Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
File: CbtjJ836FlJNx9AzcTivMl-14tk.mft (raw, json)
Hash identifier: CowgoXio5649R/yk9xUboRcC3SplbKfoucoqcCF+gzQ=
Subject key identifier: A5:CB:17:55:B4:95:42:64:3A:D2:46:2F:6A:EE:4C:74:7B:23:1E:34
Authority key identifier: 09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
Certificate issuer: /CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Certificate serial: 0199FDD9BBCAA60310FD73FF915034A16E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
Manifest number: 14A7
Signing time: Sun 19 Oct 2025 19:02:08 +0000
Manifest this update: Sun 19 Oct 2025 19:02:08 +0000
Manifest next update: Mon 20 Oct 2025 19:02:08 +0000
Files and hashes: 1: CbtjJ836FlJNx9AzcTivMl-14tk.crl (hash: gsM8LdSjaBxEj9x1JjiDE+wHs+iJPbOUs1j4dE6RSUI=)
2: o4Fd53Yi8gf1Z2E5SaQrj9OqD_Y.roa (hash: ju/o7BILnihNNjEqI90onU7QdzoVAl2fjP/NUv+3xWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:bb:ca:a6:03:10:fd:73:ff:91:50:34:a1:6e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Validity
Not Before: Oct 19 19:02:08 2025 GMT
Not After : Oct 20 19:02:08 2025 GMT
Subject: CN=a5cb1755b49542643ad2462f6aee4c747b231e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:99:2f:9f:1e:24:36:89:4b:81:7f:ed:4f:
b2:69:94:ee:75:ea:ba:2e:f9:79:4a:52:50:18:39:
98:d2:7a:be:ca:bf:8e:d8:f8:c3:f0:31:ab:b8:7b:
72:47:d0:43:ef:67:c9:9c:82:f0:13:35:69:c4:99:
9a:dd:69:9e:62:78:f1:83:db:53:41:34:d0:84:28:
77:22:32:c0:a4:b4:df:b6:16:0e:8f:56:63:c1:93:
51:77:52:fd:88:45:2f:23:8c:a8:69:3b:fb:51:f9:
07:81:14:42:8c:b7:c9:dc:b8:ac:02:f0:e2:a2:7d:
b4:93:6c:69:72:44:65:80:8a:57:7d:51:58:5b:11:
a3:92:8b:76:13:89:b6:79:fc:e6:d7:fd:b0:09:6f:
f1:7e:07:dd:23:fa:a9:0c:7b:5b:b8:e8:b6:b6:13:
6b:88:be:d3:05:bf:10:20:12:cf:af:7f:93:77:2d:
3e:53:51:42:2e:b3:4e:30:d8:bc:e1:ea:ec:28:ef:
62:31:f6:d1:9a:2e:13:b0:19:a8:54:16:8f:7e:ef:
d5:5f:96:b7:7a:30:b8:89:32:c8:42:92:9f:24:ab:
87:5b:7a:8d:a4:db:fa:46:07:64:e6:57:ad:24:f9:
2d:c3:1b:75:f7:a4:85:e9:a7:d0:44:57:1f:fb:6f:
d0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CB:17:55:B4:95:42:64:3A:D2:46:2F:6A:EE:4C:74:7B:23:1E:34
X509v3 Authority Key Identifier:
keyid:09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:45:87:ad:08:c8:b4:10:57:b6:83:7e:51:18:62:44:df:0f:
be:17:fa:48:4f:9e:58:32:e7:e1:bb:94:23:67:c8:35:f3:c0:
32:3e:e6:60:55:d4:ed:a6:0b:12:9a:f4:51:28:41:d2:a6:37:
84:fd:67:eb:f9:c7:f7:f0:f2:42:3c:11:82:a9:c7:72:28:de:
9d:3e:ac:cf:9c:52:ec:dd:66:61:77:7c:fd:77:f5:08:8c:4d:
33:89:e2:51:6d:7f:cb:ba:87:49:c9:95:0e:4a:68:6c:3e:57:
3d:b5:be:74:df:9a:58:6e:72:da:82:e7:ba:b4:a1:2c:ee:9c:
60:50:87:c8:cd:66:dc:4e:1e:40:df:82:27:6b:6e:85:45:9d:
01:b7:14:a8:08:1e:f6:7d:70:33:08:d2:ac:e1:ab:35:b9:0c:
48:17:5a:80:43:b8:b7:39:c3:67:7a:57:b0:03:51:0d:1d:83:
82:15:0e:34:d5:6f:26:d6:07:e2:b0:7f:17:65:1a:14:00:c8:
3e:57:f6:f6:51:4d:42:9f:91:d9:b8:8b:b3:12:ce:21:62:9b:
d0:ed:ca:00:10:63:b4:02:77:3c:3e:9e:60:60:7c:25:2c:38:
48:8c:88:03:34:be:8f:22:c2:05:5c:6a:00:a5:f6:39:74:12:
ea:60:46:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:33 2025 by rpki-client