Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
File: cbbQ4ActDKspv6hzfeKlPlFBgnY.mft (raw, json)
Hash identifier: dWcCeAS1zPO4/oRhjgU5JPexJnu0iOcmyTdclsUfocc=
Subject key identifier: 53:B2:66:63:2D:67:B6:0C:57:1C:10:06:B9:BD:17:D4:50:AC:83:AB
Authority key identifier: 71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
Certificate issuer: /CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Certificate serial: 019A4F624E93FAD50F9E5F7D2EF8D61BE56C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
Manifest number: 0792
Signing time: Tue 04 Nov 2025 15:00:33 +0000
Manifest this update: Tue 04 Nov 2025 15:00:33 +0000
Manifest next update: Wed 05 Nov 2025 15:00:33 +0000
Files and hashes: 1: cbbQ4ActDKspv6hzfeKlPlFBgnY.crl (hash: 9kqWvJM3Kg16VEgnXmOs02ChtlytHgc6SqZt4lCPKgY=)
2: m3oyez4opl0YbbQ1CR2fl2aO7F8.roa (hash: FqYvVOjK/elvRD3q2xJweF4ZvocMCS6cmWVMXbFh3Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:4e:93:fa:d5:0f:9e:5f:7d:2e:f8:d6:1b:e5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Validity
Not Before: Nov 4 15:00:33 2025 GMT
Not After : Nov 5 15:00:33 2025 GMT
Subject: CN=53b266632d67b60c571c1006b9bd17d450ac83ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:79:27:4a:0b:1a:71:7f:d7:35:ab:7c:00:31:
ce:4c:44:43:a4:af:24:30:fa:74:97:01:67:68:a9:
0a:07:78:8c:be:54:a9:c1:76:84:ee:75:18:45:d8:
b8:ab:22:61:9d:21:c1:69:01:dc:c5:f9:97:8c:49:
a9:d5:fe:b9:58:6c:d9:fd:96:01:f9:60:f2:fc:73:
e4:df:d1:a9:43:aa:ea:47:4c:d2:0e:5b:a1:67:53:
a1:df:45:40:38:bd:e0:c2:df:7f:30:ef:70:8d:f3:
00:34:3b:07:6f:e5:f5:90:c3:02:50:d1:ca:0d:f9:
12:91:b5:71:5c:8c:d8:a8:32:a8:44:c5:05:85:98:
ee:60:89:24:ba:0a:d3:62:26:2a:5f:66:51:d1:b5:
a8:93:48:c4:c2:61:5c:e4:04:78:e5:63:69:5b:bb:
20:96:cd:37:ea:82:87:c6:16:44:4e:d2:10:4d:a9:
42:03:f7:41:77:c7:9d:6a:9d:2d:a5:5f:b5:2c:7a:
e6:0d:64:dc:10:07:c5:73:76:e7:e9:d5:81:8f:5c:
1e:51:39:e6:ba:20:3b:60:7a:ab:e2:16:7f:8e:7d:
7d:f0:74:cb:40:de:14:19:14:15:a1:48:01:b9:c7:
99:13:95:79:e7:39:3d:8a:d9:2e:87:36:dd:c9:36:
53:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B2:66:63:2D:67:B6:0C:57:1C:10:06:B9:BD:17:D4:50:AC:83:AB
X509v3 Authority Key Identifier:
keyid:71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b7:4b:bc:97:2f:61:08:bc:c0:bf:eb:b5:cb:18:46:8d:fd:
b1:3b:7d:6f:83:c1:0d:fe:7e:67:3b:a4:e0:ee:e0:d9:fd:10:
7c:5f:35:76:f4:2d:b4:92:5a:84:21:9a:9e:bb:e1:1a:dd:d7:
c4:9f:2e:9a:9e:44:f8:0a:94:a4:b8:08:a3:89:0d:ab:50:63:
ec:5e:18:3d:d7:34:6f:37:27:5b:df:d9:50:00:df:3a:a9:b4:
db:82:c8:23:52:ba:8b:dd:b7:ea:91:c4:5c:16:91:31:cd:1a:
85:9d:fe:f9:dd:9b:a6:0f:4b:19:03:c4:ae:6c:87:04:a1:6d:
e0:1c:9c:e5:a6:68:42:fd:dd:ca:92:47:ee:bb:ba:ae:e8:59:
46:42:37:0c:05:21:48:fd:37:83:56:2f:b0:0f:04:e1:b3:ae:
8d:b6:ea:b7:e4:cf:c4:78:a7:c7:73:f1:b8:df:12:b9:29:5f:
6b:44:00:1c:d4:3e:9b:33:ad:20:3c:26:42:1f:bd:48:97:72:
3a:28:ff:e0:5f:0a:ec:01:94:8e:98:a9:e3:b0:1d:44:3c:68:
81:b2:8c:42:f0:fc:1a:66:e4:5b:e4:a3:c6:b2:55:92:84:d9:
00:23:3f:b0:3a:3d:76:9f:63:73:5b:9a:91:65:53:a6:38:c9:
10:20:15:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:40 2025 by rpki-client