Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
File: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft (raw, json)
Hash identifier: ysFc8+OhX6pddr480kAwICIwpa4bVJcsBFr3yhZqHj8=
Subject key identifier: 6F:C3:96:1F:0C:52:E3:B4:B7:A0:71:9A:A1:F7:EA:6F:D5:E9:49:84
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial: 0199FBEB579EA7C8325FA2BE80335E283644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
Manifest number: 03D7
Signing time: Sun 19 Oct 2025 10:02:08 +0000
Manifest this update: Sun 19 Oct 2025 10:02:08 +0000
Manifest next update: Mon 20 Oct 2025 10:02:08 +0000
Files and hashes: 1: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl (hash: dvVe36Vf41inwHGV8HKY1N+9vfwXCVgDqWxeGymWlWE=)
2: hYR6rq77HQceE2IcxPUKLad5kL4.roa (hash: +LqXV4/8ubLYmgyeWGpSO5Gif7f3L1TnP8kIXrA9Fjc=)
3: wn4QAHp5Rzb8lXeVuE7q6L111pE.roa (hash: 4bKaaL//q7uEAPyKRq4kflXDoCt6wQEv9YHzvR6r61o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:57:9e:a7:c8:32:5f:a2:be:80:33:5e:28:36:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Validity
Not Before: Oct 19 10:02:08 2025 GMT
Not After : Oct 20 10:02:08 2025 GMT
Subject: CN=6fc3961f0c52e3b4b7a0719aa1f7ea6fd5e94984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:66:e0:a6:b8:7c:d5:05:e4:03:dd:b0:84:
0f:b9:95:96:e2:09:41:1e:ce:4f:86:f9:a4:38:0a:
71:c3:f8:63:44:c1:5f:70:33:a5:9d:94:60:a8:0f:
01:29:6f:57:d2:f4:3d:ce:7e:77:d7:a5:26:97:11:
7b:a4:9b:6e:d7:f3:65:d8:d0:a8:a2:71:dd:79:f2:
e4:e4:dc:22:88:4b:52:c5:53:88:c9:d4:8f:4e:21:
e7:0f:90:60:86:42:7b:84:14:01:b7:59:ad:31:92:
81:18:09:73:a4:74:6f:4f:8c:0b:58:80:ad:fb:a7:
10:a6:9b:51:a3:1e:f3:1a:05:e4:42:28:06:20:76:
42:39:9f:d4:5a:ab:5b:aa:87:df:68:39:f0:06:a1:
c4:c0:44:a0:a2:98:79:5f:be:9a:b9:29:47:ec:98:
58:ad:0d:a6:5e:55:b7:f0:89:ba:82:a1:27:91:27:
1b:e0:a4:f2:f6:1e:c5:a3:43:21:83:2e:10:77:5c:
e1:76:0e:21:a2:fe:54:6a:88:28:18:ff:42:33:85:
a1:3f:c9:7f:d5:1c:fb:46:ac:a8:3f:d6:bb:09:1f:
13:fb:d6:b4:33:60:08:07:e0:de:c0:65:47:be:1b:
ac:69:12:4c:5d:5a:6b:0f:64:82:e2:ad:49:f3:84:
7c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C3:96:1F:0C:52:E3:B4:B7:A0:71:9A:A1:F7:EA:6F:D5:E9:49:84
X509v3 Authority Key Identifier:
keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:2c:fd:f6:a1:4a:c1:a3:b7:fd:91:48:f0:43:53:71:e4:15:
e1:1c:44:13:55:b1:2f:69:99:8d:d0:29:43:27:39:66:1a:15:
0e:4a:b4:87:e8:f2:bf:b7:1e:13:7a:c2:0b:55:b8:e6:e2:27:
d6:1d:70:97:e0:7b:1a:53:0e:1a:da:13:5e:ac:a0:80:f5:2f:
4b:c8:a2:50:9a:6f:14:7d:b3:6b:78:07:8d:c9:fd:55:87:5d:
0c:24:76:c9:8a:fc:4f:5a:b3:78:4a:ea:2f:e2:c3:c2:78:fc:
b6:d9:f9:85:0d:e0:f8:68:5c:02:ee:ef:1c:f7:03:fb:35:20:
88:64:aa:64:60:63:6e:aa:2f:2f:b8:f9:ab:6e:88:06:56:d6:
65:0a:ab:48:c6:3b:ba:80:42:d3:7a:62:73:8f:db:52:9d:50:
6a:66:dc:5c:d6:ec:b7:2d:75:1a:30:41:fe:0c:86:c5:ca:2c:
2f:e2:c0:9c:d6:0d:9e:55:5c:f4:22:fe:33:ff:7b:80:3b:11:
34:5a:df:e4:12:21:7f:fb:fe:60:c6:88:68:75:56:ed:ba:8c:
26:b1:a7:e0:c5:0f:73:0d:5b:e1:49:2c:d4:55:50:d3:e1:b2:
7a:f7:6e:56:af:87:ca:a6:d0:8d:7d:85:ad:3f:f9:d1:d0:8c:
cd:55:c7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:58 2025 by rpki-client