Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
File: cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft (raw, json)
Hash identifier: lx9nFltGdx8v61/LEVRpqvVjbDVeTEuCM/cvY4i+BYQ=
Subject key identifier: 1D:CE:5A:E3:B4:93:19:43:F3:01:00:4D:9A:B4:78:E2:53:F5:AD:6C
Authority key identifier: 71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
Certificate issuer: /CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Certificate serial: 0198D54DFCCE400DD65F198359F547E03878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
Manifest number: 078D
Signing time: Sat 23 Aug 2025 05:01:54 +0000
Manifest this update: Sat 23 Aug 2025 05:01:54 +0000
Manifest next update: Sun 24 Aug 2025 05:01:54 +0000
Files and hashes: 1: cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl (hash: 13soAWtbahseCZGLJAcC/Ue1FxNx5Ya0pSRM8FWhDXc=)
2: nA6xks4oQE9N25Xp7uQGkNyo-7Y.roa (hash: F+E2ylwyKz3DO5lKloF7/MKQO4W4GhOJOnJmcBpu/7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:fc:ce:40:0d:d6:5f:19:83:59:f5:47:e0:38:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Validity
Not Before: Aug 23 05:01:54 2025 GMT
Not After : Aug 24 05:01:54 2025 GMT
Subject: CN=1dce5ae3b4931943f301004d9ab478e253f5ad6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:4e:83:76:d7:e4:a3:ca:67:ae:ce:87:85:
1f:84:bd:44:38:ad:b1:5a:55:cd:31:56:12:0a:76:
4a:6f:59:66:d2:24:83:8b:c8:e7:5f:95:70:aa:12:
20:6a:c3:9c:d7:5d:dd:2e:dc:e0:d1:25:04:85:37:
51:aa:f1:7a:28:00:17:a9:bf:48:45:35:51:91:ce:
05:06:48:c2:20:8c:0f:52:56:55:42:85:c0:dd:31:
1d:eb:ac:2d:b8:2d:4e:03:76:89:0f:c8:28:1f:c8:
f6:38:9a:a4:bf:7d:a3:78:55:fd:77:82:7a:76:d7:
07:05:3a:9e:2e:38:3b:10:97:82:33:be:e9:3a:4e:
3a:8e:ed:98:1a:05:d1:78:3a:86:28:0e:86:2c:2b:
fe:98:8b:4e:d6:c0:1d:ff:ba:39:be:56:c7:94:4a:
a0:5b:c9:f9:17:a2:af:61:2b:ce:38:bc:a7:a4:2b:
0b:e3:9b:f0:82:2a:9f:0b:e8:d3:3a:00:fa:14:10:
c1:1e:dd:a0:21:c8:ac:f4:ea:56:78:6b:86:e0:51:
71:2e:91:a1:d0:44:7c:99:49:46:2e:01:e9:3d:57:
7b:45:1f:a7:21:84:3e:aa:d4:8d:58:8a:14:dd:ad:
fa:38:30:fe:1e:12:00:2a:04:18:0b:0d:00:6e:7e:
6d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CE:5A:E3:B4:93:19:43:F3:01:00:4D:9A:B4:78:E2:53:F5:AD:6C
X509v3 Authority Key Identifier:
keyid:71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:31:79:45:18:da:76:15:bf:9a:5c:e2:d2:7b:20:0a:8d:a5:
96:4a:f7:10:29:00:38:e0:85:ea:08:b8:e9:ae:d0:9f:1e:84:
a5:c3:15:20:42:39:7d:e5:29:86:3c:a2:65:31:9a:02:fc:ef:
50:9c:4d:a0:c6:75:ad:85:20:aa:51:03:50:d7:d9:aa:2e:bb:
a9:2b:57:71:db:ba:18:41:cd:12:e6:78:7f:84:97:b0:4d:44:
d4:17:99:21:84:06:33:b4:c5:20:7d:fe:17:4a:28:1f:b3:ed:
fe:5d:1b:17:0c:b7:b1:e6:44:1a:61:bb:ae:b5:55:e9:ae:aa:
4c:a1:99:bf:d2:0f:a8:4b:1b:9b:27:a7:4b:7a:dc:52:43:0a:
34:a6:8b:be:4f:e9:de:4e:a2:73:03:88:03:a9:9e:9a:1b:ea:
c0:01:02:f1:b7:76:99:11:71:08:7f:90:25:86:c7:16:98:77:
d5:ad:fd:ea:fa:15:f1:f0:69:47:a8:9a:c8:a2:5a:55:5e:2c:
0c:83:eb:b4:f8:13:60:85:22:5f:e1:d3:3b:29:a4:55:ab:8b:
3d:e2:ed:16:af:88:1c:f8:95:e5:72:c6:0b:71:9c:72:75:c1:
46:a2:03:a3:16:19:91:bb:85:dc:9c:76:dc:d0:de:8f:3b:a2:
5c:fe:74:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:25 2025 by rpki-client