Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
File: cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft (raw, json)
Hash identifier: yTTOmvBbVJLTDJA/6ho0bG0/BUC+2TXmk7tsB31mwbQ=
Subject key identifier: 89:CE:5A:9E:10:1A:D8:01:AB:77:8B:21:4D:90:3E:40:54:82:1A:28
Authority key identifier: 71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
Certificate issuer: /CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Certificate serial: 019916F5CDE536CAFA99A74C7E74B9448D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
Manifest number: 07AF
Signing time: Thu 04 Sep 2025 23:00:31 +0000
Manifest this update: Thu 04 Sep 2025 23:00:31 +0000
Manifest next update: Fri 05 Sep 2025 23:00:31 +0000
Files and hashes: 1: cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl (hash: eiBgCN/BV5XkkVM844eyT8iSxhkGheEngXn5QyGp9yY=)
2: nA6xks4oQE9N25Xp7uQGkNyo-7Y.roa (hash: F+E2ylwyKz3DO5lKloF7/MKQO4W4GhOJOnJmcBpu/7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f5:cd:e5:36:ca:fa:99:a7:4c:7e:74:b9:44:8d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Validity
Not Before: Sep 4 23:00:31 2025 GMT
Not After : Sep 5 23:00:31 2025 GMT
Subject: CN=89ce5a9e101ad801ab778b214d903e4054821a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:4c:6e:2f:d8:9f:3c:d0:f0:4e:dd:a9:3f:
9e:4e:11:c7:96:4b:ff:62:c7:35:ad:12:e6:6d:3f:
3a:2f:d5:b5:51:28:02:9a:ed:91:a4:0f:d4:30:fc:
81:ee:1e:fc:85:e6:65:13:e2:0b:94:66:83:ab:ae:
82:3b:7f:ec:c0:3d:e4:e9:a0:14:bc:42:9e:e0:50:
10:43:f1:b2:ff:35:cf:73:22:c9:55:45:2f:67:65:
b2:51:15:e1:97:17:55:81:60:7a:76:e9:6d:a1:29:
87:d6:2e:ae:03:96:d7:a5:19:49:03:bd:52:e7:15:
a8:34:e8:82:01:4a:fb:30:b4:07:2f:af:b8:c3:70:
a5:c2:ee:aa:74:5f:7d:32:87:5d:9f:89:bb:75:fa:
cc:81:55:58:48:8f:62:32:18:3b:ad:80:02:6f:24:
51:5d:12:ee:b7:4a:49:32:b3:4f:2e:48:b3:c0:4b:
7d:b0:f4:e0:24:0e:4b:8a:fc:bf:1c:87:86:d3:6c:
1e:bf:2e:15:08:62:d9:ba:a1:7f:a5:78:de:9e:fb:
d2:cd:89:e6:51:4f:40:6a:5d:73:05:5f:b1:86:6e:
12:cd:7f:f6:4c:19:8b:f2:93:89:9a:58:9e:66:65:
59:35:f0:7c:89:24:43:9d:0b:64:e8:28:a6:ab:61:
bb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CE:5A:9E:10:1A:D8:01:AB:77:8B:21:4D:90:3E:40:54:82:1A:28
X509v3 Authority Key Identifier:
keyid:71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:57:0c:b2:ee:36:be:e1:a9:d5:58:55:62:0c:62:fa:26:4f:
38:e3:5c:ee:0a:48:8d:cc:e0:63:e7:d9:d2:c8:67:ed:98:80:
3a:de:cf:36:c3:52:b2:b1:91:e8:95:ec:76:7e:67:a9:3e:ba:
cd:e0:f4:16:7f:9b:97:9f:83:83:81:e2:e1:d8:2e:66:04:f5:
a9:c1:44:ee:e6:a7:74:e4:1d:da:2f:e5:dd:62:8e:c2:bc:3e:
22:0f:6b:6b:76:78:3f:7f:13:3c:54:f2:b0:f6:b6:c5:cc:8e:
15:81:cd:83:da:98:f1:2e:c6:2d:72:de:98:dc:c1:fa:e5:14:
0c:75:86:f7:4e:7d:6f:bf:67:8d:31:ed:38:d6:15:99:60:25:
f7:8b:8c:8c:fb:37:69:0a:f9:ad:3e:3c:a7:33:48:35:96:f6:
1e:1d:c4:5a:44:80:b3:30:9d:42:a9:c3:11:f9:36:f2:08:bc:
70:82:21:67:6d:cd:f2:ef:a1:b3:90:33:63:1f:02:38:59:3f:
0c:36:7f:a3:d4:94:d6:c0:d4:7d:f5:ae:b2:86:c5:ac:30:27:
db:88:ae:4c:e5:e6:c6:f6:cb:07:3d:95:bd:81:14:fe:16:57:
e4:8e:69:a1:7e:cd:c0:85:55:58:e8:39:bc:67:9f:40:35:e9:
72:25:e7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:22:38 2025 by rpki-client