Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
File: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft (raw, json)
Hash identifier: CjLMeNM5KNQ8u2egwVtVjeWg6kVQtfhwF0Xf643goC0=
Subject key identifier: BF:8C:0A:78:B5:06:3E:B6:63:8D:6F:B4:EF:F1:5B:0E:86:85:1C:E2
Authority key identifier: 09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
Certificate issuer: /CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Certificate serial: 019A4F998CBFCC56DE45288AD4A695608DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 16:00:54 +0000
Manifest this update: Tue 04 Nov 2025 16:00:54 +0000
Manifest next update: Wed 05 Nov 2025 16:00:54 +0000
Files and hashes: 1: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl (hash: amRiaviFOFa142jYDHW6Jcd8lnPu+i8YJP17Qdf4oAY=)
2: Jf9y1r-7U3oVE_0fSwlBWZfWEa0.roa (hash: GPOv3V78s13UPdmn9zsSWoQbLb5tsSshuu6xid5/0Es=)
3: Ovnkzgu3GObRw7FEQRBgXQjx5M4.roa (hash: nJnymsSFWBg9H1fUFjESgx2imNhbNeKcWoh7uta0L5c=)
4: UmI6d2m9R3iczzZVeRe1gk47NKM.roa (hash: RX415hlrT0LruVY1Id4UgU7KARGGjtNq2cWbFexDoVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:8c:bf:cc:56:de:45:28:8a:d4:a6:95:60:8d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Validity
Not Before: Nov 4 16:00:54 2025 GMT
Not After : Nov 5 16:00:54 2025 GMT
Subject: CN=bf8c0a78b5063eb6638d6fb4eff15b0e86851ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:f0:80:bf:2b:f7:33:f6:d8:7c:0a:e0:ba:
9a:09:2e:82:b8:fd:47:64:07:45:a5:38:0c:f6:51:
48:0c:60:f5:98:be:e1:65:b8:e3:ae:ec:40:3b:2d:
d1:a9:48:a6:2d:a3:d9:ea:3a:9b:a9:33:e7:1f:d6:
77:0e:8a:7b:08:a0:62:98:7c:5e:9f:16:a3:1f:57:
1d:c2:ee:8a:69:b2:7c:08:a6:13:e8:cd:fe:f7:a3:
28:98:57:57:1c:ca:ac:61:fb:38:64:aa:c5:e2:27:
8b:c8:d2:cb:90:1c:df:17:38:48:4e:e0:4f:b2:4c:
f3:40:2b:6a:a0:bc:c3:56:cd:da:93:84:2c:64:60:
77:60:17:f5:b4:e9:65:4b:28:62:90:2f:08:bb:57:
eb:e6:5c:4e:65:b1:ce:4e:c8:ac:0b:92:a5:74:bf:
f5:5d:0d:93:0d:f3:b1:01:07:71:95:84:78:b3:67:
f5:95:d5:89:e4:ea:c3:71:5b:6f:64:45:56:ec:aa:
d9:10:ec:3c:51:40:bd:86:8f:87:10:40:8a:d8:2b:
65:47:bf:be:f5:7d:b1:d3:46:0a:f5:ae:18:be:cc:
3e:82:8e:68:f5:a9:ba:b0:50:a4:8b:88:bd:c2:ad:
48:2e:ef:80:7d:e3:5d:1d:c6:57:72:63:36:eb:bc:
0d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8C:0A:78:B5:06:3E:B6:63:8D:6F:B4:EF:F1:5B:0E:86:85:1C:E2
X509v3 Authority Key Identifier:
keyid:09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:12:e5:dd:b1:82:9d:38:83:b6:e6:0c:da:8a:a2:42:0e:d9:
