Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
File: CbARCuS4F5SlCIMfy17cyNX9Lxs.mft (raw, json)
Hash identifier: RN713Z7pvXBzBXGyDOCjXat+SglBlIlsbmkmle2ogVQ=
Subject key identifier: 18:0D:35:7C:40:BB:E2:75:77:10:AB:89:48:83:2B:FA:43:09:94:8D
Authority key identifier: 09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
Certificate issuer: /CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
Certificate serial: 0197C98249C20FFEF8569754F55ACE0E1C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
Manifest number: 15C1
Signing time: Wed 02 Jul 2025 05:00:48 +0000
Manifest this update: Wed 02 Jul 2025 05:00:48 +0000
Manifest next update: Thu 03 Jul 2025 05:00:48 +0000
Files and hashes: 1: CbARCuS4F5SlCIMfy17cyNX9Lxs.crl (hash: 8/xQcbiormRuW0fV9CcBWZdq3fa/EeMs3YdJW6csHxs=)
2: zyLhO2pA8EoiaCGmhzCvFXO3PZQ.roa (hash: zOCqTwjJOxNebqI94cAaf6aPymCO5NPJ+zXjaPobnkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:82:49:c2:0f:fe:f8:56:97:54:f5:5a:ce:0e:1c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
Validity
Not Before: Jul 2 05:00:48 2025 GMT
Not After : Jul 3 05:00:48 2025 GMT
Subject: CN=180d357c40bbe2757710ab8948832bfa4309948d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bd:80:0f:6d:b8:01:fb:86:cb:25:8c:13:4f:
75:32:11:75:c1:c2:e7:d7:60:0f:f6:53:b4:dc:9d:
e2:63:59:a0:78:99:70:c3:3a:41:d8:35:36:44:90:
92:2f:95:db:ca:6c:88:14:8f:8b:77:59:d7:84:7c:
01:92:f7:5b:21:8c:50:ec:19:49:ab:b4:a5:51:c8:
92:af:9f:e6:93:c4:46:8d:2d:c9:b7:11:b8:ec:80:
1b:d1:71:44:91:9e:ab:67:c9:c1:4e:6d:3c:f7:c1:
3f:57:73:4c:7a:09:92:e7:25:1a:1c:1b:d7:09:2d:
a9:f3:5f:e6:fb:18:99:30:a4:6b:63:7d:88:9c:97:
19:f7:2e:fb:38:01:5c:8e:5b:35:f1:d6:b9:f1:b3:
1a:ff:3c:5e:c2:25:2c:32:54:8d:95:77:4f:24:0c:
97:d9:e0:7a:90:fa:d6:d1:58:af:85:d3:da:ff:a8:
f3:6d:58:53:3f:1e:28:58:1c:80:75:39:7f:27:55:
f4:e7:1f:11:79:54:00:6d:3d:93:0d:f4:d5:07:aa:
9a:af:bc:ff:d7:69:ed:8d:e0:ae:5e:20:e9:56:b0:
3a:d0:57:94:80:f0:e7:e7:a7:10:6d:e5:a2:d0:b2:
7e:23:29:51:96:b0:12:5e:7d:08:84:b8:57:6b:98:
b3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0D:35:7C:40:BB:E2:75:77:10:AB:89:48:83:2B:FA:43:09:94:8D
X509v3 Authority Key Identifier:
keyid:09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ea:92:1c:5c:85:a2:4e:6f:d9:f5:5b:de:2d:81:0c:80:5e:
e5:a6:cc:d4:58:3b:c0:d0:36:6b:90:41:da:5c:96:76:39:17:
