Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
File: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft (raw, json)
Hash identifier: FgKlFqFkWbtn4LL1v5Gy71heJ04sx0rUme1BveGsJrI=
Subject key identifier: AB:EA:B2:69:09:39:BE:DC:8A:D9:9A:A4:39:A8:75:D8:F0:6F:79:00
Authority key identifier: 09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
Certificate issuer: /CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Certificate serial: 01976EBE58219DE09BAEF1B75DA3ABC06523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 14:00:57 +0000
Manifest this update: Sat 14 Jun 2025 14:00:57 +0000
Manifest next update: Sun 15 Jun 2025 14:00:57 +0000
Files and hashes: 1: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl (hash: jmMnWUTzEdgufrxOolJ6vNZrz7rxQo35NUzFTKwnY1w=)
2: UmI6d2m9R3iczzZVeRe1gk47NKM.roa (hash: RX415hlrT0LruVY1Id4UgU7KARGGjtNq2cWbFexDoVY=)
3: kKi1E3PbMMVFH7DkXfoL7bN1Y8Y.roa (hash: KU0qbsM0A1KDDa+DQi187g2Fd0zrIojzhDbTUg8nXDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:58:21:9d:e0:9b:ae:f1:b7:5d:a3:ab:c0:65:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Validity
Not Before: Jun 14 14:00:57 2025 GMT
Not After : Jun 15 14:00:57 2025 GMT
Subject: CN=abeab2690939bedc8ad99aa439a875d8f06f7900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:94:1e:7c:d8:4a:86:f9:0a:3a:99:1b:9b:4b:
77:b9:ab:b7:58:87:e7:96:53:0f:bd:85:9d:4d:87:
cd:4a:05:0e:90:34:3c:56:ba:cc:82:6b:bb:3d:b9:
0e:7e:a3:1c:be:fc:c6:f1:86:e0:26:bc:c1:6c:d6:
87:b8:df:25:5e:1f:90:c7:d3:24:57:9c:81:62:68:
1f:96:4a:6a:09:2b:e3:b0:b7:6f:8e:09:8c:19:ca:
78:06:1e:0d:ff:fa:05:42:7b:c0:01:c3:58:55:41:
26:7c:bb:02:b6:fe:63:9f:76:d2:f1:8b:8a:e3:51:
62:c0:9f:db:ab:f9:dc:aa:23:eb:d4:b0:f8:5b:d7:
23:64:b2:e3:01:ec:aa:d0:90:af:59:5c:36:36:da:
fa:a4:50:dc:d5:30:5d:d7:ab:cc:9c:98:01:c9:b3:
9d:4a:cf:71:c6:a0:80:89:23:86:2c:8a:0a:6d:58:
8d:8a:23:1d:c3:88:81:cc:fa:14:88:4f:9d:1e:72:
26:b7:b8:f6:19:22:01:cb:63:da:06:5a:97:4f:3c:
d4:89:ab:05:bc:4f:97:a3:48:24:76:39:cd:b9:f0:
67:e2:c7:e4:9f:03:a5:53:72:c0:23:b7:2c:01:70:
ec:cd:07:80:35:2c:41:f5:ad:36:dc:bc:e5:a7:e8:
d6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EA:B2:69:09:39:BE:DC:8A:D9:9A:A4:39:A8:75:D8:F0:6F:79:00
X509v3 Authority Key Identifier:
keyid:09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:dc:20:d8:4b:47:cf:27:8f:65:e8:62:1a:9e:13:17:10:58:
fe:27:d2:d6:ec:e2:f1:99:45:21:01:97:ab:38:d3:ab:13:34:
2b:6c:e8:15:96:bf:89:da:f9:95:b8:9a:db:19:ec:cd:d2:b1:
0c:98:26:a5:3e:47:c3:68:20:fa:7c:c5:43:27:b6:a1:19:e8:
30:c1:14:f0:17:a2:10:63:ed:af:74:c9:09:df:8a:5f:2c:c7:
12:19:d6:41:a1:13:05:de:29:9b:77:a6:a6:cf:33:25:5c:03:
17:c3:f7:7b:a3:90:09:1e:76:01:9e:d3:09:c7:ee:41:e9:07:
17:47:bd:01:e1:09:7a:ad:fd:df:a9:35:e4:2f:d9:7e:28:85:
10:1e:47:87:5a:a9:5e:de:85:8d:2b:bf:3a:48:d6:97:95:bc:
5e:b7:1e:06:b5:1b:fb:71:3a:a4:a2:6f:64:57:a7:d4:1d:4d:
e6:ba:2b:94:43:c9:fb:df:36:76:90:a7:5b:3b:15:49:d4:17:
fb:cf:9f:41:f5:5e:ed:08:f0:0a:15:fd:89:07:76:e0:95:45:
ee:68:f9:d1:1b:93:a6:0a:4d:b1:3d:19:ad:90:d9:d9:92:1b:
31:13:3c:75:3c:d6:be:a1:94:39:4a:94:d9:d6:62:d6:97:b0:
d0:00:cf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:56:28 2025 by rpki-client