
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
File: cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft (raw, json)
Hash identifier: BtD+Oy5gAqjI1zdbXqOSUFVQmi5hqV36ikJx6ABA5jU=
Subject key identifier: 1D:C9:DE:9C:F6:4B:79:E9:6E:BD:03:73:A1:1E:27:03:37:3E:FE:2C
Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Certificate serial: 019840621C7545DA254353361858923B50F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
Manifest number: 158E
Signing time: Fri 25 Jul 2025 07:00:28 +0000
Manifest this update: Fri 25 Jul 2025 07:00:28 +0000
Manifest next update: Sat 26 Jul 2025 07:00:28 +0000
Files and hashes: 1: cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl (hash: 4T5B8ht+ujDcToS5julJj+a9411sxcrY20fRpot25II=)
2: vCqdKv7R0SPqg2beE-raqVkN9dk.roa (hash: qav8+RSTbcmeaTuiZ2SE6ePjqRAE/0kbvGatcxDfqj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:62:1c:75:45:da:25:43:53:36:18:58:92:3b:50:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Validity
Not Before: Jul 25 07:00:28 2025 GMT
Not After : Jul 26 07:00:28 2025 GMT
Subject: CN=1dc9de9cf64b79e96ebd0373a11e2703373efe2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4c:c2:4c:e5:fd:56:af:2f:78:f5:39:c6:62:
ed:e2:4a:0c:1c:c9:39:97:c8:20:ee:83:2c:6b:14:
b1:82:b9:01:96:c6:8b:1f:97:b5:40:ff:29:ac:9f:
54:5d:ab:9a:37:34:24:fa:2b:68:c6:4a:4e:ed:17:
5b:7e:4d:79:59:18:71:f9:79:d5:1e:3d:ad:73:a7:
9c:9c:dd:fa:29:bb:eb:f3:bf:6b:5b:c1:fd:4d:dd:
1e:db:ac:57:a0:1a:16:cf:67:da:ab:7f:a3:68:5c:
e0:be:eb:9d:c3:6a:1f:f6:1c:8d:bf:7d:44:22:08:
95:2a:1a:6a:0f:0d:8f:55:0b:1f:f1:be:ee:65:bc:
bc:4c:d9:78:7d:6e:60:6b:50:6b:46:b9:8e:45:25:
30:e1:20:d4:43:20:8c:85:d0:7a:85:94:33:af:18:
2b:53:0a:4d:10:59:0b:63:32:f2:16:b9:2a:f3:d1:
1a:3e:34:6b:f0:c4:94:64:b4:59:75:54:16:fc:97:
27:03:1e:54:d5:06:c7:e6:3c:e8:54:77:bf:d2:77:
a1:f9:49:ef:d1:aa:e4:85:4d:35:b6:4f:83:f6:88:
d3:20:dc:5f:75:e0:7d:bc:b4:13:d4:51:99:e1:7f:
7d:1a:57:a0:e4:54:03:49:cd:b9:62:29:fb:30:b0:
16:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C9:DE:9C:F6:4B:79:E9:6E:BD:03:73:A1:1E:27:03:37:3E:FE:2C
X509v3 Authority Key Identifier:
keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0a:34:31:51:ff:bb:df:59:06:70:b1:f6:b6:0d:72:2a:16:
7e:da:2d:3e:41:7d:76:40:38:fe:af:a0:3d:db:95:34:5b:bb:
0e:fc:f8:1a:70:9a:8a:47:b8:26:5a:ee:c3:b0:98:e9:8a:b9:
75:1b:06:7b:6a:ae:05:26:4f:16:04:dc:24:a3:14:c1:4c:a7:
b8:1e:f8:32:63:ec:1f:02:f9:ca:6a:f5:69:dc:c4:8e:f1:c6:
fa:88:da:4f:b7:d1:e8:5c:0e:88:c5:93:97:43:6b:02:24:0f:
84:01:25:93:70:82:12:57:ac:17:fa:54:18:d0:55:2f:40:4a:
a5:d8:a9:2f:1e:37:72:66:cb:c0:91:4c:fb:6b:60:f7:c5:9e:
f3:e7:25:e6:e0:f9:55:c4:43:a8:f3:2a:40:c2:f3:88:87:ca:
3b:7c:4b:28:d7:4d:f3:8b:43:fd:60:03:7b:e7:d8:92:b8:11:
55:56:97:e5:17:37:c8:4d:5c:34:c6:9b:bc:28:13:97:e4:ec:
10:85:97:a6:44:65:55:fc:35:aa:b1:82:ce:40:fd:e9:83:47:
93:79:d1:58:f7:4c:93:0c:34:cd:7b:35:ee:f2:17:2d:7a:e9:
19:fc:14:38:d9:9b:cd:ef:6e:bf:8b:32:19:24:83:51:58:8d:
ec:0e:4c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:59:12 2025 by rpki-client