Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
File: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft (raw, json)
Hash identifier: 9exQscGiD0AZj3JGXn2QfAG/M86G0pq9gPtl1q/Pf88=
Subject key identifier: 27:6A:43:DF:0A:7E:23:8E:E7:D6:36:53:1C:A0:00:9D:71:B2:C2:F0
Authority key identifier: 70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24
Certificate issuer: /CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
Certificate serial: 0198745064CFA045838A962D5824B4920329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 09:01:22 +0000
Manifest this update: Mon 04 Aug 2025 09:01:22 +0000
Manifest next update: Tue 05 Aug 2025 09:01:22 +0000
Files and hashes: 1: 3vU9lDg123BQs9bja01AubVJ0Og.roa (hash: yP+f81+TFRbJ5t0yOxIDgQtB0tKvBjQ2pf/wHd/Zu40=)
2: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl (hash: 2joYvVYxYU3ZAwGdSwk6IwUTsKThDJhB9F2xV98EaZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:64:cf:a0:45:83:8a:96:2d:58:24:b4:92:03:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
Validity
Not Before: Aug 4 09:01:22 2025 GMT
Not After : Aug 5 09:01:22 2025 GMT
Subject: CN=276a43df0a7e238ee7d636531ca0009d71b2c2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:06:a7:a9:40:48:9d:ae:83:40:ac:71:ed:ef:
4a:03:a0:b7:c3:67:4c:53:2c:4d:72:3c:0b:9a:eb:
16:92:fc:2e:64:2c:b4:f5:3d:d1:f0:36:55:0d:a9:
77:fa:74:0a:80:f3:4d:9f:83:3d:a6:5e:b2:af:67:
13:7f:38:5d:3f:3e:0f:e7:ef:75:19:24:22:25:6e:
b4:ab:48:2a:33:c0:76:ff:73:7c:f4:88:d3:e2:34:
74:74:86:20:8f:64:e7:2b:e7:52:88:91:63:ba:fe:
73:d8:05:20:1a:f2:0e:98:88:c7:c5:8a:3e:77:87:
7b:e6:10:dd:11:e2:3a:f2:ea:c5:74:35:47:f5:fc:
a3:25:b6:d7:64:32:4f:1a:96:57:af:cd:3b:fd:07:
3f:4a:df:41:8c:e6:61:05:49:8c:58:1b:85:c9:bd:
27:ff:cb:64:9d:94:b2:36:91:63:41:3e:f5:e5:cd:
ab:13:a0:15:13:db:08:37:41:03:38:61:b9:af:23:
f8:ea:3a:96:01:4f:e1:0d:6f:a4:49:86:2e:ab:2c:
db:51:d7:9a:1c:07:1e:81:df:4f:7e:d5:0f:b9:33:
e6:16:f1:53:d7:37:b7:09:11:4e:ef:c3:91:d6:f1:
ce:0a:09:c5:b8:72:63:e4:29:44:27:94:07:47:7a:
45:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6A:43:DF:0A:7E:23:8E:E7:D6:36:53:1C:A0:00:9D:71:B2:C2:F0
X509v3 Authority Key Identifier:
keyid:70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:32:a4:d9:ee:29:4b:7b:48:1c:45:ed:5f:6e:aa:cb:c3:ee:
cb:fa:cf:9e:14:e8:9a:d1:57:04:fd:23:a7:79:f5:0b:ba:7c:
35:cd:7d:30:ad:b1:e7:b5:f1:f3:ba:bb:a3:82:54:a0:16:c2:
3f:dc:e5:4b:82:24:67:d2:28:f6:51:86:8d:17:e1:3c:b4:d9:
ae:23:b8:c3:35:33:d7:6f:ba:2a:9e:7d:71:13:48:d0:05:52:
18:5d:07:14:ba:bb:dd:7a:e2:03:d5:28:2c:0e:18:b7:9d:13:
ee:f8:e0:ee:61:bd:0d:d8:af:8e:75:ab:e0:82:7b:4a:61:d8:
a0:59:40:12:bf:ab:fa:8c:bb:3c:f6:ff:53:a3:12:0c:88:d6:
df:2d:54:43:ec:00:e0:c6:88:a1:a1:8a:e8:5d:f8:33:25:32:
12:d4:22:11:a5:70:08:b4:cd:66:80:86:98:65:03:92:a0:b6:
0f:84:9b:e7:58:74:40:a4:4f:0f:06:25:db:a9:06:9b:62:f6:
4b:de:7d:fa:70:f9:99:3a:a9:ea:1d:b6:7a:07:a5:28:d3:dc:
8e:1b:54:11:f9:23:46:e5:7e:e5:4a:76:39:2e:8c:c5:18:d8:
0a:cd:b2:08:da:ab:48:65:d0:d9:38:12:62:c2:0c:f7:57:5b:
86:6a:a6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:51 2025 by rpki-client