Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
File: ci8LM2ULfWSYufWKrFopfpJhSCI.mft (raw, json)
Hash identifier: RHzX1ghr4B8cL6Ep6TdAPFfxGcR9TutK/7Ps5youONc=
Subject key identifier: 79:6D:B5:E5:25:64:32:A3:51:4B:B0:22:50:0D:EB:C4:C8:36:14:46
Authority key identifier: 72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
Certificate issuer: /CN=722f0b33650b7d6498b9f58aac5a297e92614822
Certificate serial: 01977978CDA6A7185ECC30AE08C14DB4808D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
Manifest number: 0928
Signing time: Mon 16 Jun 2025 16:00:49 +0000
Manifest this update: Mon 16 Jun 2025 16:00:49 +0000
Manifest next update: Tue 17 Jun 2025 16:00:49 +0000
Files and hashes: 1: 5uh-8NvfQB_oZowhRUdfu_0v2fA.roa (hash: gCC1UC6wWvqsz5JLnyhaum++DmlgyZmiMdDqSAXaOG4=)
2: ci8LM2ULfWSYufWKrFopfpJhSCI.crl (hash: BdJIyeaH+wRwWBlPCi9ibD2iPd6Q8TJTO/00y5YVKag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:78:cd:a6:a7:18:5e:cc:30:ae:08:c1:4d:b4:80:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722f0b33650b7d6498b9f58aac5a297e92614822
Validity
Not Before: Jun 16 16:00:49 2025 GMT
Not After : Jun 17 16:00:49 2025 GMT
Subject: CN=796db5e5256432a3514bb022500debc4c8361446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:b4:97:78:2f:a4:78:ad:4c:65:5b:e6:7b:
6f:93:6a:ff:f0:27:02:0d:f0:b6:dd:69:4c:06:ea:
47:be:6d:06:63:0c:eb:e6:b9:c8:88:47:4c:2f:fa:
99:8a:79:99:d3:1a:e8:84:f9:39:e8:b1:8b:a5:a3:
f6:67:99:90:ae:ae:92:ae:35:b6:cd:0c:a4:72:08:
c5:05:13:e4:57:64:a8:77:4e:8d:78:58:80:ca:7b:
a4:32:6b:41:4a:b7:b6:7f:63:3d:39:08:20:fa:2c:
4b:49:5b:9b:4e:ab:b6:f3:d9:11:eb:c2:49:de:16:
5d:c0:46:ee:e9:2e:4e:45:20:6e:e6:09:d2:97:9d:
31:35:a4:f5:fa:e7:af:42:90:4b:09:31:16:c5:40:
16:0c:23:37:f2:86:b4:d6:32:01:38:f7:f7:7d:31:
f0:51:3e:f5:3e:49:79:21:3b:48:9e:68:98:e2:08:
2e:02:cd:e0:ad:dd:9e:4f:3f:bc:07:ec:c4:b6:a1:
4b:15:d3:c8:ae:48:d5:fe:38:b1:90:8b:bb:b2:e2:
c6:6d:43:5d:61:9b:99:4d:6a:2e:f9:0e:96:45:c8:
4e:66:74:67:df:0b:b3:09:70:67:37:77:45:4b:c1:
52:28:de:ad:34:3f:5f:3e:ea:ad:33:69:31:4a:c9:
29:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6D:B5:E5:25:64:32:A3:51:4B:B0:22:50:0D:EB:C4:C8:36:14:46
X509v3 Authority Key Identifier:
keyid:72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d4:cb:2f:08:2f:82:52:b9:b4:03:1d:33:4e:49:f1:cc:fb:
94:4c:e7:4b:3e:11:d4:bd:b3:6b:c7:65:9f:a7:06:cb:5e:9c:
aa:4d:32:8e:56:a4:ed:c2:90:ee:d1:df:de:71:a9:6b:da:61:
94:b7:3b:2c:b5:71:79:10:9e:7f:ee:9a:4b:31:78:45:eb:1e:
cf:f5:9b:67:88:9d:8f:91:62:a1:22:7a:cf:a1:54:7d:f9:cb:
10:b3:0e:ad:aa:71:71:6f:d6:41:51:45:7d:89:ec:b3:10:a5:
bf:40:d1:92:2c:10:2c:30:a0:a0:e3:39:ba:fe:17:4e:a9:9d:
a1:f7:77:82:a8:29:93:4c:47:a0:40:4a:3e:46:a9:84:36:2d:
58:04:8d:7f:62:9e:63:36:c7:75:c8:b5:80:0f:9b:5f:4f:94:
f5:19:f8:37:8b:6a:c1:d8:49:f8:d6:a8:5c:92:7d:80:a8:68:
f0:33:74:bf:8a:70:19:72:3a:b0:5b:78:36:19:66:e1:03:12:
b7:eb:bc:c0:75:02:71:65:c7:0c:b6:0f:57:db:ef:f5:f4:24:
ca:4b:5a:8a:e2:ac:41:7a:f0:0d:7d:e3:66:a0:b0:c9:ad:50:
bc:c7:5e:3d:b8:c1:98:e8:9f:09:82:6e:89:86:c7:a8:cc:a4:
28:e9:2f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:24:52 2025 by rpki-client