Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
File: cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft (raw, json)
Hash identifier: wcWrWzPLIHAuu23PoGRoI/AvRbuSG8LOCrCRK6pV6Ok=
Subject key identifier: 8B:FE:10:94:25:1B:DC:86:23:89:56:66:6D:0C:AD:CD:12:D0:E3:7B
Authority key identifier: 71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
Certificate issuer: /CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Certificate serial: 0199FAD8300E73710FB989C0FFF7838869F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
Manifest number: 0825
Signing time: Sun 19 Oct 2025 05:01:36 +0000
Manifest this update: Sun 19 Oct 2025 05:01:36 +0000
Manifest next update: Mon 20 Oct 2025 05:01:36 +0000
Files and hashes: 1: cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl (hash: qdQvXeUI5C/aXCqQOL1R+KPeSRw6nHKo95xeUwZikxk=)
2: nA6xks4oQE9N25Xp7uQGkNyo-7Y.roa (hash: F+E2ylwyKz3DO5lKloF7/MKQO4W4GhOJOnJmcBpu/7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:30:0e:73:71:0f:b9:89:c0:ff:f7:83:88:69:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Validity
Not Before: Oct 19 05:01:36 2025 GMT
Not After : Oct 20 05:01:36 2025 GMT
Subject: CN=8bfe1094251bdc86238956666d0cadcd12d0e37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:e6:82:bc:8f:ad:20:99:63:25:95:fb:fb:
36:14:a1:b1:70:75:e7:32:ec:09:8f:4b:44:23:1c:
f6:7c:95:88:1e:74:ea:d4:6e:e6:0d:d0:69:e2:ee:
fd:dc:47:e5:67:04:6a:ea:ee:19:ef:ee:d6:c0:05:
80:77:59:9e:0a:34:9d:24:7c:6e:09:e4:7f:b7:61:
2b:50:20:73:65:26:ab:ce:c7:46:30:ab:34:a5:f6:
ca:f8:62:6a:1b:a0:56:c9:4e:20:96:b6:99:9c:aa:
38:69:b3:3c:4c:3a:14:a6:92:de:8b:fb:6f:17:0f:
a0:c4:17:6d:7d:ec:59:50:6c:a1:20:95:e0:0e:20:
32:18:b3:0c:88:ee:d4:ec:11:1b:a6:da:e5:02:ef:
56:f2:c0:91:ca:a7:b6:be:f2:23:d5:cb:e4:a8:23:
8f:f9:ec:a4:f6:6d:b6:4b:86:66:db:e7:91:2f:c6:
25:4c:89:88:5c:13:70:42:5b:61:87:a4:85:b5:23:
14:31:e1:fb:7c:82:fb:aa:f0:bd:9d:9b:46:90:f3:
75:09:51:0d:5b:3f:05:33:5d:47:f3:34:3d:44:77:
4c:ba:2e:53:d9:f3:b0:d3:81:60:04:68:f8:28:20:
4e:bd:37:f2:9e:21:21:85:a2:c0:53:97:25:76:e9:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FE:10:94:25:1B:DC:86:23:89:56:66:6D:0C:AD:CD:12:D0:E3:7B
X509v3 Authority Key Identifier:
keyid:71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:90:7c:af:97:cd:83:93:4f:45:ff:9c:b7:4b:b8:16:4b:cc:
3c:59:fe:56:20:a6:ca:3e:e2:5b:4e:c9:61:42:79:fc:a2:ff:
