Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
File: CBg0SlIKOZknm7gkfheeiEBuNXg.mft (raw, json)
Hash identifier: CWs2Y0sMudawrV9spztHTwDg5neny8avPZaC3mSUUQg=
Subject key identifier: EF:2E:04:D7:89:A9:A9:A1:2B:13:D1:02:01:36:6A:4C:CB:2C:9E:37
Authority key identifier: 08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
Certificate issuer: /CN=0818344a520a3999279bb8247e179e88406e3578
Certificate serial: 019A507484B53B76245BC652E899A3207B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
Manifest number: 09DB
Signing time: Tue 04 Nov 2025 20:00:04 +0000
Manifest this update: Tue 04 Nov 2025 20:00:04 +0000
Manifest next update: Wed 05 Nov 2025 20:00:04 +0000
Files and hashes: 1: B-j6lkFyqvjbC_PQncwIGbX8TJo.roa (hash: UphQUvnVM6eEU6Z6D8ssHUSQvyAzogcc5pnYk33x3jA=)
2: CBg0SlIKOZknm7gkfheeiEBuNXg.crl (hash: ogtXBJoDDWVe15kIqUeO4QBs1C0bgcGMNGbcxl8xB54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:84:b5:3b:76:24:5b:c6:52:e8:99:a3:20:7b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0818344a520a3999279bb8247e179e88406e3578
Validity
Not Before: Nov 4 20:00:04 2025 GMT
Not After : Nov 5 20:00:04 2025 GMT
Subject: CN=ef2e04d789a9a9a12b13d10201366a4ccb2c9e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:ab:70:cb:9c:a5:0a:fd:03:26:97:ee:ac:
cf:38:8c:6e:49:7c:ef:89:fa:27:b9:27:46:66:33:
f5:71:71:4b:16:fb:f4:10:40:80:e1:b1:a3:8d:52:
f1:01:30:e1:b5:5b:f1:f2:b6:5f:6f:31:0b:74:7f:
74:26:61:0f:0e:2b:10:90:dd:b1:77:88:33:a8:d8:
28:f2:57:9c:0d:08:45:4b:06:2f:ab:b7:28:18:99:
84:93:78:80:21:74:88:25:8d:a1:bf:92:ef:a4:e2:
ef:a5:01:d3:ac:75:a2:1c:7a:e2:20:cf:66:10:47:
5d:84:79:12:1e:3e:e6:f6:0d:29:2c:a5:d2:35:d7:
ea:e0:f8:ce:0a:03:e7:5a:86:8c:07:2c:a8:e8:2d:
3e:22:3e:97:7a:36:af:26:b9:53:e9:7b:ff:f5:4a:
50:dc:f5:2e:33:44:83:0e:e0:a3:17:3f:46:f2:f7:
91:53:63:a0:1e:4f:8a:14:40:7e:04:33:39:0e:f8:
f9:db:30:67:1b:02:e3:5a:78:79:c4:a9:e2:7e:39:
20:8b:4b:af:17:83:ad:09:a3:24:9a:49:47:83:ce:
26:59:52:03:2a:29:a1:8b:ba:6d:ae:72:c1:7d:2c:
96:20:ad:9c:fe:d3:e8:33:85:d3:69:ed:3e:cb:e7:
42:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2E:04:D7:89:A9:A9:A1:2B:13:D1:02:01:36:6A:4C:CB:2C:9E:37
X509v3 Authority Key Identifier:
keyid:08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a1:76:aa:44:27:1e:14:df:6b:0e:1e:29:92:6d:8a:45:e8:
88:1c:86:e4:8c:f7:ef:11:6b:06:1b:e6:bb:e6:71:2a:95:5a:
