Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
File: CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft (raw, json)
Hash identifier: cBs89Swr7EY6ni0bjPJ0ApmrmjvjwCjFV3DcZ95eLDk=
Subject key identifier: 22:EB:B2:20:09:6D:3F:62:63:E2:8B:14:FD:32:A0:94:60:38:72:9D
Authority key identifier: 0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
Certificate issuer: /CN=0a06f033537bbd863bbca2b62092d8de3611f651
Certificate serial: 019922558E0F5B93B5259D0D73301C493726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
Manifest number: 0913
Signing time: Sun 07 Sep 2025 04:00:56 +0000
Manifest this update: Sun 07 Sep 2025 04:00:56 +0000
Manifest next update: Mon 08 Sep 2025 04:00:56 +0000
Files and hashes: 1: CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl (hash: +iW8UIANEtPW2xehZPCn3/c6Ft9825JAg99SPtOpL58=)
2: pltDgh5JbbEWSggwVXLGKtobVl8.roa (hash: XwQl2FIwqmmMyr6/rQAaXcZHJoaBjslDK7+U58bsYig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:8e:0f:5b:93:b5:25:9d:0d:73:30:1c:49:37:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06f033537bbd863bbca2b62092d8de3611f651
Validity
Not Before: Sep 7 04:00:56 2025 GMT
Not After : Sep 8 04:00:56 2025 GMT
Subject: CN=22ebb220096d3f6263e28b14fd32a0946038729d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c3:b9:21:87:ed:55:ad:3f:20:f7:1c:42:2c:
28:69:28:b3:d9:3b:99:fb:62:a1:b3:85:21:60:ff:
91:40:b2:03:c9:3f:67:f5:95:5f:53:10:e6:f2:e7:
9d:f6:0d:66:78:1b:30:c8:a9:1d:c7:73:1b:02:28:
1b:1b:22:db:20:d1:66:f4:47:66:b3:ee:52:14:32:
c8:2e:6b:64:0c:ad:06:af:a5:dd:6e:d3:9a:b0:01:
c7:4f:d2:b4:67:f2:a9:34:64:35:61:3b:83:34:e4:
b9:5a:72:dd:48:0e:dd:2d:11:69:70:43:ca:98:16:
7b:55:a5:82:a8:4d:f5:d1:14:0a:18:28:e2:cc:53:
f9:39:5c:a3:00:61:28:5d:bb:ae:82:34:53:8d:92:
29:27:4a:54:6c:7e:86:af:e9:02:2a:d6:9b:1a:e6:
ed:b7:2e:c9:54:7e:6d:2b:c3:5e:bb:9f:ce:bb:21:
e8:a4:6a:c8:d2:ca:0a:70:a4:ae:c5:4e:5b:8c:d4:
b2:f7:3d:73:01:6d:8b:86:ef:80:d4:7e:38:40:8c:
78:76:b0:11:d6:67:33:01:e3:2c:8d:e9:a5:bd:14:
3d:02:e5:00:d0:c6:9b:1d:fd:a9:a5:6a:49:1d:dd:
e1:c8:8f:86:9d:03:79:a0:5d:f3:dc:18:97:53:a8:
05:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EB:B2:20:09:6D:3F:62:63:E2:8B:14:FD:32:A0:94:60:38:72:9D
X509v3 Authority Key Identifier:
keyid:0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:92:34:72:b5:4e:30:09:f6:eb:3b:fb:2a:ba:ef:9d:03:3f:
03:4a:c0:9b:8a:c7:4f:65:0d:bc:90:4f:3d:0a:35:fb:ce:bf:
c8:cb:b1:1a:9e:9e:9c:2b:9c:ed:54:ae:bc:89:d7:e6:65:f7:
26:d6:b3:1b:3e:63:c1:88:c9:11:a4:52:21:da:40:3d:a2:5f:
9f:32:41:bb:c7:cb:2b:7f:e2:8f:94:64:23:f6:77:f3:f0:9a:
ff:dd:34:69:5f:c3:13:ec:1f:5e:ee:79:81:69:e4:d0:a1:f8:
78:42:7b:fc:d0:66:0c:3a:ef:20:93:73:82:8a:5f:d2:28:b0:
38:3c:7b:a9:f4:b4:1c:db:36:94:7c:74:c5:3c:76:7f:53:be:
3e:d6:9f:17:a2:56:41:b3:be:81:76:a0:d6:fd:cc:24:90:63:
0f:cd:0e:bf:c4:e6:f3:97:a5:a7:ea:2d:01:31:b9:c3:af:b1:
05:2f:25:a7:17:fb:14:0a:0a:38:50:6d:5c:c6:58:3c:94:92:
ac:cf:21:ed:aa:e3:8b:ce:7d:72:56:44:f8:2a:60:71:e8:6d:
bb:9c:ba:db:fc:77:eb:08:99:46:4f:12:59:61:45:7c:da:b1:
0b:92:15:9d:43:ed:5c:65:b3:6a:08:09:54:4b:65:8d:4d:68:
f1:2c:f4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:29 2025 by rpki-client