Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
File: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft (raw, json)
Hash identifier: u0SMnkDz+LIUAOi/MTUFMJnnjG7hxHEdfcDXK6D68iE=
Subject key identifier: 97:D4:AE:65:0E:E5:CC:BC:E3:5B:E7:81:26:EF:7C:68:51:79:25:8D
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial: 019873E30EBBF8C52ECDB88C57B54ED0871E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
Manifest number: 030C
Signing time: Mon 04 Aug 2025 07:01:56 +0000
Manifest this update: Mon 04 Aug 2025 07:01:56 +0000
Manifest next update: Tue 05 Aug 2025 07:01:56 +0000
Files and hashes: 1: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl (hash: jJQ3jsavUx3nHnMyMMc8kux2uCcjjqHtcfZEtrCCiIw=)
2: hYR6rq77HQceE2IcxPUKLad5kL4.roa (hash: +LqXV4/8ubLYmgyeWGpSO5Gif7f3L1TnP8kIXrA9Fjc=)
3: wn4QAHp5Rzb8lXeVuE7q6L111pE.roa (hash: 4bKaaL//q7uEAPyKRq4kflXDoCt6wQEv9YHzvR6r61o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:0e:bb:f8:c5:2e:cd:b8:8c:57:b5:4e:d0:87:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Validity
Not Before: Aug 4 07:01:56 2025 GMT
Not After : Aug 5 07:01:56 2025 GMT
Subject: CN=97d4ae650ee5ccbce35be78126ef7c685179258d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b3:ae:28:13:4c:92:d4:1e:c7:b2:b3:16:90:
4c:01:a3:7a:a4:4b:67:9f:37:a8:75:34:9f:d9:b9:
ec:ee:71:79:72:99:f8:e0:dd:db:45:f3:18:d5:da:
65:7f:b2:a3:88:5e:a0:b6:cd:d7:75:49:f5:ff:d0:
1c:f4:19:5a:53:cb:75:cc:4f:bc:8b:42:25:79:b7:
5b:d0:d9:b5:a6:9d:1d:5f:27:65:f9:ca:f1:e6:9e:
b7:68:79:83:ba:df:8d:5e:e3:67:08:66:6e:07:de:
12:3f:f2:07:29:09:c7:8f:01:ef:73:db:a9:2b:07:
c5:dd:79:c3:fd:cd:06:5f:d7:1c:eb:d5:31:f0:15:
8a:72:38:1d:15:15:76:3c:6b:f6:c0:d7:ce:29:aa:
4a:42:23:12:3d:b1:82:0e:32:9c:95:f6:84:0d:78:
5a:41:7a:a1:25:d4:3f:f5:2f:b5:56:06:c4:eb:89:
5e:d7:9d:98:c8:be:e6:b2:1e:39:2f:46:20:43:38:
5f:39:f9:5d:f8:10:c1:f7:a4:f1:53:03:67:01:b4:
67:74:77:00:46:57:0c:06:f3:5f:41:41:ec:cd:ed:
37:89:8a:db:d0:a5:75:41:64:98:85:78:19:7c:70:
ce:f4:c3:2a:5b:c1:55:c2:e2:50:e5:4c:7d:c0:03:
9a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D4:AE:65:0E:E5:CC:BC:E3:5B:E7:81:26:EF:7C:68:51:79:25:8D
X509v3 Authority Key Identifier:
keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2b:4b:82:da:dc:dc:9f:8b:97:d7:11:a2:ec:30:7e:76:37:
c0:cf:33:af:18:d0:47:e1:a5:88:42:b6:a8:ea:52:f5:59:3c:
16:c0:cf:ab:ec:d4:74:b2:fa:89:98:6a:fd:52:b4:cf:0d:98:
38:c0:78:86:e4:ac:d4:e9:61:5d:5f:2f:77:19:bf:68:f5:72:
a0:ec:39:b1:a2:6e:c1:f6:23:b3:c9:ef:88:34:47:59:31:3c:
fa:c9:d1:a0:19:04:d8:6c:d2:36:20:af:82:cb:5a:d5:eb:a1:
c3:01:da:07:11:81:64:8d:35:dd:9e:8e:df:18:cc:84:5b:f2:
7e:94:9b:a3:27:f3:f4:9c:22:59:4e:62:f9:b1:4a:00:31:64:
54:1e:de:9f:54:4b:3a:13:14:cd:42:c4:ed:ba:e3:a9:9b:a2:
13:0d:8b:6b:5e:63:16:cb:1f:27:aa:38:43:4b:bf:85:c7:6c:
4d:ff:d6:47:91:ff:a4:aa:1a:21:b2:e4:79:b1:62:1e:82:87:
c0:3a:70:c5:84:08:c6:58:e3:0e:1e:59:7a:f0:c8:fa:12:f7:
08:2d:83:e3:81:3b:72:7f:ee:28:92:8d:07:05:86:2f:e5:2a:
40:3c:a6:dc:ca:2a:9b:ac:a9:ab:da:2e:03:d3:49:40:b2:37:
ed:e5:2b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:03:05 2025 by rpki-client