
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
File: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft (raw, json)
Hash identifier: IscFnljHsjCt3cB5WGuCwkYBc05BoXDbgu7HFxYWpe0=
Subject key identifier: 6E:9F:BD:47:64:95:DF:57:0B:41:D2:03:20:FD:1F:6C:EE:6E:88:CA
Authority key identifier: 70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24
Certificate issuer: /CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
Certificate serial: 019A72259DBAB37CE14AD1448D3206EB062A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:00:59 +0000
Manifest this update: Tue 11 Nov 2025 09:00:59 +0000
Manifest next update: Wed 12 Nov 2025 09:00:59 +0000
Files and hashes: 1: 3vU9lDg123BQs9bja01AubVJ0Og.roa (hash: yP+f81+TFRbJ5t0yOxIDgQtB0tKvBjQ2pf/wHd/Zu40=)
2: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl (hash: 9GpfPHrx74qF0BL870FoGu9xgzGWPTcn0Vg6/9lBkMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9d:ba:b3:7c:e1:4a:d1:44:8d:32:06:eb:06:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
Validity
Not Before: Nov 11 09:00:59 2025 GMT
Not After : Nov 12 09:00:59 2025 GMT
Subject: CN=6e9fbd476495df570b41d20320fd1f6cee6e88ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:ec:2f:e2:00:ab:d4:e9:35:7f:62:bd:6c:
df:c6:fa:eb:74:78:dd:18:22:eb:c1:84:13:56:4d:
53:d1:da:75:e5:04:e3:42:8f:b6:dd:40:81:7a:6b:
3c:09:7d:95:5f:e8:11:6c:ad:3c:07:34:33:2d:db:
1d:25:48:de:12:75:69:ac:75:c5:e4:6d:26:84:30:
0a:7c:ad:21:18:ff:9c:a3:2e:49:a4:19:ac:32:47:
c7:e3:4f:24:bf:b4:8b:a6:85:ac:73:11:4d:81:f7:
09:54:d7:f5:2e:20:23:5d:35:91:a3:7b:10:bc:3e:
fa:4c:07:6d:1d:de:d2:57:de:07:db:2b:b1:a1:91:
2a:d3:78:0c:e3:c5:5d:40:c0:ba:6e:c1:c3:9b:6f:
3e:bc:59:c6:a1:b3:14:cd:d6:4c:b9:21:ed:6c:79:
61:3d:0e:93:2b:c5:c0:d9:fe:2e:91:fe:c4:36:c3:
12:d1:fc:95:c2:a3:0f:4a:53:19:9b:3e:97:6e:a3:
77:9e:94:88:6a:f4:aa:da:ef:1d:0a:7a:94:19:33:
cb:4c:fd:d1:c7:6e:a3:89:ba:65:9b:9b:a7:8c:d7:
e6:19:6f:a7:5f:80:f9:ff:e4:72:45:ab:83:81:e9:
4d:50:eb:ae:69:7c:bd:2a:9c:60:0a:69:f9:a8:57:
3c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9F:BD:47:64:95:DF:57:0B:41:D2:03:20:FD:1F:6C:EE:6E:88:CA
X509v3 Authority Key Identifier:
keyid:70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e2:61:46:d3:00:ed:c8:fa:72:1b:0f:f3:7b:bc:3a:20:6f:
20:d6:da:22:4e:dc:c0:1d:23:49:dc:71:05:de:7d:a3:28:0a:
09:66:44:58:df:9e:eb:c0:98:9e:f3:30:e2:15:f8:e9:1c:9f:
91:53:54:52:e1:f1:b4:f1:e4:16:b6:da:2c:7c:7e:5a:ac:40:
30:0e:d7:91:78:74:63:3a:aa:62:dc:5d:98:ea:44:16:ae:47:
b8:1a:69:1f:81:f6:a1:50:de:0b:ed:a8:bb:0a:2c:58:c7:8b:
fe:f8:f1:e5:49:c3:03:19:3b:26:6a:6a:5b:84:48:88:84:33:
f4:35:d1:a8:6a:da:3f:1b:cf:d1:ba:b1:6c:76:8b:fc:26:ab:
e1:83:86:42:fa:8e:5a:78:a6:f8:3f:94:f8:a3:26:31:e4:af:
d2:8d:b1:64:f2:28:aa:8d:c9:3c:4a:02:0e:4f:32:22:be:27:
6d:be:7f:eb:ca:da:5a:43:ed:62:bf:40:5c:5f:8a:bf:e2:9a:
7b:7e:26:2b:e7:b3:dd:ac:2e:95:82:5b:bd:95:db:7c:4c:df:
47:a5:3d:2a:6f:05:b5:81:ef:96:3d:94:fd:5f:22:38:3b:0c:
85:b0:89:a2:c6:00:83:82:02:28:01:f4:6e:28:5d:68:7e:1c:
99:0d:7b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:39 2025 by rpki-client