Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
File: CiKtYJcp-O8REq28FY9REhWw854.mft (raw, json)
Hash identifier: CyG6AnQB/EZnCVYqGKsPXRONVugn8pLEMMb2GDnOpaE=
Subject key identifier: CC:97:D8:A7:22:F8:8D:51:34:65:29:51:81:7E:6B:26:AD:13:0F:D8
Authority key identifier: 0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
Certificate issuer: /CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Certificate serial: 0198887B4A657D19B302BF53FADEC9431C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
Manifest number: 049F
Signing time: Fri 08 Aug 2025 07:00:37 +0000
Manifest this update: Fri 08 Aug 2025 07:00:37 +0000
Manifest next update: Sat 09 Aug 2025 07:00:37 +0000
Files and hashes: 1: CiKtYJcp-O8REq28FY9REhWw854.crl (hash: KCQK4ruoXssoiVcTGyWoJOdt4XBdwQj3fey0CXRORw4=)
2: Xl6alk1_LCqOIwPT8NdYHl31F1Q.roa (hash: mvzboSXfNbv0bSrCewCz7JJVKGgAnpVL6t7bOyNmT+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:7b:4a:65:7d:19:b3:02:bf:53:fa:de:c9:43:1c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Validity
Not Before: Aug 8 07:00:37 2025 GMT
Not After : Aug 9 07:00:37 2025 GMT
Subject: CN=cc97d8a722f88d5134652951817e6b26ad130fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:a9:c8:ab:10:33:db:c0:2d:5e:ec:1f:a0:
15:c7:a9:a1:a2:e1:c4:15:65:b5:df:d4:ef:80:f9:
6e:92:6e:fe:bb:a5:49:91:cd:75:d0:24:89:a0:d3:
a5:f5:7b:45:8f:16:0f:ea:b6:2d:b0:94:74:6c:a1:
0c:b8:b6:5e:7a:93:06:ad:3e:ca:c7:b7:79:2d:d9:
39:82:f4:aa:98:3c:73:65:f7:74:c8:45:19:dd:a0:
9a:a4:2c:da:23:56:fb:25:26:23:bf:39:fd:1b:66:
92:16:6e:ad:6c:40:48:fc:26:cd:75:4d:38:c5:32:
31:9f:24:79:34:c5:08:cb:38:ed:01:6b:ad:d1:81:
d6:18:00:b1:cf:e7:78:cc:67:73:2b:8d:d6:d3:eb:
3d:cf:34:47:16:a5:79:15:51:0a:70:a1:30:5c:94:
0a:2c:f5:de:e2:cc:9d:3e:b4:e5:2d:bd:9d:28:98:
f4:eb:92:ed:e6:7a:32:4a:64:16:80:88:5f:b1:4f:
9b:8b:8e:d4:eb:b1:a6:67:38:64:78:cd:2e:0d:85:
76:2a:c6:87:18:22:e1:ac:a6:3b:31:9e:f7:f1:05:
5f:a8:c0:e3:7c:8f:3b:f8:59:15:77:3e:2d:d1:83:
ce:30:53:d8:77:e7:0a:c9:bf:26:fb:80:20:12:26:
16:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:97:D8:A7:22:F8:8D:51:34:65:29:51:81:7E:6B:26:AD:13:0F:D8
X509v3 Authority Key Identifier:
keyid:0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:89:66:2e:dc:54:ed:33:22:b8:92:0d:18:a3:82:27:f7:56:
c6:90:7e:db:04:71:bd:59:1c:71:e0:ae:b1:d3:3f:31:81:e6:
5e:4b:ef:a5:95:97:ad:db:04:02:79:db:94:a9:90:7d:45:98:
90:e0:40:61:ca:05:10:8a:0f:d3:b0:2d:65:d6:25:45:7a:e5:
64:9b:41:a6:0b:8e:0f:58:0a:3a:8f:06:7a:63:6c:76:cf:7d:
6e:a3:b4:b2:36:c1:c7:32:f1:19:be:bb:4f:82:ae:96:81:91:
32:8b:0d:70:1a:98:c7:36:71:ad:b1:56:bb:bb:7f:74:7e:dd:
33:e6:17:fb:09:b2:bf:67:1b:a0:c2:e0:bc:7d:31:06:27:30:
c2:73:3a:0f:16:30:6f:68:9e:db:58:0b:06:d1:c2:31:a0:f8:
a8:d8:dd:1f:5b:3b:ea:7e:a2:80:f5:60:57:22:10:88:47:0c:
b6:39:12:52:b2:49:af:43:81:69:13:1b:81:a4:e0:65:60:ec:
63:ab:e9:c5:bf:05:08:50:23:2f:a0:f3:fc:b3:8f:b6:51:67:
84:10:b1:df:bc:65:a2:65:30:6a:f5:88:38:5a:23:05:6a:00:
8d:26:06:49:94:67:df:a6:06:22:ac:01:7a:e1:ed:ca:82:ec:
72:c4:50:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:13:32 2025 by rpki-client