dc:63:80:9e:54:e3:30:43:29:90:09:4c:5f:90:14:3f:04:72:
b7:05:97:ad:06:37:5d:44:df:e5:a7:19:80:b7:f0:72:d2:b2:
ad:ec:1b:84:e8:1c:22:24:46:90:1a:cd:51:45:9e:e3:90:1d:
5e:38:24:a6:75:3d:da:b0:68:39:0b:64:ea:d0:f5:7c:f5:86:
d9:90:6e:04:cb:ee:17:44:f5:39:42:c7:11:68:1c:67:9c:8c:
45:67:0e:de:83:3f:8b:d4:1c:8b:60:28:f8:a7:92:64:40:58:
08:bc:55:ed:9e:40:b4:dc:a7:96:3f:e6:98:45:40:f0:8c:3d:
9c:2f:f7:8a:52:d2:d6:40:0c:22:19:57:f8:47:dc:73:06:50:
b8:9a:34:59:fb:94:c6:df:ef:b9:f4:0b:cf:5e:9b:83:6c:20:
62:3a:2d:54:c9:67:ff:f9:75:46:c5:fd:88:ae:2d:2b:53:49:
68:86:ec:2d:ed:60:5e:fd:52:b8:ea:be:e0:23:49:91:5a:b9:
1d:71:82:23:36:53:a9:5f:ce:cf:ad:9d:a0:b6:d9:4a:ae:a3:
91:a6:84:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdIS1O3YkW8ZS6JmjIHudMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MTgzNDRhNTIwYTM5OTkyNzliYjgyNDdlMTc5ZTg4NDA2
ZTM1NzgwHhcNMjUxMTA0MjAwMDA0WhcNMjUxMTA1MjAwMDA0WjAzMTEwLwYDVQQD
EyhlZjJlMDRkNzg5YTlhOWExMmIxM2QxMDIwMTM2NmE0Y2NiMmM5ZTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/CrcMucpQr9AyaX7qzPOIxuSXzv
ifonuSdGZjP1cXFLFvv0EECA4bGjjVLxATDhtVvx8rZfbzELdH90JmEPDisQkN2x
d4gzqNgo8lecDQhFSwYvq7coGJmEk3iAIXSIJY2hv5LvpOLvpQHTrHWiHHriIM9m
EEddhHkSHj7m9g0pLKXSNdfq4PjOCgPnWoaMByyo6C0+Ij6XejavJrlT6Xv/9UpQ
3PUuM0SDDuCjFz9G8veRU2OgHk+KFEB+BDM5Dvj52zBnGwLjWnh5xKnifjkgi0uv
F4OtCaMkmklHg84mWVIDKimhi7ptrnLBfSyWIK2c/tPoM4XTae0+y+dC5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8uBNeJqamhKxPRAgE2akzLLJ43MB8GA1UdIwQY
MBaAFAgYNEpSCjmZJ5u4JH4XnohAbjV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0JnMFNsSUtPWmtubTdna2ZoZWVpRUJ1TlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81NmI4MTgtOWVlMS00YTA2LWE4ZWMt
ODUxZWE2NWNiOThiLzEvQ0JnMFNsSUtPWmtubTdna2ZoZWVpRUJ1TlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS81NmI4MTgtOWVlMS00YTA2LWE4ZWMtODUxZWE2NWNiOThi
LzEvQ0JnMFNsSUtPWmtubTdna2ZoZWVpRUJ1TlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsaF2qkQn
HhTfaw4eKZJtikXoiByG5Iz37xFrBhvmu+ZxKpVa3GOAnlTjMEMpkAlMX5AUPwRy
twWXrQY3XUTf5acZgLfwctKyrewbhOgcIiRGkBrNUUWe45AdXjgkpnU92rBoOQtk
6tD1fPWG2ZBuBMvuF0T1OULHEWgcZ5yMRWcO3oM/i9Qci2Ao+KeSZEBYCLxV7Z5A
tNynlj/mmEVA8Iw9nC/3ilLS1kAMIhlX+EfccwZQuJo0WfuUxt/vufQLz16bg2wg
YjotVMln//l1RsX9iK4tK1NJaIbsLe1gXv1SuOq+4CNJkVq5HXGCIzZTqV/Oz62d
oLbZSq6jkaaExw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:28:10 2025 by rpki-client