Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
File: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft (raw, json)
Hash identifier: QamkuNJm8fBtA0Zn4DQ/D9NjKKE64ZqVkd0j/wGsbeE=
Subject key identifier: 46:91:4B:20:10:2A:88:7C:87:2B:13:4A:C8:C8:D3:4F:7C:24:E8:CC
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial: 0197B6A1E2925FE9ABF653CA87ED499AD5F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
Manifest number: 02AA
Signing time: Sat 28 Jun 2025 13:02:31 +0000
Manifest this update: Sat 28 Jun 2025 13:02:31 +0000
Manifest next update: Sun 29 Jun 2025 13:02:31 +0000
Files and hashes: 1: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl (hash: eFr599OobDBaSITN+Pfx00CXkQnEAom4jpHZl1Z8tw8=)
2: hYR6rq77HQceE2IcxPUKLad5kL4.roa (hash: +LqXV4/8ubLYmgyeWGpSO5Gif7f3L1TnP8kIXrA9Fjc=)
3: wn4QAHp5Rzb8lXeVuE7q6L111pE.roa (hash: 4bKaaL//q7uEAPyKRq4kflXDoCt6wQEv9YHzvR6r61o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e2:92:5f:e9:ab:f6:53:ca:87:ed:49:9a:d5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Validity
Not Before: Jun 28 13:02:31 2025 GMT
Not After : Jun 29 13:02:31 2025 GMT
Subject: CN=46914b20102a887c872b134ac8c8d34f7c24e8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b5:71:94:e5:df:5a:85:3a:fa:ce:14:37:19:
2d:80:52:3a:8a:d0:b4:dc:66:f3:17:0d:53:2a:4e:
20:42:3c:58:95:c0:a0:29:01:55:21:71:c1:f7:a6:
86:91:10:d5:bb:8b:fe:91:be:09:b0:3c:d6:d1:71:
5e:8e:52:e9:96:2a:4a:75:7d:1c:43:f2:80:82:8d:
39:06:e5:c6:49:27:38:3c:2a:33:ba:89:3f:60:b8:
cc:93:3c:75:56:b5:fc:54:2c:7b:47:8e:1c:58:d5:
73:65:75:ba:95:e6:46:5f:ee:ff:bd:ed:92:30:97:
07:be:65:3e:27:86:ed:f2:8e:00:c8:29:a0:2b:3d:
e2:64:ee:70:d7:0b:62:48:13:4a:51:20:fb:35:6c:
af:c5:f3:1c:10:17:0f:4e:18:11:23:0f:06:64:8b:
57:f9:9c:79:ad:58:fb:15:05:3a:7e:bb:10:3a:8f:
6c:3e:88:94:ee:9a:b0:ba:b9:4b:da:35:2f:25:33:
73:0d:21:9f:43:65:20:a3:bb:95:76:b9:98:80:a9:
9d:7b:e8:d2:6e:e0:a0:30:e6:0c:41:d9:84:40:2a:
f6:46:c1:e7:c0:25:42:08:db:8d:a8:35:47:40:cb:
07:55:34:a7:74:12:d8:53:bd:ca:05:4c:8f:77:4e:
63:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:91:4B:20:10:2A:88:7C:87:2B:13:4A:C8:C8:D3:4F:7C:24:E8:CC
X509v3 Authority Key Identifier:
keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e6:b4:24:32:2c:33:99:56:7f:82:a9:58:db:7b:c1:69:a4:
38:54:94:2a:12:7f:1c:c9:c6:36:ba:37:6d:4a:1c:44:62:29:
