Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
File: CBg0SlIKOZknm7gkfheeiEBuNXg.mft (raw, json)
Hash identifier: rvfYMBCe7EKPL1MaqwOlM3vfdplifPYaoX2elASfQ7o=
Subject key identifier: 10:3B:C1:51:8A:48:FD:F4:FF:44:D0:23:7E:72:40:57:FC:F3:FC:E1
Authority key identifier: 08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
Certificate issuer: /CN=0818344a520a3999279bb8247e179e88406e3578
Certificate serial: 019A52634CC5102BF90BAD1A3C576D2DD64B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
Manifest number: 09DC
Signing time: Wed 05 Nov 2025 05:00:30 +0000
Manifest this update: Wed 05 Nov 2025 05:00:30 +0000
Manifest next update: Thu 06 Nov 2025 05:00:30 +0000
Files and hashes: 1: B-j6lkFyqvjbC_PQncwIGbX8TJo.roa (hash: UphQUvnVM6eEU6Z6D8ssHUSQvyAzogcc5pnYk33x3jA=)
2: CBg0SlIKOZknm7gkfheeiEBuNXg.crl (hash: VA+xxCQIAAKyZhXvDomOkgrAabAelh9TEtWJ8VHCbww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:4c:c5:10:2b:f9:0b:ad:1a:3c:57:6d:2d:d6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0818344a520a3999279bb8247e179e88406e3578
Validity
Not Before: Nov 5 05:00:30 2025 GMT
Not After : Nov 6 05:00:30 2025 GMT
Subject: CN=103bc1518a48fdf4ff44d0237e724057fcf3fce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:74:ab:c3:80:44:73:ca:74:e2:61:84:11:
43:9e:22:76:45:08:f8:7b:48:6e:f8:be:4a:2b:ba:
f4:6d:5a:d1:e5:3f:fc:5b:9d:34:f9:c7:22:45:18:
7c:c3:e7:61:0a:cd:b5:04:c0:2d:50:94:6f:33:fe:
fe:10:f3:6b:6d:db:79:c1:f9:c6:e9:89:0b:61:3c:
f9:63:a8:f7:c3:9e:61:c3:94:24:bd:cc:fa:2a:7e:
28:76:45:a1:fa:8a:d2:c4:58:26:78:c7:b1:db:7f:
f8:e5:51:72:aa:10:b8:6b:bd:b2:14:c6:4e:a6:37:
a6:a1:0c:1f:90:75:b6:88:4b:5c:c2:82:a6:88:63:
d1:cf:8a:59:24:44:67:bf:79:e0:e4:a3:8c:33:86:
29:9d:5b:31:71:27:01:57:7d:37:d5:7e:75:b3:36:
bc:2f:aa:aa:4f:8a:05:dc:21:df:b5:4f:64:e7:98:
09:86:cb:ef:0f:59:38:72:2b:66:b6:74:70:20:72:
88:1e:42:59:27:6d:c6:cb:06:f6:85:60:fb:86:a8:
4b:5b:74:45:8b:5c:98:b1:02:99:57:77:d1:83:16:
87:70:19:8a:6f:ff:aa:9c:a9:7f:a3:eb:05:93:69:
4b:4d:81:11:c6:a6:3f:4b:c5:e8:39:9d:e9:4e:c3:
a8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3B:C1:51:8A:48:FD:F4:FF:44:D0:23:7E:72:40:57:FC:F3:FC:E1
X509v3 Authority Key Identifier:
keyid:08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:50:b8:02:12:80:f9:85:42:2d:61:25:8f:07:26:97:3b:48:
0e:dd:e8:35:b8:d0:07:e7:19:68:dd:ce:06:12:40:04:24:af:
fc:a7:b6:0a:96:ee:03:44:17:65:d2:51:bc:6d:3b:65:77:30:
72:b3:3e:40:18:d3:4f:ea:57:50:ad:32:11:e8:c0:c1:7d:ff:
61:16:4b:2d:22:82:db:86:c5:21:03:c5:43:fd:30:65:4c:7d:
34:63:b6:e3:bd:e7:65:f3:7e:cd:37:de:17:d3:44:38:67:5e:
4e:2d:49:22:8a:48:d2:83:52:11:1a:33:7d:6d:c0:38:a5:77:
60:f7:1e:f2:93:4d:fb:3c:9f:50:d3:47:32:a9:6d:33:aa:72:
3b:0f:2c:bc:78:ca:c3:a3:5a:c6:5c:2f:1f:38:0d:1c:eb:c5:
b0:f6:99:ba:71:18:73:79:2a:cc:34:d5:3e:5c:77:a9:51:e6:
4d:a4:5a:dc:4c:c2:ed:ad:80:e2:0a:ad:ee:5b:60:88:f4:3a:
fb:72:d6:23:24:f6:a0:37:09:9f:ad:af:82:0f:27:82:30:74:
d3:5d:d7:17:90:a3:4d:7b:8f:64:4f:2b:9e:f7:36:2d:09:4f:
ca:a6:13:10:a2:b8:46:99:ef:7d:a9:8d:30:c8:e1:66:d8:c4:
ee:fa:58:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:39:30 2025 by rpki-client