Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
File: ciLFq32z3TlmGS-q_gfzEVsMjuU.mft (raw, json)
Hash identifier: UVtvIM8D5/+vDg3KSm4v6HqfCWyemcGbzIZdyc/83gQ=
Subject key identifier: 3A:C5:49:15:21:37:A8:D8:62:A9:09:6C:99:1F:3B:15:41:23:93:76
Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
Certificate issuer: /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Certificate serial: 01988A6A306B0480040DF696DDE4E635C07F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
Manifest number: 12F9
Signing time: Fri 08 Aug 2025 16:01:11 +0000
Manifest this update: Fri 08 Aug 2025 16:01:11 +0000
Manifest next update: Sat 09 Aug 2025 16:01:11 +0000
Files and hashes: 1: ciLFq32z3TlmGS-q_gfzEVsMjuU.crl (hash: wBTYMZy6y6i1sEylagu2vgNbru+Qg6W9IePo1CANW4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:6a:30:6b:04:80:04:0d:f6:96:dd:e4:e6:35:c0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Validity
Not Before: Aug 8 16:01:11 2025 GMT
Not After : Aug 9 16:01:11 2025 GMT
Subject: CN=3ac549152137a8d862a9096c991f3b1541239376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b3:96:60:9f:f3:cf:59:3a:89:8e:f3:9d:cb:
87:ce:8d:c6:ba:f0:71:53:75:5d:15:5f:ee:6b:1f:
c6:c7:73:f1:ba:01:0d:c0:96:c5:0f:4c:0c:61:0e:
dc:ec:33:14:70:2e:98:08:1d:5f:35:74:60:0a:49:
4d:6e:8c:dd:07:a5:82:e7:32:f7:15:d5:95:53:bf:
93:12:86:93:42:d2:31:38:1b:43:dd:20:c9:f1:07:
da:a8:23:fa:f7:d1:00:1d:1e:9d:36:e6:fc:18:a0:
da:36:91:f1:73:e3:68:f4:c9:3f:00:19:7b:2e:d6:
29:07:cb:ce:f4:c5:df:4b:bc:35:9f:4b:27:8b:8b:
cb:cf:79:52:c4:49:76:fa:ea:5e:72:87:7e:3d:1d:
1f:fa:80:36:cd:62:18:91:7e:3d:0f:a9:ef:c9:f8:
32:8f:66:32:f2:13:c0:4c:64:a9:92:9a:0a:4c:e0:
26:32:42:28:ce:60:d4:db:81:11:b2:28:16:83:31:
57:7a:d1:6a:00:a5:f7:c4:70:93:fa:99:6e:67:48:
5e:02:82:2b:8f:98:ae:1b:9a:a3:f4:3b:ee:7b:04:
80:7d:09:7f:5a:a8:87:bd:63:8e:99:c4:b4:6c:9f:
dc:b1:3d:c4:d2:a4:27:fc:60:ac:f8:04:0d:6b:37:
e7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C5:49:15:21:37:A8:D8:62:A9:09:6C:99:1F:3B:15:41:23:93:76
X509v3 Authority Key Identifier:
keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4b:b1:79:43:88:ae:fb:21:d4:7a:ff:f1:7a:48:ea:4e:33:
6f:bb:37:db:eb:7e:7e:37:ba:ca:f1:b7:68:38:34:2b:b3:3b:
6a:cd:67:e9:ce:86:b4:84:13:da:3f:99:71:d9:65:3c:5e:15:
8f:1c:46:2c:70:b9:5a:ec:ea:86:be:07:5e:ce:fa:2a:31:eb:
81:e8:cc:f1:89:37:1b:1c:a9:2d:e1:27:94:24:fd:ec:89:eb:
4c:56:d0:77:50:31:32:5c:ff:9d:ec:95:d5:9d:6f:3f:0f:b8:
69:40:16:9d:3d:1a:a4:71:cc:90:1a:ff:e8:79:a1:b0:3d:3a:
2d:0a:7e:12:2a:9e:8e:01:82:f1:b0:75:bc:b4:30:8c:1f:2f:
73:21:24:26:24:8f:00:ea:a4:21:ea:73:a5:83:c0:52:a0:53:
d0:e9:7c:30:48:35:5e:68:46:c9:92:79:de:f8:4d:0e:6a:fb:
60:38:be:80:14:3f:f2:d1:2b:64:ce:4f:82:bb:d9:99:1c:b0:
a1:6a:23:6f:be:dd:b5:57:13:78:22:d5:09:db:4a:dd:c6:44:
49:f6:a1:e2:d5:fa:30:5a:e8:50:7c:49:31:6f:b8:e1:17:2b:
61:e1:61:94:3b:7d:a2:f2:f8:d3:2a:c1:37:95:15:ce:55:d2:
d3:15:5d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:42:35 2025 by rpki-client