
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
File: cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft (raw, json)
Hash identifier: mjeien724odmF9R1eD/CGb1ddiPM0mL38+8KgJDSD1U=
Subject key identifier: 05:E9:68:69:9D:2D:C6:19:13:97:0B:76:41:4D:2B:21:C6:7F:D7:A9
Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Certificate serial: 0197B745039419C6140DD0C2F239A250567A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 16:00:42 +0000
Manifest this update: Sat 28 Jun 2025 16:00:42 +0000
Manifest next update: Sun 29 Jun 2025 16:00:42 +0000
Files and hashes: 1: cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl (hash: JhohmuyesRRKNYHbQfFUhuzvTYmTws3LH31PwNh+10A=)
2: vCqdKv7R0SPqg2beE-raqVkN9dk.roa (hash: qav8+RSTbcmeaTuiZ2SE6ePjqRAE/0kbvGatcxDfqj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:03:94:19:c6:14:0d:d0:c2:f2:39:a2:50:56:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Validity
Not Before: Jun 28 16:00:42 2025 GMT
Not After : Jun 29 16:00:42 2025 GMT
Subject: CN=05e968699d2dc61913970b76414d2b21c67fd7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:45:0e:3a:6c:ff:96:64:3b:b6:90:5f:79:
e4:39:6b:b8:9d:3a:70:58:fa:25:1b:1e:17:57:bd:
17:bc:c4:dd:a1:0d:21:df:dd:85:b1:06:9e:d0:34:
9b:48:16:f7:40:03:22:3b:a9:b9:19:dd:a3:3f:78:
58:3f:b6:07:66:eb:29:4f:b2:52:7e:35:bb:dc:26:
cd:0f:35:64:f9:c9:14:c7:a5:1c:b5:10:18:1a:d6:
0f:d2:e7:55:44:94:cc:01:9e:5a:49:a1:c4:a5:f4:
e4:e5:2e:d7:05:8e:f2:15:4e:7e:a5:de:33:bd:2b:
a5:16:29:02:7f:68:42:9b:55:f0:27:78:c7:55:8e:
65:9c:b6:09:f7:85:c5:c4:dc:98:4b:20:a1:54:df:
68:33:bb:76:66:e4:49:91:38:31:33:0b:7f:bd:12:
41:03:7d:be:c5:f9:e3:2f:fb:6b:07:91:37:9f:cc:
de:69:be:19:04:50:33:30:31:e2:f9:c5:e1:19:09:
7c:af:eb:48:57:a9:14:7c:36:07:3c:88:e8:0f:39:
e8:17:91:41:fd:90:e3:69:30:10:e5:df:2c:5e:a0:
30:10:bd:3a:5d:a0:00:54:57:7c:69:22:34:9c:c4:
b2:a6:9d:7f:f5:83:18:ee:ef:b8:c8:aa:3a:48:f0:
a9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E9:68:69:9D:2D:C6:19:13:97:0B:76:41:4D:2B:21:C6:7F:D7:A9
X509v3 Authority Key Identifier:
keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2c:c5:dc:2e:50:25:37:81:1c:6e:2d:dc:34:2c:96:82:b3:
25:52:5e:9d:05:3d:ce:d3:da:9b:11:8e:b9:b5:90:06:28:de:
0b:e6:ad:3c:3a:71:7a:fe:15:a3:08:e4:db:61:d9:ca:a4:a1:
24:e1:3b:a6:de:02:d8:b2:0b:f7:6e:8f:3f:83:7b:13:c6:10:
59:ba:1e:2d:eb:da:d5:a8:f9:ab:3c:a8:bb:4b:fa:51:e0:85:
9a:27:21:74:05:c2:81:c0:85:2a:70:14:f8:cd:6b:b4:59:b4:
48:00:7c:90:b3:8a:f3:93:2f:46:51:8e:36:4b:09:af:d4:cf:
8f:83:78:b6:a3:29:07:b9:28:48:50:f4:93:68:1f:de:8f:bd:
11:e3:71:45:28:ba:b7:8e:26:22:7f:58:3b:8b:55:5f:ea:d5:
73:17:12:b4:09:7f:d5:9b:b6:bf:eb:29:c1:d4:8d:24:6a:14:
ea:6f:84:4b:58:cc:66:7d:2e:40:be:f3:38:92:1e:86:90:f8:
5c:c4:17:e6:f2:40:3d:80:87:f9:86:31:8a:c5:21:59:ff:4c:
79:0d:90:68:9e:a2:fb:d1:d4:31:a4:66:bc:5b:43:7f:42:e3:
70:54:1d:b8:44:59:20:c9:04:d4:89:95:ea:f2:93:6a:89:c6:
05:aa:58:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:26:05 2025 by rpki-client