c5:87:9d:2f:8c:93:2d:5b:f5:ca:42:c4:3a:68:78:8b:ec:34:
2d:e2:0a:b4:ca:07:7e:d4:3c:03:20:61:17:7e:49:52:3c:d3:
0c:8b:2a:7c:3b:87:6e:96:30:5b:35:10:e2:fd:e2:1a:ed:0a:
5c:7b:f0:5d:25:95:89:80:03:76:f9:ac:95:26:af:ec:25:05:
27:be:b3:ce:47:c5:a3:a8:63:67:19:39:88:d0:d5:3f:90:3e:
50:36:48:2c:60:00:c6:2d:7a:fd:5c:be:c3:71:d7:fd:19:69:
95:e0:79:4b:4c:91:66:22:91:26:ee:42:3f:71:ed:47:c2:20:
a5:90:b2:6e:90:3a:80:fc:54:ad:1c:a5:0e:2d:5d:96:a1:c3:
26:ee:5f:ee:c1:d2:0f:68:44:88:28:65:d2:4d:6d:39:eb:d3:
3d:f2:7d:78:81:0e:c2:61:9c:b6:03:2a:69:bb:e0:b8:ec:5e:
c7:8c:56:26:85:9f:d2:02:ee:29:84:f2:6e:d1:07:c5:66:3c:
45:cb:31:11:68:d7:a2:ad:6c:73:3f:68:a9:e5:bf:d9:d4:f6:
f9:4e:d0:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oeKSX+mr9lPKh+1JmtXwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YjhmYjkyMjgwYWIwNWI0NDMyZTQzYjk1NDUwZTczYjI3
NzNkNWIwHhcNMjUwNjI4MTMwMjMxWhcNMjUwNjI5MTMwMjMxWjAzMTEwLwYDVQQD
Eyg0NjkxNGIyMDEwMmE4ODdjODcyYjEzNGFjOGM4ZDM0ZjdjMjRlOGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorVxlOXfWoU6+s4UNxktgFI6itC0
3GbzFw1TKk4gQjxYlcCgKQFVIXHB96aGkRDVu4v+kb4JsDzW0XFejlLplipKdX0c
Q/KAgo05BuXGSSc4PCozuok/YLjMkzx1VrX8VCx7R44cWNVzZXW6leZGX+7/ve2S
MJcHvmU+J4bt8o4AyCmgKz3iZO5w1wtiSBNKUSD7NWyvxfMcEBcPThgRIw8GZItX
+Zx5rVj7FQU6frsQOo9sPoiU7pqwurlL2jUvJTNzDSGfQ2Ugo7uVdrmYgKmde+jS
buCgMOYMQdmEQCr2RsHnwCVCCNuNqDVHQMsHVTSndBLYU73KBUyPd05jHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEaRSyAQKoh8hysTSsjI0098JOjMMB8GA1UdIwQY
MBaAFAm4+5IoCrBbRDLkO5VFDnOydz1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2JqN2tpZ0tzRnRFTXVRN2xVVU9jN0ozUFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83MjZkMTUtNWMxOS00ZTg1LWJjNTkt
ZGE3Mzk4NTZjZmI4LzEvQ2JqN2tpZ0tzRnRFTXVRN2xVVU9jN0ozUFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS83MjZkMTUtNWMxOS00ZTg1LWJjNTktZGE3Mzk4NTZjZmI4
LzEvQ2JqN2tpZ0tzRnRFTXVRN2xVVU9jN0ozUFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOa0JDIs
M5lWf4KpWNt7wWmkOFSUKhJ/HMnGNro3bUocRGIpxYedL4yTLVv1ykLEOmh4i+w0
LeIKtMoHftQ8AyBhF35JUjzTDIsqfDuHbpYwWzUQ4v3iGu0KXHvwXSWViYADdvms
lSav7CUFJ76zzkfFo6hjZxk5iNDVP5A+UDZILGAAxi16/Vy+w3HX/RlpleB5S0yR
ZiKRJu5CP3HtR8IgpZCybpA6gPxUrRylDi1dlqHDJu5f7sHSD2hEiChl0k1tOevT
PfJ9eIEOwmGctgMqabvguOxex4xWJoWf0gLuKYTybtEHxWY8RcsxEWjXoq1scz9o
qeW/2dT2+U7Q9g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:15 2025 by rpki-client