Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
File: CbtjJ836FlJNx9AzcTivMl-14tk.mft (raw, json)
Hash identifier: KEp3H/vFJ55P/lbtB9Sj2qMs0jSz2TOUeSEkGQm4KcM=
Subject key identifier: 68:29:85:66:4D:7B:40:21:4F:F9:6D:E4:25:A3:11:6A:4F:CF:FB:C3
Authority key identifier: 09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
Certificate issuer: /CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Certificate serial: 0198D660B04CBACDC43108A6993835F2990D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
Manifest number: 140E
Signing time: Sat 23 Aug 2025 10:01:57 +0000
Manifest this update: Sat 23 Aug 2025 10:01:57 +0000
Manifest next update: Sun 24 Aug 2025 10:01:57 +0000
Files and hashes: 1: CbtjJ836FlJNx9AzcTivMl-14tk.crl (hash: CXaC46hLO5uu3PpxbZxUMkCpv79L11495ZDSmm/ScjU=)
2: o4Fd53Yi8gf1Z2E5SaQrj9OqD_Y.roa (hash: ju/o7BILnihNNjEqI90onU7QdzoVAl2fjP/NUv+3xWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:b0:4c:ba:cd:c4:31:08:a6:99:38:35:f2:99:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09bb6327cdfa16524dc7d0337138af325fb5e2d9
Validity
Not Before: Aug 23 10:01:57 2025 GMT
Not After : Aug 24 10:01:57 2025 GMT
Subject: CN=682985664d7b40214ff96de425a3116a4fcffbc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:1f:64:c4:34:0f:18:a8:30:7b:19:ca:1f:
ee:03:eb:28:af:73:a5:25:c8:50:a0:99:b2:a6:a8:
aa:da:6b:f6:c4:82:68:b6:17:f5:ae:b1:21:a5:57:
31:02:30:9c:cd:bd:41:5e:60:6a:66:5a:64:70:e8:
07:88:a8:fd:b4:fc:da:05:da:17:ef:8f:f0:05:b5:
dd:37:cf:51:2e:5b:c3:1d:e9:ef:a5:ef:e5:f9:f8:
85:d0:f5:79:b8:99:b3:d4:27:2e:4c:bf:c3:8b:13:
76:cb:b1:dd:2b:20:96:45:66:61:46:70:28:3a:76:
d2:dc:9f:e6:94:22:77:29:66:e6:47:b9:fd:0d:a1:
6e:44:79:4c:18:12:8b:69:b3:db:f1:0c:e7:9b:c2:
a0:cb:aa:21:89:d9:c2:2a:c4:56:67:c2:e5:19:93:
ae:e0:bc:0e:28:55:06:cb:88:28:8f:3c:e6:2f:f3:
20:b0:97:6d:b7:11:2b:f3:8d:df:47:80:e0:7a:ed:
8f:e2:c6:11:4e:7d:dc:c4:7d:81:73:47:df:24:a7:
7a:0c:b5:49:7f:b7:04:18:5e:43:20:de:76:77:c5:
c1:df:47:bc:75:95:41:de:ed:75:c8:fa:3e:06:a9:
1e:5c:dc:66:64:b2:ee:c0:c5:df:cc:a4:0e:e3:b7:
d7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:29:85:66:4D:7B:40:21:4F:F9:6D:E4:25:A3:11:6A:4F:CF:FB:C3
X509v3 Authority Key Identifier:
keyid:09:BB:63:27:CD:FA:16:52:4D:C7:D0:33:71:38:AF:32:5F:B5:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbtjJ836FlJNx9AzcTivMl-14tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fffde1-9d87-4408-acc2-e7360323303c/1/CbtjJ836FlJNx9AzcTivMl-14tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8e:d5:59:73:59:dd:3c:64:ba:55:b7:97:ef:b1:f4:13:3d:
a4:96:6b:05:50:95:71:0b:ef:59:0a:61:39:f6:75:2e:64:c0:
cc:aa:12:6d:ad:0e:b9:4a:3d:80:97:2f:cb:c1:45:a8:bf:8c:
13:36:21:11:10:b7:20:c4:8d:77:68:e3:63:68:73:1c:46:b7:
02:94:f1:c9:2c:6d:72:18:8e:42:7e:5e:6c:5d:37:ff:41:5d:
1f:b6:04:e1:dc:e5:43:0d:97:dc:6d:58:54:e1:bb:f4:4f:ca:
52:12:01:8d:62:a3:f6:21:50:94:25:94:72:0d:36:60:d5:06:
9c:ca:b2:bb:d8:dd:b3:e7:c3:17:d9:61:c9:d3:27:e1:cf:99:
84:63:19:4e:44:25:1f:ff:b0:91:cd:31:2f:6e:2f:0c:ab:6c:
6b:00:38:af:04:c0:55:42:b7:c0:bc:8e:12:88:2f:8f:f6:39:
6a:9c:e8:8c:7e:53:2e:af:7d:b7:b9:1a:25:48:5d:1f:6c:9c:
b7:38:ab:36:3d:5f:19:27:72:e5:bb:ac:c1:6b:f8:24:e3:01:
51:1d:e5:f8:2d:3f:fd:ce:80:fc:25:39:80:62:3b:27:9d:1b:
69:2c:b3:a9:75:c6:07:18:a9:eb:21:39:9e:59:b2:fd:8a:18:
98:a2:58:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:30 2025 by rpki-client