14:85:44:94:c6:49:6c:ca:c1:cc:57:b9:04:6f:62:aa:e0:ae:
7b:7f:9f:10:dd:7d:42:19:d1:c9:79:f7:fd:ca:d7:c0:1a:3a:
a6:9b:f6:89:ea:06:32:0c:af:89:d1:6c:ba:47:92:fe:24:7e:
07:aa:94:b0:c4:56:f9:75:f7:61:74:e4:98:93:9d:2b:d7:3e:
f6:e0:c2:dc:2d:63:c7:b0:28:92:2f:20:19:57:a6:4a:41:b2:
f0:8f:2e:70:e1:63:80:3d:31:8c:c6:56:06:06:8c:a8:fd:ad:
b9:15:04:60:6c:c7:51:6c:9b:de:ed:ce:49:85:15:75:be:aa:
cd:f6:23:54:c6:64:43:17:ec:08:ad:9b:e7:a7:f9:83:37:23:
47:bc:4b:66:de:41:00:2a:e5:8a:c6:1a:57:19:23:ee:2b:1f:
86:53:43:f9:33:68:85:c9:a2:6a:8e:17:45:c5:ff:37:91:fa:
fe:06:84:39:f5:c6:75:af:65:7f:c4:62:37:b7:c2:8c:d1:96:
8f:19:ba:93:5c:23:c6:82:d6:f1:3d:74:3b:bd:2e:9f:fe:bd:
ee:62:90:af:8c:b9:ab:dc:cd:41:2e:df:ef:c9:08:70:80:09:
f2:83:e8:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmYy/zFbeRSiK1KaVYI32MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YjRiZjM3ZjM5ZWVjNjI5ODJjNGI2MzcwOWZhYjVkMTQ2
YzczNzMwHhcNMjUxMTA0MTYwMDU0WhcNMjUxMTA1MTYwMDU0WjAzMTEwLwYDVQQD
EyhiZjhjMGE3OGI1MDYzZWI2NjM4ZDZmYjRlZmYxNWIwZTg2ODUxY2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWbwgL8r9zP22HwK4LqaCS6CuP1H
ZAdFpTgM9lFIDGD1mL7hZbjjruxAOy3RqUimLaPZ6jqbqTPnH9Z3Dop7CKBimHxe
nxajH1cdwu6KabJ8CKYT6M3+96MomFdXHMqsYfs4ZKrF4ieLyNLLkBzfFzhITuBP
skzzQCtqoLzDVs3ak4QsZGB3YBf1tOllSyhikC8Iu1fr5lxOZbHOTsisC5KldL/1
XQ2TDfOxAQdxlYR4s2f1ldWJ5OrDcVtvZEVW7KrZEOw8UUC9ho+HEECK2CtlR7++
9X2x00YK9a4Yvsw+go5o9am6sFCki4i9wq1ILu+AfeNdHcZXcmM267wNdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+MCni1Bj62Y41vtO/xWw6GhRziMB8GA1UdIwQY
MBaAFAm0vzfznuximCxLY3Cfq10UbHNzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2JTX05fT2U3R0tZTEV0amNKLXJYUlJzYzNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8zNzE2ZDktNDczZi00YWYzLWExZDMt
MjRlNmMwZDRmYWQ3LzEvQ2JTX05fT2U3R0tZTEV0amNKLXJYUlJzYzNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8zNzE2ZDktNDczZi00YWYzLWExZDMtMjRlNmMwZDRmYWQ3
LzEvQ2JTX05fT2U3R0tZTEV0amNKLXJYUlJzYzNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERLl3bGC
nTiDtuYM2oqiQg7ZFIVElMZJbMrBzFe5BG9iquCue3+fEN19QhnRyXn3/crXwBo6
ppv2ieoGMgyvidFsukeS/iR+B6qUsMRW+XX3YXTkmJOdK9c+9uDC3C1jx7Aoki8g
GVemSkGy8I8ucOFjgD0xjMZWBgaMqP2tuRUEYGzHUWyb3u3OSYUVdb6qzfYjVMZk
QxfsCK2b56f5gzcjR7xLZt5BACrlisYaVxkj7isfhlND+TNohcmiao4XRcX/N5H6
/gaEOfXGda9lf8RiN7fCjNGWjxm6k1wjxoLW8T10O70un/697mKQr4y5q9zNQS7f
78kIcIAJ8oPobg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:10 2025 by rpki-client