Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
File: cbbQ4ActDKspv6hzfeKlPlFBgnY.mft (raw, json)
Hash identifier: F0dmdZozeKFCZKv/vs4B/yLpP2CksKqYZi3Qw71cdn8=
Subject key identifier: 78:07:B6:4D:F2:6E:13:C4:98:39:56:67:D6:CE:A6:57:62:6C:B7:DA
Authority key identifier: 71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
Certificate issuer: /CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Certificate serial: 019849D2EA2BBC54F469E2223800D65A3563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
Manifest number: 0686
Signing time: Sun 27 Jul 2025 03:00:15 +0000
Manifest this update: Sun 27 Jul 2025 03:00:15 +0000
Manifest next update: Mon 28 Jul 2025 03:00:15 +0000
Files and hashes: 1: cbbQ4ActDKspv6hzfeKlPlFBgnY.crl (hash: dyQRPVbIwWyM7gQ6UhsN5PLaSfycsAe+s9yyIYCD7Zo=)
2: m3oyez4opl0YbbQ1CR2fl2aO7F8.roa (hash: FqYvVOjK/elvRD3q2xJweF4ZvocMCS6cmWVMXbFh3Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:ea:2b:bc:54:f4:69:e2:22:38:00:d6:5a:35:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Validity
Not Before: Jul 27 03:00:15 2025 GMT
Not After : Jul 28 03:00:15 2025 GMT
Subject: CN=7807b64df26e13c498395667d6cea657626cb7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:11:b9:d5:35:33:76:28:03:c3:2f:82:84:81:
dd:9b:5b:f5:98:7d:42:3a:05:5a:be:2e:6d:e2:e5:
af:b9:d3:d8:4c:50:7c:b9:54:bc:50:6f:b8:b3:86:
68:ec:07:0c:0b:8d:18:9a:9f:b7:d5:54:f1:43:8d:
c3:aa:52:a7:56:c0:5b:b6:60:89:21:06:ee:6c:93:
00:72:65:52:a8:16:a3:2e:73:b9:40:b3:34:61:2a:
5a:47:b5:22:4e:83:e5:00:1f:55:2f:80:87:b5:a1:
29:6f:fb:24:5e:70:50:cc:0a:30:65:33:7a:2a:97:
ce:aa:b9:76:8a:34:c0:e9:f9:55:cd:b8:77:8c:ef:
04:ea:b6:25:14:00:13:34:f2:e6:76:a5:b2:0f:e4:
65:83:f6:69:e9:a8:4a:1f:cb:a1:3b:42:eb:70:93:
4f:a0:cd:f0:5a:40:ee:17:93:e9:b8:cb:9a:98:45:
55:69:20:92:56:7a:6f:0f:2d:ee:cb:26:93:10:28:
62:78:14:f2:58:a7:f3:94:d7:aa:ac:a2:b5:ec:40:
ea:70:f6:ba:c1:28:c2:7a:9f:d5:b5:4a:59:65:95:
36:02:0f:2e:ae:79:73:51:f3:de:a0:fe:71:fe:13:
25:e4:74:86:21:9f:2b:8f:80:08:ac:07:c0:6c:3f:
6e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:07:B6:4D:F2:6E:13:C4:98:39:56:67:D6:CE:A6:57:62:6C:B7:DA
X509v3 Authority Key Identifier:
keyid:71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ed:91:f3:9d:4f:b5:82:78:a5:aa:f2:b0:75:a4:cb:6e:c6:
a2:e3:60:1f:5a:fa:7b:50:e6:ad:e3:21:b6:56:b3:15:23:10:
f5:e5:f6:6b:ec:a0:e6:f1:15:70:ca:0f:db:2d:51:c7:10:b2:
e8:b8:5f:b2:13:e5:f4:75:1b:dd:3c:49:e5:b3:fe:43:d4:22:
f6:e7:a8:4b:cb:be:8d:e0:39:5b:ce:bd:90:f0:b1:d9:49:e3:
62:48:b6:4c:4b:b9:12:7a:b1:d8:91:f3:46:01:5b:5c:9f:ed:
86:64:e3:c8:29:83:03:e2:3d:c8:3c:3c:a3:d0:bc:1a:3c:23:
dc:4c:e7:09:6e:0b:8a:58:b9:a3:30:36:9f:5d:bf:dd:8a:dc:
b3:9d:39:bb:67:c9:59:43:d6:87:40:34:3f:44:2e:71:b9:98:
85:07:05:c3:c3:81:52:57:2c:69:d2:10:ea:9f:6f:0e:73:bf:
14:39:64:00:e9:b2:ec:89:ee:ad:33:c7:03:76:c4:a5:51:e1:
7d:c7:79:fc:68:9f:c3:fa:b8:ad:e9:7d:b6:9e:fd:a4:84:68:
c1:e3:ce:8b:f9:0c:d0:a1:c2:b2:f3:24:f2:26:a8:43:f5:16:
ff:7a:d7:71:91:97:e3:7a:84:93:62:1c:a1:95:9c:c3:21:fe:
5b:a6:2b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:38:50 2025 by rpki-client