
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
File: cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft (raw, json)
Hash identifier: /p7apP8g+uJlsOdUJJzkIKDI8u1OQl+0YUVQoQwzOjM=
Subject key identifier: 90:F4:BE:24:30:97:C2:7B:27:F1:3D:40:AD:27:C7:4B:80:32:0F:8F
Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Certificate serial: 019A1986AC4917414DA8AE82F47D9DE639AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
Manifest number: 1683
Signing time: Sat 25 Oct 2025 04:00:47 +0000
Manifest this update: Sat 25 Oct 2025 04:00:47 +0000
Manifest next update: Sun 26 Oct 2025 04:00:47 +0000
Files and hashes: 1: cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl (hash: MssfXVWIzXzB2TkEu7VWcIoe+fbUfaBaHQH2a4BMjOk=)
2: vCqdKv7R0SPqg2beE-raqVkN9dk.roa (hash: qav8+RSTbcmeaTuiZ2SE6ePjqRAE/0kbvGatcxDfqj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:86:ac:49:17:41:4d:a8:ae:82:f4:7d:9d:e6:39:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Validity
Not Before: Oct 25 04:00:47 2025 GMT
Not After : Oct 26 04:00:47 2025 GMT
Subject: CN=90f4be243097c27b27f13d40ad27c74b80320f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0f:cf:ea:a7:89:b5:5d:e6:7a:2b:f1:0a:93:
b5:f9:e7:32:ce:bc:d5:5d:99:e1:bd:e9:d1:bc:20:
0d:98:c9:df:04:89:85:e7:38:b7:01:da:7c:2a:3a:
8f:3c:37:91:72:4f:a3:a0:99:f5:89:20:25:19:a3:
e7:70:5d:fe:8e:85:77:80:4b:4c:2b:0e:0c:19:3f:
48:59:26:79:ca:f8:3c:3f:d2:d5:26:9e:e2:5a:70:
38:0a:65:d7:fb:ab:c6:8f:0d:19:a6:bf:2e:ca:fe:
73:1f:69:4a:7c:97:c8:d0:c6:32:42:80:7c:9c:90:
82:b8:b4:de:b5:1f:95:61:f3:15:8e:67:ea:03:26:
76:2c:f7:c6:ff:29:38:e1:e2:4a:8c:de:9d:4e:26:
3d:98:b8:7d:8e:c0:3b:27:02:bf:21:d7:f0:9d:dd:
85:86:25:4f:b2:4e:6a:87:1b:64:bd:2c:de:36:43:
38:48:a5:5d:f0:a0:e0:98:45:fd:62:49:16:55:36:
0f:dc:b4:b3:81:36:92:24:a6:bd:25:17:7b:56:8b:
fe:ed:7c:13:7d:0d:14:79:06:ef:32:d7:bd:ca:17:
57:40:82:91:20:4d:d6:cb:20:2a:fc:df:fc:8d:3a:
cc:1f:e9:8e:4c:f5:bc:d4:a6:f4:f7:a6:c9:2b:8e:
16:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F4:BE:24:30:97:C2:7B:27:F1:3D:40:AD:27:C7:4B:80:32:0F:8F
X509v3 Authority Key Identifier:
keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9f:56:e4:05:6d:51:e3:a4:d3:db:ab:9e:d5:ac:48:d1:ef:
8f:26:0c:30:39:a0:59:e5:6d:ac:81:37:27:0a:b8:fe:5e:bd:
3d:17:19:3d:b5:7b:71:89:d3:78:c3:5b:25:00:9c:e5:12:ae:
39:ac:a8:57:63:6f:68:82:04:14:5c:1d:4c:00:61:14:e5:e9:
0f:2f:4c:63:a5:d6:6f:a9:12:78:80:67:5a:ef:12:f1:35:04:
bd:e1:1f:ea:a8:19:49:f2:58:f7:c7:2d:e2:bc:ad:fe:51:0f:
56:1a:30:3c:56:b4:a8:95:57:dd:d3:7a:2b:7c:8a:a6:a2:b3:
31:a9:e9:96:cb:89:9b:dc:82:4c:7c:76:f6:c2:d3:63:ba:ba:
d0:da:45:c6:4e:17:78:72:70:f5:78:f1:88:65:31:b4:5a:41:
2c:3f:22:d2:60:0d:03:40:b1:fd:5d:36:85:17:9a:37:2a:c6:
2b:c5:e9:8b:c5:db:29:5a:b7:8c:55:59:3a:c6:d8:81:fb:c3:
91:13:0b:0c:1a:4c:bc:74:e0:b2:1e:ce:a7:07:9c:81:70:54:
a8:23:e3:f2:61:82:04:ae:b6:f6:86:f6:da:90:a5:b8:b0:ee:
c8:1c:7a:9d:81:3f:3d:6f:0c:96:6f:9c:00:cc:89:cb:16:b1:
95:2b:30:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:35:57 2025 by rpki-client