da:6a:ef:ee:60:c3:63:f7:3a:4e:84:dc:4f:96:9a:a0:ea:82:
ec:a9:5b:de:c5:ce:25:7e:73:00:53:bc:48:d7:81:a4:c2:7d:
b6:b5:10:56:4e:95:cb:1b:4c:73:dd:4d:71:f6:63:2a:07:5d:
a3:c7:42:73:aa:ed:73:06:17:2a:5a:12:b3:54:14:89:e5:12:
ca:01:8c:02:7e:3f:62:93:42:5d:96:56:b9:08:f5:83:bf:64:
18:1e:02:81:bf:ab:ce:ff:53:4c:10:88:0d:50:15:57:69:b0:
76:4d:46:66:5a:93:04:43:88:fe:f2:60:cd:f4:16:f9:79:b2:
bb:38:1f:e2:24:bc:80:36:50:72:16:6b:53:48:58:df:15:72:
b1:a6:1e:82:06:51:0b:ba:a1:ac:e8:4d:01:cf:36:27:81:f8:
4a:2f:90:24:ef:a1:00:01:91:27:b9:02:6e:f4:d6:8a:b8:d2:
5c:d3:58:d4:15:d0:54:f9:ee:eb:88:a6:bc:a3:37:f7:48:d1:
ca:99:e2:21:a0:c2:d6:05:3c:5f:33:f5:d7:2c:0c:cd:7a:8b:
c8:9a:2d:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62DAOc3EPuYnA//eDiGnxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYjJiMDRmZjliNzJlYmZiZWI5MTgzODUyMzNlMDI4Yzhm
M2ZkZjEwHhcNMjUxMDE5MDUwMTM2WhcNMjUxMDIwMDUwMTM2WjAzMTEwLwYDVQQD
Eyg4YmZlMTA5NDI1MWJkYzg2MjM4OTU2NjY2ZDBjYWRjZDEyZDBlMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzrmgryPrSCZYyWV+/s2FKGxcHXn
MuwJj0tEIxz2fJWIHnTq1G7mDdBp4u793EflZwRq6u4Z7+7WwAWAd1meCjSdJHxu
CeR/t2ErUCBzZSarzsdGMKs0pfbK+GJqG6BWyU4glraZnKo4abM8TDoUppLei/tv
Fw+gxBdtfexZUGyhIJXgDiAyGLMMiO7U7BEbptrlAu9W8sCRyqe2vvIj1cvkqCOP
+eyk9m22S4Zm2+eRL8YlTImIXBNwQlthh6SFtSMUMeH7fIL7qvC9nZtGkPN1CVEN
Wz8FM11H8zQ9RHdMui5T2fOw04FgBGj4KCBOvTfyniEhhaLAU5cldulkqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIv+EJQlG9yGI4lWZm0Mrc0S0ON7MB8GA1UdIwQY
MBaAFHGysE/5ty6/vrkYOFIz4CjI8/3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2JLd1RfbTNMci0tdVJnNFVqUGdLTWp6X2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84N2U2NjYtNzI0OC00MjQwLWI0ZTQt
OTU5NTU5Yjk2Zjg3LzEvY2JLd1RfbTNMci0tdVJnNFVqUGdLTWp6X2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC84N2U2NjYtNzI0OC00MjQwLWI0ZTQtOTU5NTU5Yjk2Zjg3
LzEvY2JLd1RfbTNMci0tdVJnNFVqUGdLTWp6X2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5B8r5fN
g5NPRf+ct0u4FkvMPFn+ViCmyj7iW07JYUJ5/KL/2mrv7mDDY/c6ToTcT5aaoOqC
7Klb3sXOJX5zAFO8SNeBpMJ9trUQVk6VyxtMc91NcfZjKgddo8dCc6rtcwYXKloS
s1QUieUSygGMAn4/YpNCXZZWuQj1g79kGB4Cgb+rzv9TTBCIDVAVV2mwdk1GZlqT
BEOI/vJgzfQW+Xmyuzgf4iS8gDZQchZrU0hY3xVysaYeggZRC7qhrOhNAc82J4H4
Si+QJO+hAAGRJ7kCbvTWirjSXNNY1BXQVPnu64imvKM390jRypniIaDC1gU8XzP1
1ywMzXqLyJotYA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:14 2025 by rpki-client