Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
File: cbbQ4ActDKspv6hzfeKlPlFBgnY.mft (raw, json)
Hash identifier: 1zQF83fhhkUYFTdsX0JLkmKJD/godpd8EamK8JtdHgg=
Subject key identifier: F1:D1:3B:CC:3E:2A:A7:4E:2C:D3:90:C0:B0:CC:10:25:5C:4D:F1:FE
Authority key identifier: 71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
Certificate issuer: /CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Certificate serial: 019881D4FA05028E7026B1C906DA4021D95E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
Manifest number: 06A3
Signing time: Thu 07 Aug 2025 00:01:15 +0000
Manifest this update: Thu 07 Aug 2025 00:01:15 +0000
Manifest next update: Fri 08 Aug 2025 00:01:15 +0000
Files and hashes: 1: cbbQ4ActDKspv6hzfeKlPlFBgnY.crl (hash: tsJpYmgINuAKPYGJjWn7Mn27GD6rPE00c04Mr/+d/Co=)
2: m3oyez4opl0YbbQ1CR2fl2aO7F8.roa (hash: FqYvVOjK/elvRD3q2xJweF4ZvocMCS6cmWVMXbFh3Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:fa:05:02:8e:70:26:b1:c9:06:da:40:21:d9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Validity
Not Before: Aug 7 00:01:15 2025 GMT
Not After : Aug 8 00:01:15 2025 GMT
Subject: CN=f1d13bcc3e2aa74e2cd390c0b0cc10255c4df1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:85:ae:d0:b0:bf:2f:d5:8e:c0:14:db:1d:2e:
5c:a0:0b:37:17:a3:0c:01:f3:e4:04:0f:83:ed:e9:
77:47:c0:4c:e7:1a:12:86:1e:8b:fe:df:cc:1a:10:
45:65:b6:12:47:f4:b1:6b:7e:6c:29:be:9d:3a:48:
90:27:44:81:5c:3d:5c:ae:92:cd:9b:d9:4b:46:30:
b8:df:a2:91:36:b0:c4:1e:ee:69:66:2f:22:7b:c7:
a0:74:26:2a:88:a8:a5:b3:80:fc:f9:a9:a6:d3:92:
d7:5e:dc:8d:c9:c5:ad:3c:7c:48:42:86:54:15:05:
a7:04:db:bc:02:5a:d1:8a:eb:2b:c3:57:aa:89:d2:
3c:94:7c:aa:60:53:c0:ce:40:c9:ad:ee:8d:47:4a:
c9:bb:07:a5:52:ee:e2:50:08:d8:de:9b:aa:80:df:
e0:f2:15:e4:b0:bb:35:7c:77:f9:81:f0:b8:67:83:
60:a5:c3:c1:72:69:5a:6d:5b:e6:82:31:fd:79:7c:
44:fe:01:6d:9a:6d:5d:d7:1a:31:3c:b3:29:d1:45:
81:15:97:45:37:a2:70:30:f9:aa:8d:a4:90:24:1f:
96:cb:8d:2d:60:65:ae:35:d4:46:ad:49:e6:dd:26:
80:d6:88:a3:01:7c:28:59:de:1a:1b:81:29:d8:72:
4a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D1:3B:CC:3E:2A:A7:4E:2C:D3:90:C0:B0:CC:10:25:5C:4D:F1:FE
X509v3 Authority Key Identifier:
keyid:71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b6:3e:51:fb:91:03:7e:87:ec:97:e7:bd:40:7e:b5:42:ad:
10:a6:78:8a:43:31:43:4e:67:c5:68:b1:30:28:91:02:73:eb:
ba:0d:ef:40:45:dc:34:2e:68:09:ff:06:21:d7:b7:46:b7:9c:
c4:fd:03:65:47:b3:62:01:ec:84:a3:15:4e:35:93:d9:96:60:
0f:ab:ed:9e:8e:90:e3:ba:53:bc:50:48:5f:de:fd:fe:f9:36:
4f:5e:81:2f:9e:ef:cd:23:c6:98:ab:fb:04:98:c7:fe:6f:a6:
39:58:27:2a:06:03:eb:b9:17:34:df:f1:0f:4d:74:67:20:61:
e0:1a:0a:c4:08:47:f8:c5:94:47:d5:84:06:a2:4c:8d:78:4c:
d8:82:7f:b0:45:d0:32:20:85:02:d0:f6:75:bd:cd:07:c4:62:
6a:77:a1:c9:03:a5:b1:8f:4c:09:4c:fb:0d:04:c5:ca:5f:21:
90:a2:4b:3e:da:71:6e:bd:5e:3a:18:59:5c:3a:6a:b6:e1:10:
a5:4d:9a:af:b3:e0:6e:f9:b9:88:2c:67:c9:ba:25:87:2f:e9:
a6:1b:2c:97:de:24:25:73:13:1b:9f:51:3d:8b:19:c1:fd:7f:
c9:88:be:bf:94:54:57:14:26:71:ec:74:b8:40:42:99:37:a8:
0d:59:19:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:05:53 2025 by rpki-client