61:b5:09:8e:26:25:78:1d:89:49:60:ee:
cb:24:7e:ab:c7:b7:0f:4c:aa:3f:b7:40:6b:f9:b5:
5d:49:73:7f:e4:f7:0a:87:f6:e6:e5:83:ca:b1:7c:
60:70:33:0a:cc:54:50:b9:5a:53:da:d0:bd:57:e6:
2d:66:5e:5c:3d:04:b7:b9:53:0f:5d:af:fe:1b:d5:
14:ab:db:0c:17:6b:e3:6c:70:92:e3:11:34:7f:4a:
5a:62:19:5c:57:5c:31:ae:81:00:eb:ba:b1:b7:6a:
36:a7:8e:13:fb:f4:90:21:7a:76:fa:66:26:c6:83:
2d:3a:a1:e3:c3:c5:d4:49:5a:3a:5d:39:a3:e4:7c:
f3:99:ec:c9:7c:a4:bf:f1:48:74:2a:52:23:55:50:
44:5c:9b:d5:76:23:f3:dd:b7:5e:92:c8:42:dd:a0:
9e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:54:39:E8:8D:2F:47:40:9C:C4:15:3B:87:EE:AB:73:29:95:A3:B4
X509v3 Authority Key Identifier:
keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a3:10:69:5a:e2:26:95:29:94:b7:11:b9:4b:bc:79:7b:5c:
ae:b3:7c:41:96:c7:5d:30:cf:2a:e4:2b:95:f9:f5:1a:1b:e2:
f1:f7:5f:fd:dd:59:70:f7:85:35:2b:1e:b8:e7:0e:e9:03:d2:
b2:a4:1c:f4:d8:7a:78:da:a0:79:c5:96:83:6a:fa:6f:79:40:
f4:3b:6d:80:eb:db:3d:e0:06:42:3b:36:97:66:94:02:f3:9b:
c0:77:e4:60:66:ce:e4:a1:da:f5:70:c6:9a:11:b4:a4:ea:d3:
8d:e4:3e:08:6c:93:5f:0f:b5:f0:ce:ce:75:64:21:72:20:a0:
f1:23:ba:f0:9e:62:3d:b2:cc:2a:fc:1f:8d:f8:34:8c:fc:0e:
44:f6:64:6c:55:f7:30:e5:e2:8d:04:7e:ad:05:39:c8:9f:60:
a7:6a:6c:22:c5:a6:53:33:89:c6:25:33:8c:74:b4:e1:9a:77:
e8:26:99:26:35:68:ce:be:8f:90:af:57:b6:c6:f4:6a:9d:5a:
c7:a6:0c:ae:21:c9:3d:55:a8:7f:a9:1e:a4:1f:f6:79:9e:58:
37:2a:1f:1a:5d:21:2a:dd:30:de:8b:e7:65:f2:0a:f3:ac:ed:
fc:1d:52:f1:34:34:b4:74:37:d6:6f:7a:23:33:34:08:b3:0f:
4e:29:a0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:34:39 2025 by rpki-client