Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft
File: ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft (raw, json)
Hash identifier: lBpGl/huMzedSFDqRAQMaybOcgNba5mZC41byNy01sk=
Subject key identifier: BB:0F:75:FB:F8:52:30:69:69:A7:7E:8B:83:F1:1D:CA:92:02:06:66
Authority key identifier: 72:24:D6:F0:72:52:1A:D6:EB:3D:02:9B:18:9F:42:D2:40:A9:15:30
Certificate issuer: /CN=7224d6f072521ad6eb3d029b189f42d240a91530
Certificate serial: 019872982A39D5B929C30E724BDDFB224B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft
Manifest number: 1612
Signing time: Mon 04 Aug 2025 01:00:31 +0000
Manifest this update: Mon 04 Aug 2025 01:00:31 +0000
Manifest next update: Tue 05 Aug 2025 01:00:31 +0000
Files and hashes: 1: ciTW8HJSGtbrPQKbGJ9C0kCpFTA.crl (hash: 2YR18sCzL3iamFm9HjuipKqTd8irGC122dYSPmk4e4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:2a:39:d5:b9:29:c3:0e:72:4b:dd:fb:22:4b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7224d6f072521ad6eb3d029b189f42d240a91530
Validity
Not Before: Aug 4 01:00:31 2025 GMT
Not After : Aug 5 01:00:31 2025 GMT
Subject: CN=bb0f75fbf852306969a77e8b83f11dca92020666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:50:a7:a0:d4:66:6f:ab:09:27:d5:77:c9:
83:b7:d1:de:2c:51:c5:d4:ed:ea:d4:52:47:96:81:
fb:27:db:f4:c6:1c:7f:11:f3:c3:2d:9c:37:ac:78:
31:d8:5e:f6:41:bb:67:96:42:af:96:aa:cb:41:f2:
76:39:71:93:12:bb:45:49:73:fd:63:37:a2:49:43:
66:30:9a:66:ec:ec:ae:4d:f6:a2:cc:fb:8b:2c:95:
42:8d:02:f6:d1:08:c5:59:c2:95:19:7e:4f:e8:30:
2b:9f:06:05:2a:f5:68:df:36:6e:52:45:0e:6b:36:
7e:49:6d:74:f0:be:30:f0:ae:58:69:7e:d7:d2:15:
9a:52:48:66:88:1d:96:2f:5b:0a:a1:db:af:61:da:
71:a7:4c:4a:37:1c:e4:25:82:db:95:02:f9:c1:ac:
f6:19:c2:3c:03:3c:08:a2:17:75:ea:8d:d6:2e:9f:
01:27:79:14:c7:fe:5f:6c:cc:5c:11:85:4d:08:16:
86:b3:d9:91:77:a0:4e:16:22:75:21:d3:d8:20:1e:
16:a0:fd:2b:d8:ae:b1:a3:8c:01:7c:86:f0:61:bb:
1a:2b:ca:3b:17:1a:fc:81:64:99:3d:a7:9b:09:88:
0f:0d:3f:7b:71:84:7a:ee:a5:c8:d4:5e:90:ab:07:
eb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0F:75:FB:F8:52:30:69:69:A7:7E:8B:83:F1:1D:CA:92:02:06:66
X509v3 Authority Key Identifier:
keyid:72:24:D6:F0:72:52:1A:D6:EB:3D:02:9B:18:9F:42:D2:40:A9:15:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:0a:43:6e:79:cd:a0:38:57:be:c5:42:22:e7:14:2d:9f:3e:
f7:e2:c8:df:c1:70:94:62:18:0c:01:5c:b4:ab:10:bc:4b:9f:
07:0b:ae:5e:a5:22:8f:4a:7f:35:34:99:c6:44:d3:4a:d5:b4:
9e:03:9e:a9:74:e5:2a:d2:81:c2:b7:60:f5:62:10:0e:db:ca:
22:32:4e:57:7b:63:cf:03:73:bc:9d:7e:4e:92:00:35:58:10:
f3:2a:94:2e:5c:ab:57:11:0c:b4:62:6f:60:ff:95:fc:72:fa:
5f:8a:bf:91:52:de:4e:b8:31:23:d1:96:4c:9a:92:9a:67:40:
1c:aa:3f:7b:c3:75:46:ce:c4:78:33:76:68:85:89:4c:00:c5:
36:7e:32:f6:2d:3d:17:b1:c6:34:92:13:e4:23:54:5c:a2:dd:
5c:e0:55:36:3e:dd:bd:43:50:b9:7c:3d:dc:34:8e:e4:dd:c3:
e2:f1:05:c4:10:13:76:a7:d6:be:74:ca:88:b2:4d:7c:8c:50:
73:a8:c1:6c:b4:de:fb:dc:a5:c6:bf:bc:11:df:48:b1:38:6c:
21:dc:60:8d:0b:a7:6f:9b:02:e4:3f:aa:e7:17:c8:31:67:11:
e5:5d:b9:96:ed:4a:65:20:9a:99:f7:91:95:f2:25:73:a9:6d:
14:c1:41:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:33 2025 by rpki-client