Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
File: cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft (raw, json)
Hash identifier: g9Jy1a20q2qv5puK6/uP5l0zNdpOcXYONKoAtVvLNyw=
Subject key identifier: BB:DA:90:50:F3:EE:BE:D2:3B:DA:16:9D:7B:2A:73:7A:02:8C:AF:5D
Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Certificate serial: 01987298CA4881D32BC0B9A88BC3798A129E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
Manifest number: 15A8
Signing time: Mon 04 Aug 2025 01:01:12 +0000
Manifest this update: Mon 04 Aug 2025 01:01:12 +0000
Manifest next update: Tue 05 Aug 2025 01:01:12 +0000
Files and hashes: 1: cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl (hash: qZaXO4/vb6PS2V10jHPJ/pudliWa6zNjqo2s81DASbU=)
2: vCqdKv7R0SPqg2beE-raqVkN9dk.roa (hash: qav8+RSTbcmeaTuiZ2SE6ePjqRAE/0kbvGatcxDfqj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:ca:48:81:d3:2b:c0:b9:a8:8b:c3:79:8a:12:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Validity
Not Before: Aug 4 01:01:12 2025 GMT
Not After : Aug 5 01:01:12 2025 GMT
Subject: CN=bbda9050f3eebed23bda169d7b2a737a028caf5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:38:21:f5:fd:0d:51:40:3c:18:2b:f9:8a:
c3:5a:e5:3c:ea:d1:52:f5:d2:1d:28:76:82:0d:a6:
9e:da:01:c7:cd:74:87:9e:80:f6:dd:f1:bd:6e:4e:
d9:ee:4c:81:df:f3:03:87:28:ee:d2:a0:6a:29:38:
a0:77:e3:5a:0f:a4:92:35:d1:df:d2:14:9c:6c:f6:
dd:51:59:1f:57:04:87:e9:22:67:6c:cf:2a:cf:e6:
3c:1a:7c:92:18:f4:7a:0f:19:66:8a:98:5e:90:74:
8f:49:cf:a5:f0:11:05:fe:4d:54:1a:d9:4c:17:8b:
7d:94:6e:2a:b2:d2:b2:42:65:77:84:46:a4:c8:c8:
3b:0a:da:03:b6:3f:c8:9a:f9:85:ef:a0:dc:70:0e:
14:32:26:4e:a4:84:49:f1:4b:ab:e2:b2:7f:5e:38:
92:3f:90:7a:8a:fb:02:c9:a5:a8:66:13:e8:26:5b:
c7:76:1c:97:9b:fa:0e:7e:29:0d:34:84:3f:7c:52:
31:24:02:d7:7c:bb:6a:ff:52:2a:ea:6c:78:fa:52:
14:46:b9:9f:4c:52:1a:d2:6d:eb:b7:cf:72:13:56:
80:8c:7a:2a:5a:b8:e7:f1:b8:fa:4f:20:e3:08:08:
ce:7a:72:41:09:6c:6a:67:db:c3:af:bb:40:fe:b0:
32:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DA:90:50:F3:EE:BE:D2:3B:DA:16:9D:7B:2A:73:7A:02:8C:AF:5D
X509v3 Authority Key Identifier:
keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:5d:70:dd:50:a5:f9:a8:16:64:f1:7c:87:f6:53:56:0c:ae:
ed:70:65:65:80:33:5d:e8:e0:f9:2d:b7:bf:ba:f2:1f:f9:aa:
86:e7:76:bd:fb:bb:a3:3a:90:d3:d4:3d:62:61:05:77:f5:43:
c8:3a:bf:c6:1b:28:cf:61:a1:e6:90:fa:46:d2:8a:34:62:8d:
c3:67:a2:cf:d2:23:c3:cd:47:34:04:85:a6:07:f0:4a:c2:d2:
2c:ec:db:21:e4:b9:53:07:63:88:fe:5c:96:cb:f9:f8:86:94:
d2:eb:b2:93:4f:e3:a3:0e:e8:8b:33:31:08:37:ce:a7:f1:52:
d3:0b:1b:63:ba:f4:77:0e:d1:44:47:b3:9f:af:7b:da:37:24:
63:e9:14:50:94:0a:ab:97:6e:83:7b:69:cd:cd:c6:db:5f:a0:
d3:7f:62:b9:fb:ae:e0:e6:7b:35:99:6b:80:c4:3d:40:64:e3:
1a:f2:8d:d5:57:ac:9d:0e:2f:50:2a:37:fb:55:f9:0d:b5:fd:
22:a0:a2:97:b4:0e:3a:85:fa:f9:17:d7:cb:7e:3b:8a:a3:d8:
e6:5f:1f:ce:44:b2:d5:5b:5c:17:ab:4d:9c:9f:8b:21:05:21:
b4:6e:6c:78:98:0b:c7:10:40:a9:d4:e8:24:de:ae:5f:f1:f9:
13:4d:00:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:43 2025 by rpki-client