Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
File: cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft (raw, json)
Hash identifier: sEC2kGWJM4juLwyOVnaf1SRQ2GTBfdkuXc1/gqqbbfY=
Subject key identifier: D8:F4:C1:A3:96:B1:68:3D:78:D4:E4:5D:83:27:AD:12:F5:28:8F:61
Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Certificate serial: 01992820B3C737B4E12F894331F151D87CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
Manifest number: 1606
Signing time: Mon 08 Sep 2025 07:00:55 +0000
Manifest this update: Mon 08 Sep 2025 07:00:55 +0000
Manifest next update: Tue 09 Sep 2025 07:00:55 +0000
Files and hashes: 1: cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl (hash: oemCFE0HxWUa92+yZHVOAWvzr/qd6IDabjfIhfJoM98=)
2: vCqdKv7R0SPqg2beE-raqVkN9dk.roa (hash: qav8+RSTbcmeaTuiZ2SE6ePjqRAE/0kbvGatcxDfqj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:20:b3:c7:37:b4:e1:2f:89:43:31:f1:51:d8:7c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Validity
Not Before: Sep 8 07:00:55 2025 GMT
Not After : Sep 9 07:00:55 2025 GMT
Subject: CN=d8f4c1a396b1683d78d4e45d8327ad12f5288f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:3d:56:0d:ac:36:50:42:2b:e0:60:9d:cb:
67:2f:49:96:03:9c:1d:03:ef:48:22:05:42:fd:94:
74:56:a9:20:8d:7b:45:e0:e3:93:47:93:7a:5f:f9:
c7:57:20:3a:46:82:fc:b2:7c:1b:73:36:7a:7d:33:
60:45:d7:c6:f8:25:96:44:9d:fb:9f:c0:90:06:32:
3d:b3:b1:a1:7a:3b:fd:ed:fd:ba:e0:4d:ad:b7:3a:
aa:ab:78:48:87:c5:80:11:f9:b9:d9:03:d6:27:91:
46:74:f5:58:6b:7c:e0:af:0e:d9:9e:b8:e4:5f:74:
73:8a:1d:ba:8d:b9:8a:7c:c0:5c:65:6f:1b:40:68:
ec:9e:56:e6:10:dc:3e:9c:d9:bf:be:ee:e3:3b:9c:
78:dc:c5:87:f3:3c:c8:eb:2f:b1:46:3f:f2:bd:2b:
07:c3:59:14:59:50:c7:c6:ca:74:57:6e:2b:76:07:
01:67:c7:75:c6:3e:6e:e4:52:35:aa:59:b1:ca:dc:
34:72:57:31:69:be:39:ef:4e:aa:80:4d:92:fb:f2:
d8:5a:ff:7b:83:8e:cc:47:c4:fb:d4:58:36:74:1c:
57:15:77:77:e3:21:e2:e1:28:48:a9:e9:03:dd:8b:
2e:8e:e9:75:7b:6d:e3:d5:63:4a:ff:9a:13:8f:19:
29:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F4:C1:A3:96:B1:68:3D:78:D4:E4:5D:83:27:AD:12:F5:28:8F:61
X509v3 Authority Key Identifier:
keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:78:55:53:4d:75:24:50:ca:18:ff:6c:d9:43:66:d6:1c:e0:
c1:ab:a6:45:44:8c:ae:80:2f:eb:6b:77:f2:7d:07:00:45:27:
c0:7e:57:3c:b5:76:2f:34:50:fc:b5:83:62:4e:e5:bb:c4:fb:
54:64:fb:58:58:bd:df:1f:93:43:58:90:e9:f4:69:18:df:36:
22:ea:ec:80:27:b9:67:6e:93:71:87:0f:12:28:2a:68:5f:10:
e9:71:cb:9f:37:06:44:0a:c6:42:1e:92:ca:a6:28:51:d2:92:
0d:e4:2f:e3:ed:19:bb:e3:25:df:1d:82:08:2b:43:c7:e3:d1:
e1:f0:bb:7e:b3:38:a1:20:f4:af:40:0e:fd:fb:38:bf:14:35:
5b:82:b0:f9:42:c7:c9:08:d2:3c:1b:a1:12:9e:32:62:25:5b:
94:10:4f:8e:a0:ba:6c:ce:b8:bb:42:2d:89:17:6b:86:f5:69:
3c:52:bc:e3:05:12:ff:c4:40:87:34:57:42:b3:da:e2:10:a2:
72:6c:29:5e:56:17:18:b2:4b:f9:04:b0:88:d1:58:3d:5f:e6:
b7:e2:80:de:7b:3e:24:fd:a6:a1:f2:b4:15:cb:39:dd:ae:62:
c8:be:59:c6:1f:2b:16:d3:84:ee:35:7e:39:af:2c:97:84:7e:
15:57:48:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkoILPHN7ThL4lDMfFR2HzBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYjkwYzgzZDkwZjNkNGVmMjJkYjgyODUwMmU2MTUyYjZk
NWJmZTUwHhcNMjUwOTA4MDcwMDU1WhcNMjUwOTA5MDcwMDU1WjAzMTEwLwYDVQQD
EyhkOGY0YzFhMzk2YjE2ODNkNzhkNGU0NWQ4MzI3YWQxMmY1Mjg4ZjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe49Vg2sNlBCK+BgnctnL0mWA5wd
A+9IIgVC/ZR0VqkgjXtF4OOTR5N6X/nHVyA6RoL8snwbczZ6fTNgRdfG+CWWRJ37
n8CQBjI9s7Ghejv97f264E2ttzqqq3hIh8WAEfm52QPWJ5FGdPVYa3zgrw7Znrjk
X3Rzih26jbmKfMBcZW8bQGjsnlbmENw+nNm/vu7jO5x43MWH8zzI6y+xRj/yvSsH
w1kUWVDHxsp0V24rdgcBZ8d1xj5u5FI1qlmxytw0clcxab45706qgE2S+/LYWv97
g47MR8T71Fg2dBxXFXd34yHi4ShIqekD3Ysujul1e23j1WNK/5oTjxkpIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNj0waOWsWg9eNTkXYMnrRL1KI9hMB8GA1UdIwQY
MBaAFHG5DIPZDz1O8i24KFAuYVK21b/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83MDIyZGMtMzU2ZS00NGQ2LWEzZWIt
N2NmYjliMDdmNDBmLzEvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83MDIyZGMtMzU2ZS00NGQ2LWEzZWItN2NmYjliMDdmNDBm
LzEvY2JrTWc5a1BQVTd5TGJnb1VDNWhVcmJWdi1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHhVU011
JFDKGP9s2UNm1hzgwaumRUSMroAv62t38n0HAEUnwH5XPLV2LzRQ/LWDYk7lu8T7
VGT7WFi93x+TQ1iQ6fRpGN82IursgCe5Z26TcYcPEigqaF8Q6XHLnzcGRArGQh6S
yqYoUdKSDeQv4+0Zu+Ml3x2CCCtDx+PR4fC7frM4oSD0r0AO/fs4vxQ1W4Kw+ULH
yQjSPBuhEp4yYiVblBBPjqC6bM64u0ItiRdrhvVpPFK84wUS/8RAhzRXQrPa4hCi
cmwpXlYXGLJL+QSwiNFYPV/mt+KA3ns+JP2mofK0Fcs53a5iyL5Zxh8rFtOE7jV+
Oa8sl4R+FVdIeQ==
-----END CERTIFICATE-----
Generated at Mon Sep 8 16:06:01 2025 by rpki-client