
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
File: CBg0SlIKOZknm7gkfheeiEBuNXg.mft (raw, json)
Hash identifier: 4fbhHFTDi0W4CKkvMWqposkdV8VniBYJH4GfufigHTg=
Subject key identifier: EF:13:76:D1:C2:E2:6F:8E:50:DA:9D:80:9B:15:3D:FF:C4:BC:83:2E
Authority key identifier: 08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
Certificate issuer: /CN=0818344a520a3999279bb8247e179e88406e3578
Certificate serial: 01987374504CE3D52EFC1FEF4CB71F6D3BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
Manifest number: 08E4
Signing time: Mon 04 Aug 2025 05:00:59 +0000
Manifest this update: Mon 04 Aug 2025 05:00:59 +0000
Manifest next update: Tue 05 Aug 2025 05:00:59 +0000
Files and hashes: 1: B-j6lkFyqvjbC_PQncwIGbX8TJo.roa (hash: UphQUvnVM6eEU6Z6D8ssHUSQvyAzogcc5pnYk33x3jA=)
2: CBg0SlIKOZknm7gkfheeiEBuNXg.crl (hash: ppDnOojVydLD7TyPSU6IeGMFqRYbh+5HBZ5EJ5Jw/kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:50:4c:e3:d5:2e:fc:1f:ef:4c:b7:1f:6d:3b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0818344a520a3999279bb8247e179e88406e3578
Validity
Not Before: Aug 4 05:00:59 2025 GMT
Not After : Aug 5 05:00:59 2025 GMT
Subject: CN=ef1376d1c2e26f8e50da9d809b153dffc4bc832e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:56:c3:02:ff:8f:21:ef:c2:10:40:9d:c0:
74:e2:cf:0a:fc:0f:53:e3:ea:00:37:ec:39:ca:62:
d6:31:a0:fb:54:5d:5e:93:74:30:0f:0f:85:0e:b1:
9c:0a:da:bc:e8:10:e0:a4:f5:59:76:1a:84:33:1b:
c6:dc:f9:90:3a:b1:fe:f1:d8:0d:24:35:4b:52:75:
79:c7:8b:da:fb:e0:db:6c:7c:1c:6b:f8:85:d6:cd:
65:2c:5f:d5:7a:11:ce:5d:9a:93:99:09:72:d8:bb:
90:34:02:59:61:30:88:54:b8:a4:ca:c6:81:68:47:
b4:eb:ad:b2:77:28:6c:cc:72:82:ec:ce:a6:47:d7:
b8:5e:72:1e:7f:72:b6:2b:7c:29:ee:29:d2:80:5f:
f0:ca:ad:d7:ff:a0:f4:1d:77:48:21:70:60:a8:b3:
06:8a:fc:09:8b:e9:41:5d:47:72:5b:b9:4f:78:08:
3c:56:6b:39:10:db:96:41:96:b4:1e:3c:58:a8:c3:
66:bf:b1:99:af:4c:09:1f:5d:4d:b8:a1:4f:a5:32:
b4:9c:73:2a:54:eb:1b:1b:67:15:fd:41:c7:87:0f:
ba:8f:3a:b4:bf:d5:0f:de:25:e6:8a:18:a4:45:9b:
42:69:15:75:1b:78:e0:5e:7c:44:37:91:5d:ae:ba:
a7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:13:76:D1:C2:E2:6F:8E:50:DA:9D:80:9B:15:3D:FF:C4:BC:83:2E
X509v3 Authority Key Identifier:
keyid:08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:83:b1:ed:51:33:35:b9:e2:2e:ee:73:7f:cb:61:da:08:b3:
7b:f2:96:7e:59:2e:c9:37:47:60:ce:1c:f2:6e:21:e9:59:20:
d4:b3:7f:b5:83:e3:32:2c:a1:06:6e:1a:1e:7b:a4:2f:d0:5d:
67:ff:71:ce:b6:0a:47:dc:57:9d:e1:33:89:24:42:1a:dc:36:
d8:d1:8a:18:9c:35:a8:a5:10:92:39:5b:a2:19:e0:79:7c:0b:
49:57:87:dc:07:ef:0f:3f:4b:67:94:f6:87:bf:5e:2e:4d:bc:
28:e7:d6:af:58:0e:4a:36:e1:a9:1a:e2:3b:b9:d6:33:37:f2:
32:99:a4:96:a0:e4:b7:cf:a7:13:2c:d2:50:3e:c7:cd:ae:ab:
33:a6:1c:4b:92:04:d4:d3:bd:cd:7a:42:98:30:48:3e:7b:4d:
40:07:1c:6c:3c:5d:09:0e:6a:01:1e:e0:f1:b6:27:84:57:20:
6f:a2:b3:21:35:73:dd:c4:e1:b4:39:04:48:ab:3c:23:f7:8e:
a7:60:ca:5a:8c:ee:08:b5:5c:aa:e6:8c:fe:1a:95:1a:56:75:
64:79:ce:dd:3c:6b:57:6d:e9:22:c3:cb:13:4c:f2:e7:cb:c0:
d3:53:5c:a5:f2:98:88:72:b6:de:f2:6c:63:db:06:9a:27:a7:
6a:18:ec:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:25 2025 by rpki-client