Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
File: cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft (raw, json)
Hash identifier: 2zQMR6yPxdBFzRumDxi7h3qeNlr9e0PFUPggFeQFnu4=
Subject key identifier: 52:3C:D9:59:64:75:B7:78:CA:0E:4D:A8:58:57:9C:04:40:95:BA:59
Authority key identifier: 71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
Certificate issuer: /CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Certificate serial: 0197B77C254B2B865665A2F2E2C1999A4606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
Manifest number: 06F9
Signing time: Sat 28 Jun 2025 17:00:55 +0000
Manifest this update: Sat 28 Jun 2025 17:00:55 +0000
Manifest next update: Sun 29 Jun 2025 17:00:55 +0000
Files and hashes: 1: cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl (hash: ndj6l5Dkv887yR2EURtFB2UHTsfl3z7DY2Q9gkBasIs=)
2: nA6xks4oQE9N25Xp7uQGkNyo-7Y.roa (hash: F+E2ylwyKz3DO5lKloF7/MKQO4W4GhOJOnJmcBpu/7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:25:4b:2b:86:56:65:a2:f2:e2:c1:99:9a:46:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Validity
Not Before: Jun 28 17:00:55 2025 GMT
Not After : Jun 29 17:00:55 2025 GMT
Subject: CN=523cd9596475b778ca0e4da858579c044095ba59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7b:d5:86:cd:1d:1d:50:db:95:c3:23:22:d0:
16:a5:db:c4:df:43:70:6f:6b:32:2c:11:f6:d9:d5:
0d:75:34:cc:75:ab:c7:63:95:1a:a6:b5:ce:92:79:
c3:76:bf:41:d4:bc:24:f7:79:bb:77:f4:47:2e:8b:
12:77:ef:0d:34:37:ba:07:56:a5:ee:34:51:c6:90:
e0:3b:ea:46:57:a0:a3:b4:8a:99:5a:a8:03:16:3d:
fd:b3:a7:34:fd:1c:b4:fd:a6:6a:44:63:ee:f6:2b:
c2:d8:0e:ae:9a:08:1d:67:66:98:e7:90:72:19:02:
ed:cb:4f:c0:06:2a:a4:2a:28:97:12:f8:e6:af:21:
39:6d:5a:c7:b9:a0:40:03:d2:e3:f9:fe:f2:ee:a4:
c1:fa:e7:29:06:61:45:3e:5c:db:05:ca:27:20:bf:
01:af:d3:5a:da:42:aa:1f:03:70:b2:b2:db:ca:64:
cd:c9:92:6c:50:87:c4:fb:86:a4:33:9d:0c:8e:eb:
ce:99:ac:59:a8:2d:a0:52:df:19:6a:8f:e9:ce:c1:
d0:d3:91:b3:97:9b:be:de:88:47:33:b2:7c:ce:7a:
c4:90:61:f9:24:d4:19:fb:6b:80:0f:ab:d2:58:e0:
53:51:e0:97:bf:d9:45:ad:17:b2:71:1c:f8:18:0d:
d8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3C:D9:59:64:75:B7:78:CA:0E:4D:A8:58:57:9C:04:40:95:BA:59
X509v3 Authority Key Identifier:
keyid:71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b1:56:02:fb:ba:e2:eb:93:94:e4:c4:70:20:1a:fe:3d:bd:
49:80:9d:a5:90:82:fc:9c:6a:de:fd:7e:58:f7:69:74:96:ff:
eb:6c:ea:42:90:e0:47:0b:1d:6a:e9:8a:a6:13:0a:2d:00:e7:
75:4f:c7:88:fd:b3:07:a4:cc:e6:08:d5:ad:47:fd:c9:27:c1:
e2:b1:19:df:f4:8a:e4:fe:13:b0:8f:24:e0:80:ef:01:d9:f0:
6c:75:aa:a5:96:29:47:f8:6d:f7:5a:9e:55:50:b9:1c:81:57:
86:06:ff:4a:b1:a6:fa:60:b0:30:cd:15:f9:9b:00:bd:0b:94:
e8:da:38:03:d7:fc:00:12:c7:cb:47:76:3c:7c:fa:e2:03:4c:
b1:90:f5:3a:e2:d2:2c:2e:0e:a6:8d:ab:7e:00:b6:71:b9:45:
49:82:56:89:5f:fa:40:b7:04:21:87:29:af:08:82:b5:14:04:
66:55:23:f1:df:56:53:41:4c:13:2d:92:c0:1b:4f:c8:9c:58:
72:56:f7:90:ed:84:48:fe:30:73:af:79:fb:cb:ef:f6:26:5e:
f5:e3:f7:9a:48:51:2f:87:3f:12:df:15:bb:ef:39:c2:fe:3a:
74:20:a6:79:fb:40:e7:89:cf:ea:8b:6b:1c:d7:67:bb:55:76:
c6:2b:42:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:07 2025 by rpki-client