Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
File: ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft (raw, json)
Hash identifier: eqwcKZpINe7snezRtducxzGq3EFeKf3qDA4BZdbrC+I=
Subject key identifier: C1:EF:1A:83:E3:FE:41:50:71:8D:E7:F0:BB:50:B0:13:B9:24:0E:96
Authority key identifier: 72:20:2E:64:5F:72:CD:70:AA:81:43:B7:3B:CC:0D:DD:93:BF:E9:1A
Certificate issuer: /CN=72202e645f72cd70aa8143b73bcc0ddd93bfe91a
Certificate serial: 019896A4B400B57627AE62B69465594B62EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
Manifest number: 0378
Signing time: Mon 11 Aug 2025 01:00:32 +0000
Manifest this update: Mon 11 Aug 2025 01:00:32 +0000
Manifest next update: Tue 12 Aug 2025 01:00:32 +0000
Files and hashes: 1: ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl (hash: fLmV21XDcX83xL7T2k8SsCWe900NeZmtc/isATtqc0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:b4:00:b5:76:27:ae:62:b6:94:65:59:4b:62:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72202e645f72cd70aa8143b73bcc0ddd93bfe91a
Validity
Not Before: Aug 11 01:00:32 2025 GMT
Not After : Aug 12 01:00:32 2025 GMT
Subject: CN=c1ef1a83e3fe4150718de7f0bb50b013b9240e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:72:7e:4c:07:11:b7:f8:77:e1:ba:09:ff:31:
f2:62:1b:b3:71:56:d2:d1:1e:b4:3c:5b:1f:62:18:
d8:4a:7b:aa:e7:79:15:7b:7f:08:35:c3:8e:52:a0:
ff:46:c9:73:ad:78:b5:a1:8c:46:98:10:58:f7:bf:
92:b3:e2:e8:06:e1:ca:6c:96:28:7d:58:9f:b7:a3:
2d:96:6c:86:6a:a0:12:b5:a3:95:84:e1:ba:51:ca:
a7:c0:b5:a1:d0:e7:e3:fe:43:16:aa:6e:7c:a0:2e:
5d:de:65:c4:39:ee:6c:34:34:58:f3:ae:bf:bb:6e:
22:64:09:ac:57:f9:b6:03:68:16:3e:44:4f:7f:b8:
0e:b9:16:0c:a8:b5:3e:bb:fc:17:31:7b:78:ed:80:
2b:45:7c:5c:d5:19:ce:53:50:fe:80:10:e6:b4:8c:
ed:a5:c3:1d:06:b7:db:80:ea:c0:6c:93:87:98:20:
eb:c7:3c:ab:f9:13:cc:3c:b0:63:ce:36:40:01:67:
c4:4e:04:c2:4f:8f:3a:29:68:ca:57:5e:b8:cd:cf:
df:62:7f:62:58:9e:e5:14:88:26:e2:8e:b8:82:6d:
15:25:60:e8:79:0b:45:7c:db:58:87:0d:ab:c6:e3:
84:cb:a9:2c:5f:ad:5f:cb:d7:21:15:0a:2a:1a:08:
27:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EF:1A:83:E3:FE:41:50:71:8D:E7:F0:BB:50:B0:13:B9:24:0E:96
X509v3 Authority Key Identifier:
keyid:72:20:2E:64:5F:72:CD:70:AA:81:43:B7:3B:CC:0D:DD:93:BF:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee1127-f99c-4aea-b2fa-40cc16f2afa4/1/ciAuZF9yzXCqgUO3O8wN3ZO_6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:1a:10:2f:3f:07:01:a9:11:69:0f:ae:01:87:bb:0d:20:da:
69:98:ca:77:b4:02:ff:02:c0:7e:4e:08:e1:d5:92:18:13:7a:
e4:d4:f8:8c:95:ae:95:64:56:b4:d4:40:d9:8b:61:d7:9a:0e:
c2:f7:76:d6:41:d8:45:cc:85:7b:76:f3:df:6a:1e:18:6d:bb:
82:8e:bb:ab:48:eb:1d:f6:21:b2:f5:f8:5b:6a:9c:d4:49:a1:
41:35:82:60:65:0a:c8:b5:34:2e:92:97:43:69:95:37:20:0a:
c2:85:21:94:65:6f:0a:51:6e:0b:a5:d5:53:06:8c:ee:62:a1:
a4:49:6a:76:07:d0:54:b6:b7:e5:05:19:19:4a:c6:94:2b:7a:
34:5b:c0:51:87:19:12:29:f0:3b:de:32:b2:71:28:aa:d0:03:
43:8f:60:58:4b:e0:08:b9:d7:57:63:09:5f:aa:79:fb:61:42:
46:46:bc:c7:73:63:ec:83:26:fd:83:44:ad:51:1a:b8:05:50:
f4:97:c8:b4:ad:e4:a1:4c:55:3d:f6:71:f8:0f:a2:2f:47:f0:
70:ce:ed:e6:6a:0c:c7:95:15:21:20:9b:8d:8d:08:f0:96:25:
97:e8:6d:bf:9f:53:2b:47:cb:71:83:a2:aa:a7:a5:77:9f:e1:
30:70:50:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:51 2025 by rpki-client