
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
File: CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json)
Hash identifier: Lo1fDHtVptiywz0H6CGho+D6kKRUN31Z3gTmwygAN3s=
Subject key identifier: B9:11:CA:65:97:71:38:8F:DE:6F:F4:65:51:73:06:B1:39:BD:E8:2D
Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b
Certificate serial: 019875D15E16770D01C288BE7E0DF7D47C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 16:01:52 +0000
Manifest this update: Mon 04 Aug 2025 16:01:52 +0000
Manifest next update: Tue 05 Aug 2025 16:01:52 +0000
Files and hashes: 1: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: T0V5C5hU0eRLhFVsX845KQjuzOS2i/mFLC2MJxrFbKw=)
2: lcycvAbT-2PUUx_keEjD_rzNQVg.roa (hash: ohYpD8zllBNGHneXiioDVg0sD783EBRieTug607OnxU=)
3: oAvccpdYptAzS_BGXpnm48hNKj0.roa (hash: UcqHCV81R5HjZRazwae448gGQvQVwy5vVk7J2zutre4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:5e:16:77:0d:01:c2:88:be:7e:0d:f7:d4:7c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b
Validity
Not Before: Aug 4 16:01:52 2025 GMT
Not After : Aug 5 16:01:52 2025 GMT
Subject: CN=b911ca659771388fde6ff465517306b139bde82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:6b:77:e1:dd:b4:f6:ff:89:fd:36:7a:39:
42:1e:f3:91:dc:be:84:76:09:7d:14:48:b5:b2:90:
b9:1e:65:28:6b:7c:30:f8:9b:b0:76:59:7d:25:e5:
05:67:65:03:75:2e:06:dd:8b:22:ae:5c:6a:ee:84:
b7:92:41:da:50:71:c4:ed:48:fa:b7:11:67:7e:d1:
cf:03:24:10:6d:bb:70:90:a0:f2:b6:52:2f:37:7f:
d1:44:70:94:0e:50:97:68:37:07:f5:bd:ee:13:11:
30:ed:84:04:04:f4:4e:51:68:d2:1f:52:3c:be:bb:
56:d1:1b:05:76:0b:d8:02:7c:df:a2:b5:8e:00:13:
52:ae:e1:de:d4:4d:72:ee:d3:1d:e0:92:9a:26:df:
8b:1b:bf:ad:d1:2d:db:3a:04:df:c3:76:45:34:a3:
96:53:b0:12:d2:da:52:d9:d1:88:ce:04:f9:b1:c6:
c7:a8:4d:f5:b6:89:64:ca:e1:21:8e:a5:f7:c5:5f:
5d:f9:da:25:4b:c1:e1:0a:df:83:bf:f2:13:d2:8f:
f5:88:d2:2f:2f:b2:e4:d1:cf:90:d9:da:c6:93:01:
27:94:ea:43:10:6c:b5:a8:fa:dd:93:35:d0:00:72:
c9:60:f6:a8:e1:36:cb:da:22:63:6a:42:01:1b:f5:
d5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:11:CA:65:97:71:38:8F:DE:6F:F4:65:51:73:06:B1:39:BD:E8:2D
X509v3 Authority Key Identifier:
keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:41:6e:73:aa:31:7e:e8:a4:21:97:f3:3b:16:89:57:21:dd:
85:7c:51:a3:7a:a5:bb:af:30:23:e3:b2:50:4e:0b:1d:bf:76:
5d:8e:9d:9c:06:c5:91:92:5d:56:f4:7a:f6:74:5d:d9:06:02:
58:c0:54:9e:32:2a:82:84:0b:a2:72:3d:c1:a1:ed:3d:5a:9b:
34:15:f9:da:a4:39:ac:a3:da:70:a5:05:4d:dd:de:37:bd:fb:
19:0d:3d:1d:da:3a:c8:91:07:c1:bc:fe:a3:d2:12:f1:de:04:
7a:8b:ed:37:c8:60:b1:8d:85:d1:5c:c5:c5:c4:b7:49:05:e9:
43:97:3c:5e:04:49:de:d0:5b:4d:da:2d:87:6c:0b:cc:62:68:
20:06:76:64:81:f6:42:7b:24:cb:42:1b:48:6d:fa:39:14:be:
4a:12:2a:f0:9c:45:14:a0:7f:ca:b2:78:1b:71:a9:ab:5f:f9:
10:db:43:4e:dc:b5:75:37:e0:04:ad:8d:79:93:48:e8:f4:66:
30:55:e0:c3:d4:6a:26:20:73:a5:03:50:fd:35:74:97:ed:00:
42:ea:4f:ea:81:a3:fc:34:2f:fa:17:e0:d0:08:1e:09:92:15:
f6:a8:0b:2f:8c:09:ee:be:9e:12:3f:2d:0e:49:ed:59:25:e0:
be:21:fc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:18:25 2025 by rpki-client