Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
File: cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft (raw, json)
Hash identifier: mv1/FEDb7jgR3LidloxVlLMQImTq3ym7NMvwCZCJ2c8=
Subject key identifier: ED:B8:99:D8:D0:AA:F9:A0:55:6E:7D:55:C3:84:97:37:1A:1F:5C:9A
Authority key identifier: 71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
Certificate issuer: /CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Certificate serial: 019A70A534F2D31CADE68BE79D326A1B634C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
Manifest number: 0862
Signing time: Tue 11 Nov 2025 02:01:06 +0000
Manifest this update: Tue 11 Nov 2025 02:01:06 +0000
Manifest next update: Wed 12 Nov 2025 02:01:06 +0000
Files and hashes: 1: cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl (hash: apZtTj1tkb4projiVkXD02WvG+VS1buhd0n9+VQgwSM=)
2: nA6xks4oQE9N25Xp7uQGkNyo-7Y.roa (hash: F+E2ylwyKz3DO5lKloF7/MKQO4W4GhOJOnJmcBpu/7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:34:f2:d3:1c:ad:e6:8b:e7:9d:32:6a:1b:63:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Validity
Not Before: Nov 11 02:01:06 2025 GMT
Not After : Nov 12 02:01:06 2025 GMT
Subject: CN=edb899d8d0aaf9a0556e7d55c38497371a1f5c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bd:d1:1e:6e:c3:8e:40:b0:b1:51:50:97:2e:
90:c0:e5:29:ce:22:ed:75:96:23:6a:dc:90:1b:6b:
d1:30:b9:84:c2:76:f3:85:ba:8a:f3:01:57:0d:86:
ef:ee:71:8f:10:ef:76:e7:df:c9:7f:8f:48:cf:d2:
e6:e1:5e:7e:0b:86:b5:22:27:98:4a:be:8b:90:6c:
64:e6:df:3e:14:02:73:78:d5:b8:3d:35:9e:99:53:
19:4a:8f:6a:4e:a6:91:2b:81:9b:0e:1f:3d:70:2c:
aa:50:2c:6b:55:49:5c:bc:70:7f:b5:3d:9f:1a:9a:
3e:8d:63:47:56:5a:6b:ec:d3:23:83:5a:e4:de:73:
d3:40:fb:42:b7:23:ee:65:40:4c:b3:ca:2f:4c:42:
cf:8b:3e:b0:57:7f:1c:17:7e:77:d6:52:67:43:e6:
ef:a9:34:fd:1a:3e:8b:a1:04:48:3c:1c:81:ce:ff:
12:6d:68:93:02:8d:6b:9e:cf:0e:74:5d:75:74:1b:
9b:47:7b:f3:a7:a3:d8:80:1d:96:30:36:49:7f:a3:
81:a8:5d:8a:3b:70:f4:b3:67:c6:18:23:f5:94:99:
e4:09:12:05:c3:45:e3:07:86:98:a1:44:71:60:6e:
cb:8c:ae:8a:26:a3:7d:72:ff:b0:95:f9:f5:cf:61:
30:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B8:99:D8:D0:AA:F9:A0:55:6E:7D:55:C3:84:97:37:1A:1F:5C:9A
X509v3 Authority Key Identifier:
keyid:71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:9c:3b:e1:17:20:47:70:a8:6e:dc:da:1a:d6:23:11:2d:30:
df:ee:6a:83:0b:70:f5:cb:c2:de:73:15:2d:f7:c4:63:68:c6:
fa:7e:12:ce:fc:18:25:08:4b:f4:80:05:f3:26:eb:22:27:ca:
20:b0:15:b4:ce:ce:9b:6f:96:0d:75:9d:ac:7b:df:cc:4d:7e:
9b:34:0b:3f:50:5a:d7:84:ad:e1:06:e0:01:5c:3c:48:15:7b:
c5:4f:99:b5:98:77:ee:19:5c:17:7d:ba:3e:48:ec:ca:d9:a7:
6f:83:2b:f5:35:89:a3:b0:a8:b8:bd:df:fc:c2:13:3a:d5:95:
df:89:ac:9e:93:54:42:69:da:a7:03:a8:90:5d:1f:68:bc:10:
06:15:42:72:63:f1:cb:88:5b:ff:fa:2a:95:20:99:07:a9:93:
09:d7:73:d7:d7:2b:1f:c8:55:fe:6a:00:90:8f:b7:a0:b3:d3:
a4:de:0d:24:86:74:f9:60:f9:24:a5:f5:9b:e8:f8:92:86:f0:
9e:8d:7a:40:c2:5a:59:da:17:fb:5c:46:23:f5:5e:0b:77:f0:
cf:42:e1:b4:15:47:7a:a3:95:67:2e:f7:1c:8b:ef:68:a4:1a:
6b:d2:da:1d:26:34:10:f2:cc:d1:15:b7:80:db:56:ce:79:06:
17:4d:72:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:59 2025 by rpki-client