Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
File: CBG8UM_tnQLlgZaiyByYjjC6EmA.mft (raw, json)
Hash identifier: eMv5IDTnml55dueKFiKxlkcV4kk7s6753zJ375jcGVY=
Subject key identifier: CE:05:F7:08:37:0E:52:04:8E:CA:2B:9A:72:A7:D7:AA:52:77:24:82
Authority key identifier: 08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
Certificate issuer: /CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Certificate serial: 019935A59049F297D2577CB93BDDCD9D7FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 22:01:06 +0000
Manifest this update: Wed 10 Sep 2025 22:01:06 +0000
Manifest next update: Thu 11 Sep 2025 22:01:06 +0000
Files and hashes: 1: CBG8UM_tnQLlgZaiyByYjjC6EmA.crl (hash: PeL/zJfpnMM09fkscebvoNxw763nmNvuEBBQeAGj394=)
2: mWwPnP2S4g9JhxWYKKryZjEy1Ao.roa (hash: HyXUe+PYjqIKyOZOZZRdFXR1ckNBvzFOngXjiDgbrBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:a5:90:49:f2:97:d2:57:7c:b9:3b:dd:cd:9d:7f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Validity
Not Before: Sep 10 22:01:06 2025 GMT
Not After : Sep 11 22:01:06 2025 GMT
Subject: CN=ce05f708370e52048eca2b9a72a7d7aa52772482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:49:3d:26:b8:0f:2a:fd:41:ad:25:63:2b:4e:
23:d3:d8:99:6f:f5:ab:2e:c6:60:88:b1:80:c1:f3:
d0:c1:df:d3:3d:f9:a3:0f:95:8c:c5:6b:c6:e7:05:
be:44:2f:12:94:6d:66:3a:63:c6:c6:64:54:12:28:
bb:79:6c:0c:8d:f6:2a:f9:c4:95:7c:b9:60:94:1a:
bc:c8:f2:ea:4f:5f:5e:0f:83:c6:4f:11:29:15:ee:
10:75:e0:3d:fa:64:c1:0b:2a:69:51:96:f7:c4:70:
f1:1e:95:d0:e6:2e:4f:ca:7f:92:e7:91:3a:c9:c8:
f1:2e:a3:b3:5e:8b:1c:f2:0e:8c:eb:e0:6d:69:fe:
89:94:1e:13:8e:9c:47:b4:ae:b0:53:ee:3a:4a:cf:
47:a2:ea:e8:65:d8:e0:f6:3a:7f:8d:de:2e:c1:15:
0e:3a:a8:24:17:72:fe:26:07:8f:3a:04:d5:e1:dd:
6e:76:8d:8a:a1:fb:5b:2f:7b:92:31:a2:22:35:d6:
98:53:3a:22:a2:b9:6e:84:50:8d:3e:10:d5:47:1f:
5a:ba:90:da:0c:ee:3b:e2:1b:42:e0:6a:05:ad:6a:
9e:f7:61:e2:ff:be:2f:7e:41:5f:1e:bf:1c:e6:fd:
2f:cd:e6:af:e6:a0:14:92:10:05:ea:93:e8:1e:a7:
79:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:05:F7:08:37:0E:52:04:8E:CA:2B:9A:72:A7:D7:AA:52:77:24:82
X509v3 Authority Key Identifier:
keyid:08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:cf:10:00:b4:e2:98:01:a1:9c:63:2b:86:7e:f4:09:3d:b0:
c8:91:64:a3:ac:62:2d:9c:a1:dd:97:32:f2:9c:d8:95:cf:16:
6d:d3:77:3b:61:7f:78:66:d3:73:08:cb:2d:20:f1:9e:88:d4:
04:f6:95:00:12:d8:25:d9:76:51:66:31:62:25:65:0c:20:69:
f9:c6:35:2a:2d:68:b4:ea:aa:ea:80:f4:5f:8b:5b:5c:a9:5c:
af:bc:98:5e:dc:48:ec:aa:38:ae:1e:0c:00:e8:b3:29:b7:fd:
d0:b8:a6:e7:15:1f:ff:04:96:b5:4b:c3:6a:a3:ef:ea:8f:16:
c2:be:ac:c0:09:fa:51:71:1d:ad:07:86:c9:fe:e8:b7:f8:21:
1b:24:52:3b:03:16:76:00:b9:06:97:66:cb:11:67:6a:e3:6c:
ca:1e:f2:1c:50:b5:81:b2:f4:83:6c:49:c7:0f:41:12:e4:3b:
12:8f:62:18:78:e6:76:46:37:b3:45:64:07:38:29:77:4e:a6:
65:35:ad:9d:53:7a:cf:1d:7b:8d:f2:70:e5:d7:e9:87:b1:6a:
4a:af:53:a0:2c:ea:48:21:ef:97:93:7b:cf:c2:ad:65:6e:d2:
8c:d9:7d:5b:a7:ba:d3:25:09:eb:9f:57:47:1a:a7:44:49:d2:
1d:0f:2b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 02:57:52 2025 by rpki-client