Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
File: CbARCuS4F5SlCIMfy17cyNX9Lxs.mft (raw, json)
Hash identifier: SRnesFBtW7XrXVya5Hq3xUwdcQaVKQi+tgh3S2g6Nmw=
Subject key identifier: FB:1F:EC:A4:50:87:A1:1C:AE:F9:1B:F2:27:39:1E:6C:29:01:5E:9D
Authority key identifier: 09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
Certificate issuer: /CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
Certificate serial: 01984EC240119C166A6BF73A59A61A709A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
Manifest number: 1606
Signing time: Mon 28 Jul 2025 02:00:09 +0000
Manifest this update: Mon 28 Jul 2025 02:00:09 +0000
Manifest next update: Tue 29 Jul 2025 02:00:09 +0000
Files and hashes: 1: CbARCuS4F5SlCIMfy17cyNX9Lxs.crl (hash: qmhPBz/p9n5Snds2voltP17yp40vT97EVVWrjholqgM=)
2: zyLhO2pA8EoiaCGmhzCvFXO3PZQ.roa (hash: zOCqTwjJOxNebqI94cAaf6aPymCO5NPJ+zXjaPobnkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:c2:40:11:9c:16:6a:6b:f7:3a:59:a6:1a:70:9a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
Validity
Not Before: Jul 28 02:00:09 2025 GMT
Not After : Jul 29 02:00:09 2025 GMT
Subject: CN=fb1feca45087a11caef91bf227391e6c29015e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b0:ff:1a:6a:14:f4:03:3c:f0:cb:32:bb:86:
e0:f9:24:43:46:55:65:d1:2a:56:f3:f6:e5:46:f8:
19:a8:76:44:83:f7:e9:75:c4:3b:87:c5:e9:30:08:
e5:a9:59:52:2f:ee:23:3a:b4:14:a9:cb:2c:65:68:
d6:12:0d:cf:b6:f5:5a:cc:1f:90:75:ce:22:34:38:
49:a0:4b:98:08:18:0d:ab:7b:dd:39:3b:4f:c0:59:
b9:89:3c:82:24:c8:56:d8:ec:db:87:f6:96:57:b6:
73:0d:73:a7:24:df:ad:ef:03:23:02:9a:38:88:bb:
30:ea:13:46:04:71:39:70:2e:1b:fa:41:3a:71:88:
98:a0:f6:96:44:76:39:b5:28:48:d7:31:83:d4:39:
c7:e8:1e:5e:fa:73:9d:53:26:13:e6:2e:29:57:74:
a0:d7:b3:a3:1c:f8:30:d6:a5:64:a6:16:55:b6:dd:
6a:a9:f2:94:de:e9:8d:d3:af:aa:00:b5:dc:1e:d2:
93:09:ce:c3:4d:1b:a7:9d:6f:f8:e4:a8:46:9c:10:
6c:a2:6f:3b:41:12:8f:5a:a8:10:2b:33:3b:33:41:
8b:b0:7f:6d:b1:67:77:c6:eb:21:3f:07:ec:08:a2:
48:d3:a1:15:bf:f5:10:3f:e3:7c:3a:28:ca:e5:bd:
06:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1F:EC:A4:50:87:A1:1C:AE:F9:1B:F2:27:39:1E:6C:29:01:5E:9D
X509v3 Authority Key Identifier:
keyid:09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9b:7f:47:60:c4:8e:b6:1f:2d:01:58:d6:fb:f7:67:81:32:
50:a0:4f:af:24:35:03:dd:b5:a4:40:28:58:6d:d1:47:03:75:
bd:6e:d8:59:4e:7c:de:33:5b:cb:64:98:6d:3e:7e:63:8b:3c:
82:b6:d2:46:06:dc:77:31:15:91:e1:ad:07:21:bb:2f:98:9c:
40:8d:18:75:72:3f:1d:6b:78:91:1b:b1:82:03:dc:b9:7f:46:
d4:5d:2b:18:2e:a1:73:34:54:6d:a0:22:d5:73:31:28:4e:db:
45:38:4c:d1:e2:59:d0:c0:99:41:7f:7d:4e:de:93:50:4b:f3:
6b:d3:c4:5b:a1:e8:21:63:38:b2:1d:9c:6f:c5:6b:52:5b:88:
af:79:f7:28:ff:e6:c0:07:37:a7:9c:eb:16:e5:35:30:b7:42:
c0:3c:47:12:dd:80:2b:41:d5:17:c3:f4:3d:b1:09:8a:d5:84:
1f:c1:07:74:3d:21:22:dc:48:78:6f:c1:db:5a:b2:cb:9d:ed:
7c:a8:dc:ba:15:f2:d3:23:de:af:21:24:f5:dd:f5:9a:50:27:
0e:0e:c5:4e:fd:3f:7b:d7:6a:0e:76:0c:b4:c7:f2:5f:fa:37:
e7:f9:23:23:a3:94:8d:d1:b7:67:ef:3e:a8:bb:31:ee:7e:7e:
99:2c:73:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 07:15:31 2025 by rpki-client