Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
File: cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft (raw, json)
Hash identifier: xyOvIo9wcembV3WR3UZifhekjK289tdsVEOeEGId1Yw=
Subject key identifier: 43:EC:63:B2:8B:58:1B:2A:21:1F:D4:1F:94:43:94:46:45:B2:4F:C3
Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Certificate serial: 0199FC8F8027D651111C07BB65552BE7FF57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 13:01:26 +0000
Manifest this update: Sun 19 Oct 2025 13:01:26 +0000
Manifest next update: Mon 20 Oct 2025 13:01:26 +0000
Files and hashes: 1: cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl (hash: xViDCkNHTYMLZs5TXL5wOJtX41L6jSqCkD5Clb77aGU=)
2: vCqdKv7R0SPqg2beE-raqVkN9dk.roa (hash: qav8+RSTbcmeaTuiZ2SE6ePjqRAE/0kbvGatcxDfqj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:80:27:d6:51:11:1c:07:bb:65:55:2b:e7:ff:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Validity
Not Before: Oct 19 13:01:26 2025 GMT
Not After : Oct 20 13:01:26 2025 GMT
Subject: CN=43ec63b28b581b2a211fd41f9443944645b24fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:c6:03:41:37:9a:30:06:25:4f:5c:a4:4e:
bb:5c:8b:19:c0:f7:83:53:fa:1e:e4:13:c6:25:83:
40:d9:56:f4:da:fe:60:be:b8:7c:24:7e:de:a1:af:
62:e9:4f:73:79:96:a5:e6:ac:80:fd:4a:6d:a2:0b:
29:35:87:24:0a:66:ab:e5:ff:a4:b7:46:10:ef:51:
79:2d:d8:38:4a:d9:73:6c:85:63:46:7b:1e:06:fa:
c0:1f:65:de:db:ac:fe:fc:1c:3a:a9:d0:e8:b5:75:
c9:bc:99:7d:ef:36:e2:8d:cc:32:7c:f7:51:bb:de:
a5:84:ce:ee:cd:52:c3:8c:76:c5:a7:a9:cc:90:13:
bf:69:83:30:01:ea:46:1c:65:3a:3e:54:65:b5:84:
83:02:06:71:1b:80:82:20:c7:bc:30:46:04:50:0b:
7c:18:5a:2f:88:6f:0e:86:82:b5:b6:d8:d5:0c:07:
06:96:ca:ac:b9:c9:a1:ca:6f:55:22:ed:de:41:d6:
d3:e4:64:0d:e9:09:95:72:ef:2c:5b:f0:1e:af:31:
4a:88:e1:78:0e:4f:9f:b3:4d:2f:c8:bf:23:81:30:
ed:96:2b:18:05:e1:d4:2f:7f:ea:29:39:fa:5f:c8:
6c:3f:9c:03:75:a6:e0:73:c9:81:ee:85:e3:0b:cc:
59:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EC:63:B2:8B:58:1B:2A:21:1F:D4:1F:94:43:94:46:45:B2:4F:C3
X509v3 Authority Key Identifier:
keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:68:91:69:d0:61:2f:95:0a:71:0e:20:8d:57:ee:ee:84:fb:
66:fa:10:83:4b:a1:41:a5:a9:0f:55:3c:68:d5:7b:32:8a:cc:
11:e0:5a:a1:35:97:15:dc:6c:e9:1f:6c:00:f1:91:8c:6b:22:
a4:42:74:47:ee:ac:f9:91:03:d8:3b:12:aa:5a:22:87:c5:96:
73:af:4a:64:b3:19:b2:68:bf:fb:18:58:7f:a2:41:c4:e8:b3:
5d:97:ef:f1:2f:72:21:b8:70:3d:21:37:f5:b4:16:4e:6b:db:
91:e4:2c:af:eb:a5:7b:d4:e8:a2:8a:1a:43:9c:73:69:45:d6:
61:a0:93:00:2f:6e:86:7b:05:f6:86:71:84:bc:73:1d:84:42:
17:fc:8a:1c:f7:82:08:c6:fc:c1:9e:4b:6f:7f:66:9f:1e:e9:
49:fa:af:d8:be:0c:88:55:6f:ef:6d:23:fe:0b:e1:8d:25:2e:
c8:7f:57:90:cd:13:93:b4:61:33:90:a9:3b:eb:f8:f4:06:a6:
1a:24:92:3c:86:ea:fb:a5:97:72:fa:29:4f:bc:61:40:c0:0a:
b9:7c:6c:4e:65:b2:f7:d5:b3:a5:10:41:5c:c6:1e:52:25:ba:
0c:50:e5:c5:ca:bb:f6:0f:d7:fb:ca:7b:86:a7:56:a1:c9:92:
2b:22:5f:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j4An1lERHAe7ZVUr5/9XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYjkwYzgzZDkwZjNkNGVmMjJkYjgyODUwMmU2MTUyYjZk
NWJmZTUwHhcNMjUxMDE5MTMwMTI2WhcNMjUxMDIwMTMwMTI2WjAzMTEwLwYDVQQD
Eyg0M2VjNjNiMjhiNTgxYjJhMjExZmQ0MWY5NDQzOTQ0NjQ1YjI0ZmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtovGA0E3mjAGJU9cpE67XIsZwPeD
U/oe5BPGJYNA2Vb02v5gvrh8JH7eoa9i6U9zeZal5qyA/UptogspNYckCmar5f+k
t0YQ71F5Ldg4StlzbIVjRnseBvrAH2Xe26z+/Bw6qdDotXXJvJl97zbijcwyfPdR
u96lhM7uzVLDjHbFp6nMkBO/aYMwAepGHGU6PlRltYSDAgZxG4CCIMe8MEYEUAt8
GFoviG8OhoK1ttjVDAcGlsqsucmhym9VIu3eQdbT5GQN6QmVcu8sW/AerzFKiOF4
Dk+fs00vyL8jgTDtlisYBeHUL3/qKTn6X8hsP5wDdabgc8mB7oXjC8xZLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPsY7KLWBsqIR/UH5RDlEZFsk/DMB8GA1UdIwQY
MBaAFHG5DIPZDz1O8i24KFAuYVK21b/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83MDIyZGMtMzU2ZS00NGQ2LWEzZWIt
N2NmYjliMDdmNDBmLzEvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83MDIyZGMtMzU2ZS00NGQ2LWEzZWItN2NmYjliMDdmNDBm
LzEvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWiRadBh
L5UKcQ4gjVfu7oT7ZvoQg0uhQaWpD1U8aNV7MorMEeBaoTWXFdxs6R9sAPGRjGsi
pEJ0R+6s+ZED2DsSqloih8WWc69KZLMZsmi/+xhYf6JBxOizXZfv8S9yIbhwPSE3
9bQWTmvbkeQsr+ule9TooooaQ5xzaUXWYaCTAC9uhnsF9oZxhLxzHYRCF/yKHPeC
CMb8wZ5Lb39mnx7pSfqv2L4MiFVv720j/gvhjSUuyH9XkM0Tk7RhM5CpO+v49Aam
GiSSPIbq+6WXcvopT7xhQMAKuXxsTmWy99WzpRBBXMYeUiW6DFDlxcq79g/X+8p7
hqdWocmSKyJfRQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:23 2025 by rpki-client