Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
File: cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft (raw, json)
Hash identifier: vT394AyXUIHe66z+3YTIKl9eV8xOHKB7ecSh85rE5Po=
Subject key identifier: 3E:F0:40:0F:13:48:80:85:9A:8F:5E:6A:21:56:D9:E0:3E:D6:76:F2
Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Certificate serial: 019A4F9967BB6A5297F5C2788EBEBD6D3D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 16:00:44 +0000
Manifest this update: Tue 04 Nov 2025 16:00:44 +0000
Manifest next update: Wed 05 Nov 2025 16:00:44 +0000
Files and hashes: 1: cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl (hash: KMUcYMlj8ElbwTVnqLgQXNFXIQsg6as8mLMwzLd3rEg=)
2: vCqdKv7R0SPqg2beE-raqVkN9dk.roa (hash: qav8+RSTbcmeaTuiZ2SE6ePjqRAE/0kbvGatcxDfqj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:67:bb:6a:52:97:f5:c2:78:8e:be:bd:6d:3d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Validity
Not Before: Nov 4 16:00:44 2025 GMT
Not After : Nov 5 16:00:44 2025 GMT
Subject: CN=3ef0400f134880859a8f5e6a2156d9e03ed676f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:d9:08:14:05:d0:66:0e:51:0d:51:bb:18:
08:3c:7e:9b:65:fe:ee:44:f8:95:51:25:02:8e:8b:
73:c5:a0:59:af:99:9d:28:22:54:0d:e1:72:da:01:
23:56:10:b7:93:4f:08:7a:14:92:17:f3:0c:bc:22:
c5:4a:38:d4:ef:35:69:4d:f2:b9:61:d6:2b:17:8c:
1d:d6:33:15:b2:6a:d4:2f:a2:7d:94:ac:57:51:1f:
bf:fe:d4:0c:b2:13:69:4e:8f:c0:38:d9:dc:50:b3:
c4:44:0e:23:9c:93:8b:e5:d1:80:8d:a4:4f:ae:d7:
73:fc:e8:ba:70:59:56:39:fa:16:d3:4a:0c:4e:52:
22:50:62:4d:c7:93:b1:5e:ca:4b:d5:3c:b7:05:d1:
74:5f:4c:8d:c6:06:19:34:5d:1d:67:04:e6:30:df:
2c:3f:b3:97:1d:3c:e9:5b:ab:58:21:05:77:b8:2b:
82:de:d6:22:af:ca:90:1d:9e:6e:3c:b2:c2:6f:58:
22:10:23:5b:de:47:41:7d:cf:3b:59:bb:41:d7:be:
96:34:57:82:e9:97:d1:b3:ff:e8:04:12:3a:83:2c:
a1:d5:34:c5:20:5d:09:ca:e3:b3:a3:76:6b:fa:a5:
d6:c8:f7:e4:e0:32:37:d9:5e:31:2b:7e:a9:e2:99:
43:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F0:40:0F:13:48:80:85:9A:8F:5E:6A:21:56:D9:E0:3E:D6:76:F2
X509v3 Authority Key Identifier:
keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:3b:8a:53:e1:62:e7:fd:34:3d:ae:f8:31:cc:65:2e:f6:6d:
02:0e:9e:6d:e9:c4:16:e4:24:10:34:33:90:ff:c9:df:c8:2c:
53:85:b7:6d:75:81:fd:13:a1:83:7c:06:2a:57:ee:62:4d:ac:
01:80:fa:93:a0:dd:9e:d3:84:92:a6:e5:5a:c1:33:e5:0b:7a:
83:69:a1:ed:0f:33:06:e9:38:2c:79:b3:aa:a1:bd:1a:b2:ad:
5b:db:76:0c:63:1a:00:c8:75:6e:35:03:94:e6:86:f5:b9:de:
c8:ce:9f:49:54:de:e3:8c:7e:ab:92:3a:fe:5b:2b:95:d7:89:
48:41:94:f3:c7:57:94:d8:83:3b:41:19:97:81:34:ed:55:04:
7b:ff:6e:69:75:0e:8d:e0:1e:8b:53:4f:64:42:0c:8e:14:d5:
07:02:fc:b7:0e:67:67:94:0a:15:b3:53:e0:c6:ef:3d:97:9a:
75:00:bc:47:0c:09:f7:cd:59:61:1a:90:2f:ff:70:27:be:3e:
e8:02:53:8f:95:67:8c:15:7d:92:fb:be:db:a5:08:b6:b6:e7:
0a:44:54:db:42:17:56:dc:82:8e:ef:16:f5:0f:f4:fd:7a:8c:
9e:44:a0:78:84:2f:21:c0:40:40:ba:20:9b:48:d8:57:3f:61:
b9:75:ed:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:19 2025 by rpki-client