Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
File: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft (raw, json)
Hash identifier: Gt4Fi7b3eQ7S+BVh3yupoc9AkV6fMo/YVE6tzGDh09w=
Subject key identifier: 61:18:11:2D:5E:09:BA:79:6D:76:3C:8E:E5:9D:75:7A:A4:C3:06:0D
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial: 0198D472A296E7BF017163C99ABC37224336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
Manifest number: 033E
Signing time: Sat 23 Aug 2025 01:02:19 +0000
Manifest this update: Sat 23 Aug 2025 01:02:19 +0000
Manifest next update: Sun 24 Aug 2025 01:02:19 +0000
Files and hashes: 1: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl (hash: dy7iIEprmnxQkdBtrY+pOw3CeNVFEbXT9m29tza/fIg=)
2: hYR6rq77HQceE2IcxPUKLad5kL4.roa (hash: +LqXV4/8ubLYmgyeWGpSO5Gif7f3L1TnP8kIXrA9Fjc=)
3: wn4QAHp5Rzb8lXeVuE7q6L111pE.roa (hash: 4bKaaL//q7uEAPyKRq4kflXDoCt6wQEv9YHzvR6r61o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:a2:96:e7:bf:01:71:63:c9:9a:bc:37:22:43:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Validity
Not Before: Aug 23 01:02:19 2025 GMT
Not After : Aug 24 01:02:19 2025 GMT
Subject: CN=6118112d5e09ba796d763c8ee59d757aa4c3060d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a1:9d:6d:96:1e:df:ba:e4:90:b4:e2:6e:43:
94:ef:9d:03:e2:c1:69:cc:b4:2c:58:e3:e0:32:b3:
d8:df:a8:8f:b2:b9:a5:03:cf:24:26:45:86:52:58:
df:2b:9b:e4:99:7e:5d:05:ae:5c:41:3c:80:5b:d5:
17:7c:7b:5b:4b:8d:72:c0:79:80:47:58:6a:0f:0f:
bd:12:2d:10:d0:9f:18:29:a9:e7:2b:ee:e8:bc:c4:
56:7a:b2:5e:6e:03:3e:c7:c6:70:15:31:ec:c6:55:
64:aa:8c:45:50:76:a0:d8:4a:60:0b:cf:92:f6:9e:
56:96:b4:e5:a8:5f:59:12:6e:d4:03:c2:20:01:3d:
eb:f2:2a:90:80:1f:30:13:63:03:b8:92:a6:7e:b1:
0b:40:ee:dd:68:55:ed:72:dd:53:eb:09:d5:3d:4d:
b2:92:b5:97:33:3f:74:7c:72:a0:db:d0:00:61:24:
41:68:1b:c3:9d:a3:7b:33:91:17:ad:2c:0f:55:ba:
6d:7d:ed:58:8b:81:4c:f7:89:50:5b:2f:f8:d3:94:
9b:d2:ad:be:e3:47:76:01:1f:34:cd:be:44:7d:02:
9c:c1:e6:0f:4f:b9:dc:94:a5:cd:a9:9d:c5:46:90:
ee:75:7e:b9:51:67:51:f7:eb:a7:42:c3:37:6a:00:
dd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:18:11:2D:5E:09:BA:79:6D:76:3C:8E:E5:9D:75:7A:A4:C3:06:0D
X509v3 Authority Key Identifier:
keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:eb:12:f6:fd:6e:99:d6:64:56:2c:a9:97:e3:fc:2b:91:9e:
31:cf:c6:1f:58:ce:32:91:78:4a:3d:5d:bd:22:04:88:a2:15:
6f:d9:2b:02:1c:34:69:bc:1a:c4:3b:36:d5:41:9a:1c:c8:70:
75:76:fb:5a:0c:3f:44:20:46:13:52:1d:4a:9d:05:ba:de:83:
ba:68:27:11:2a:82:92:1d:24:f7:b6:e3:10:e3:db:8a:6d:e9:
79:46:bc:25:50:3f:8b:70:49:de:c4:df:23:33:26:49:2e:41:
6e:0b:2d:7e:7f:49:5f:2f:6e:0d:fe:fa:0c:39:48:ea:1f:87:
19:51:b3:1d:7e:d1:44:e4:65:af:2f:68:63:22:7a:e2:4e:01:
fc:39:7b:44:db:7b:4d:da:61:31:79:65:90:ab:7c:1d:55:ea:
5d:b3:03:c8:75:41:7a:5a:65:ba:2d:2b:59:c2:b5:9a:ca:79:
72:6f:56:54:6e:ed:f6:a9:d6:a5:86:4a:2c:31:c6:d1:d1:6f:
36:3a:f6:d5:40:24:4d:7e:8b:22:99:ff:60:d0:da:cf:e1:5e:
b1:ff:8c:cf:a8:61:89:d1:1f:d3:de:26:c5:5f:7e:95:08:e4:
5c:fa:08:70:07:c9:86:48:7f:ee:66:1d:c6:dd:1b:05:79:3a:
84:bb:a5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:54 2025 by rpki-client