fc:ab:bc:15:a0:af:c5:66:d3:db:be:fd:fe:df:b5:d9:5b:96:
39:62:e1:ae:ba:68:69:5c:3d:5b:05:d1:74:d3:58:3a:2f:47:
85:05:47:d4:98:ff:78:be:a9:bb:c5:73:d6:8a:17:9d:dc:93:
c6:6f:08:c1:b3:18:52:38:fe:3b:6b:f9:4f:27:67:50:01:59:
07:43:e7:55:4f:c6:e3:5e:95:93:f5:54:9e:c8:bf:dc:5f:a9:
a3:06:ce:a6:2e:53:cb:2a:50:8c:4e:57:1c:8d:b8:c4:7c:f0:
01:69:20:5f:59:62:09:2c:f7:0c:5b:bd:96:36:29:67:3c:d0:
e3:95:bf:2e:09:e7:2a:43:c2:f7:e9:0f:cc:90:0d:1c:e2:79:
2b:e8:59:31:44:ba:fd:92:6e:61:ea:24:93:9c:cb:d2:05:2e:
80:b2:68:ea:1e:1c:5d:49:6c:da:57:08:ae:09:4f:b2:b8:b4:
54:97:81:47:9c:11:71:21:8a:13:8f:c0:f2:b9:b8:76:19:f1:
18:29:e7:f8:e9:1d:2a:3d:39:dd:fa:f8:32:98:9b:ea:ad:4e:
e0:65:68:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfJgknCD/74VpdU9VrODhx8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YjAxMTBhZTRiODE3OTRhNTA4ODMxZmNiNWVkY2M4ZDVm
ZDJmMWIwHhcNMjUwNzAyMDUwMDQ4WhcNMjUwNzAzMDUwMDQ4WjAzMTEwLwYDVQQD
EygxODBkMzU3YzQwYmJlMjc1NzcxMGFiODk0ODgzMmJmYTQzMDk5NDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb2AD224AfuGyyWME091MhF1wcLn
12AP9lO03J3iY1mgeJlwwzpB2DU2RJCSL5XbymyIFI+Ld1nXhHwBkvdbIYxQ7BlJ
q7SlUciSr5/mk8RGjS3JtxG47IAb0XFEkZ6rZ8nBTm0898E/V3NMegmS5yUaHBvX
CS2p81/m+xiZMKRrY32InJcZ9y77OAFcjls18da58bMa/zxewiUsMlSNlXdPJAyX
2eB6kPrW0VivhdPa/6jzbVhTPx4oWByAdTl/J1X05x8ReVQAbT2TDfTVB6qar7z/
12ntjeCuXiDpVrA60FeUgPDn56cQbeWi0LJ+IylRlrASXn0IhLhXa5izIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgNNXxAu+J1dxCriUiDK/pDCZSNMB8GA1UdIwQY
MBaAFAmwEQrkuBeUpQiDH8te3MjV/S8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2JBUkN1UzRGNVNsQ0lNZnkxN2N5Tlg5THhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9iM2NlMWItZjFmNy00MGNiLWIzZDAt
NmQyMGY1YzE5N2Y2LzEvQ2JBUkN1UzRGNVNsQ0lNZnkxN2N5Tlg5THhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9iM2NlMWItZjFmNy00MGNiLWIzZDAtNmQyMGY1YzE5N2Y2
LzEvQ2JBUkN1UzRGNVNsQ0lNZnkxN2N5Tlg5THhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIeqSHFyF
ok5v2fVb3i2BDIBe5abM1Fg7wNA2a5BB2lyWdjkX/Ku8FaCvxWbT2779/t+12VuW
OWLhrrpoaVw9WwXRdNNYOi9HhQVH1Jj/eL6pu8Vz1ooXndyTxm8IwbMYUjj+O2v5
TydnUAFZB0PnVU/G416Vk/VUnsi/3F+powbOpi5TyypQjE5XHI24xHzwAWkgX1li
CSz3DFu9ljYpZzzQ45W/LgnnKkPC9+kPzJANHOJ5K+hZMUS6/ZJuYeokk5zL0gUu
gLJo6h4cXUls2lcIrglPsri0VJeBR5wRcSGKE4/A8rm4dhnxGCnn+OkdKj053fr4
Mpib6q1O4GVoFw==
-----END CERTIFICATE-----
Generated at Wed Jul 2 06:51:17 2025 by rpki-client