
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
File: CbARCuS4F5SlCIMfy17cyNX9Lxs.mft (raw, json)
Hash identifier: 3Jc5yDZwlPT883/rQAJmCQnQ9ap6pk9epB4Gkzcxvk8=
Subject key identifier: 4B:18:2D:B1:35:09:A8:F8:C5:9B:7D:D0:CF:9E:F8:B4:63:76:81:C6
Authority key identifier: 09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
Certificate issuer: /CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
Certificate serial: 0198D5F1319F30108E68A051DD0A5A3D6635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 08:00:10 +0000
Manifest this update: Sat 23 Aug 2025 08:00:10 +0000
Manifest next update: Sun 24 Aug 2025 08:00:10 +0000
Files and hashes: 1: CbARCuS4F5SlCIMfy17cyNX9Lxs.crl (hash: 7hvJuZzZjx3JbXfBl8Rd0yawOUVoy81KdCo7tCmfv5E=)
2: zyLhO2pA8EoiaCGmhzCvFXO3PZQ.roa (hash: zOCqTwjJOxNebqI94cAaf6aPymCO5NPJ+zXjaPobnkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:31:9f:30:10:8e:68:a0:51:dd:0a:5a:3d:66:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
Validity
Not Before: Aug 23 08:00:10 2025 GMT
Not After : Aug 24 08:00:10 2025 GMT
Subject: CN=4b182db13509a8f8c59b7dd0cf9ef8b4637681c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:25:48:19:7f:47:18:53:92:39:b0:71:c5:
f8:99:f2:56:4b:ec:4f:af:44:4f:af:61:23:85:99:
40:63:77:cf:75:28:b1:54:1d:11:71:f8:19:3d:1e:
08:77:7f:59:d3:aa:2d:4d:19:f6:78:d0:50:82:0a:
af:92:b7:df:c4:04:4a:91:a4:cb:c5:7f:81:86:c4:
3a:1c:0f:7b:dc:6c:9d:65:31:1a:d7:4f:06:40:e1:
b6:fc:e9:98:6e:32:ad:e4:5d:8e:f7:a8:f2:63:77:
c5:0b:71:99:3c:4a:70:36:df:d1:fa:b5:54:f0:6f:
19:99:df:ff:bb:09:81:c1:f4:88:ed:e1:d9:1d:54:
eb:a4:95:20:ac:9e:a0:25:45:b9:76:af:a3:dd:3e:
65:d5:72:e8:fd:8a:9a:35:f1:c6:0a:9a:cc:f4:c7:
2f:6b:16:c6:6f:b6:02:49:44:d1:3c:a9:35:33:5e:
3f:89:4b:a8:1e:4f:07:fa:46:47:4e:60:df:7d:8d:
25:ac:cb:8a:43:e7:0f:eb:94:6c:a1:09:ad:84:32:
4c:c9:8c:6c:69:12:d5:19:ff:e7:de:df:51:a8:20:
31:39:a2:6d:f3:df:63:ab:80:77:80:d0:9c:b4:07:
45:ea:2d:ec:cd:7e:1d:ae:c6:19:98:77:d9:40:e0:
5f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:18:2D:B1:35:09:A8:F8:C5:9B:7D:D0:CF:9E:F8:B4:63:76:81:C6
X509v3 Authority Key Identifier:
keyid:09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:75:f4:d2:f7:00:43:5e:8b:d9:64:ec:5a:2b:73:f3:c8:65:
18:d1:cc:91:a9:a4:38:3e:41:dd:84:65:13:f2:53:d8:45:30:
96:9d:8c:c7:9a:f1:e5:54:33:18:56:e1:13:01:3f:6b:04:b4:
c0:9c:7f:81:b1:4e:aa:60:c9:da:24:2e:96:b2:9f:0f:c5:ac:
7a:fa:8f:50:fc:86:4a:92:85:e3:28:b5:74:03:5a:04:6b:b9:
28:8f:67:d1:a5:d9:9a:7e:c5:1d:f0:fc:9a:88:53:a1:45:86:
d5:fd:77:05:8a:8d:d9:49:29:e5:e4:04:1d:e2:72:3c:f1:d3:
81:5f:18:41:0c:f2:26:cb:2b:d4:ee:94:3d:e1:8b:a2:16:d7:
01:9f:6e:4a:fb:ce:a0:39:62:3b:b6:66:33:74:58:27:a0:ae:
3c:c0:19:5c:63:fa:ac:af:2e:fe:88:6b:c3:d4:6a:76:80:d8:
e9:74:36:26:4d:a8:3c:b6:53:05:8d:6b:1b:7b:2d:59:b7:3b:
90:d1:6f:1b:ea:b4:7b:fe:7a:70:15:45:ec:20:f2:5f:82:32:
58:a5:21:69:cb:ba:ae:32:6d:10:c1:f6:1e:5b:4c:e7:5c:5a:
f1:3d:2b:9d:12:2a:7c:54:05:88:49:a5:37:b8:4e:5c:2c:9d:
91:e0:1e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:42:18 2025 by rpki-client