Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
File: cIKkpfKWFe2f7k9nURSF40z3EuA.mft (raw, json)
Hash identifier: 67Bb5VV5/DWBrbh3cErOfiZbnOUVJmVCaj49k2v2IV8=
Subject key identifier: 95:A0:3F:D2:64:0E:3B:D0:AE:91:2A:16:52:87:BC:F6:89:BC:EF:EF
Authority key identifier: 70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0
Certificate issuer: /CN=7082a4a5f29615ed9fee4f67511485e34cf712e0
Certificate serial: 0198737478D1B8074E4B451AA35566FA88B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
Manifest number: B2
Signing time: Mon 04 Aug 2025 05:01:09 +0000
Manifest this update: Mon 04 Aug 2025 05:01:09 +0000
Manifest next update: Tue 05 Aug 2025 05:01:09 +0000
Files and hashes: 1: cIKkpfKWFe2f7k9nURSF40z3EuA.crl (hash: 1EDdOu7lMaMAYD4XRuGg1LCCHvri4zciIxlkW2tpfGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:78:d1:b8:07:4e:4b:45:1a:a3:55:66:fa:88:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7082a4a5f29615ed9fee4f67511485e34cf712e0
Validity
Not Before: Aug 4 05:01:09 2025 GMT
Not After : Aug 5 05:01:09 2025 GMT
Subject: CN=95a03fd2640e3bd0ae912a165287bcf689bcefef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6c:f8:85:d3:17:00:ec:e7:8e:10:8a:d8:59:
78:a1:e3:c5:8c:34:01:d7:97:b6:aa:dd:0a:55:fd:
f2:04:a3:46:62:36:db:9c:21:ea:b0:79:10:bb:e6:
79:ad:e3:7f:02:b5:12:6b:6c:5d:a9:3b:ea:0f:35:
fd:e9:7c:bf:3a:d0:0b:6f:c6:b2:61:de:4c:de:5e:
c1:d0:dc:3a:6d:12:1f:c1:ec:46:20:7f:7c:c9:3b:
5d:62:aa:39:91:3b:05:db:7e:a0:7e:4d:6a:a8:e0:
34:fd:2c:89:28:86:83:c3:fa:83:cd:44:b9:38:80:
da:14:29:22:c2:15:a9:23:ae:e4:db:60:06:22:31:
63:0f:98:25:5f:6c:10:58:4f:ed:51:02:a0:68:c9:
c1:0d:51:07:ea:97:4d:6f:30:af:14:12:87:93:90:
2e:25:16:94:05:5d:c6:94:79:16:64:dd:70:37:69:
f3:b8:a2:0e:80:e7:99:45:6f:83:0c:25:bc:8f:30:
ce:cd:dd:7d:91:40:05:cc:02:ba:d3:ab:52:52:8c:
d1:08:f9:32:3c:39:8a:bd:4d:18:cc:2e:ba:28:12:
12:7d:90:be:c8:b8:76:6d:37:7f:b2:38:97:bc:9d:
97:bd:23:2d:5f:be:1a:e2:06:6b:bb:9e:05:f3:a0:
80:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A0:3F:D2:64:0E:3B:D0:AE:91:2A:16:52:87:BC:F6:89:BC:EF:EF
X509v3 Authority Key Identifier:
keyid:70:82:A4:A5:F2:96:15:ED:9F:EE:4F:67:51:14:85:E3:4C:F7:12:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIKkpfKWFe2f7k9nURSF40z3EuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7b2885-3cf3-4367-b64a-99e35c709486/1/cIKkpfKWFe2f7k9nURSF40z3EuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:92:08:9a:ba:3d:5f:4f:20:4f:d7:74:e8:41:e4:f5:40:c6:
2f:a2:3b:f4:a8:56:ab:11:03:a6:c5:a7:87:52:43:e5:ce:c4:
8a:5b:2b:81:7f:56:2f:99:ec:d2:d3:37:2d:bb:1b:dd:e2:f2:
50:3d:7c:9c:d1:1f:df:68:89:2b:86:1a:ec:80:b0:c5:c9:e6:
e1:a7:dd:53:e9:4b:13:9d:d7:3b:e1:0d:7c:71:b0:79:82:3a:
48:c8:42:a5:e1:87:e8:e2:52:82:f6:a4:2f:0e:23:ce:7e:ea:
b1:2d:33:90:b8:fc:4a:4b:8e:1d:94:9d:11:12:85:c6:cb:45:
09:05:2c:c2:19:9b:95:2d:ca:91:bc:3c:68:df:9a:4c:56:03:
30:2b:3e:4d:ef:56:4c:fb:65:e7:cd:10:f9:00:fa:1a:50:ca:
77:89:55:1e:3b:a0:d6:41:93:50:e2:15:62:ab:c5:5e:40:69:
7d:c6:18:42:81:17:10:40:52:ad:b7:ae:f2:9f:32:e6:1a:60:
8a:2e:20:f0:31:79:d9:b7:5f:d4:9c:20:fd:7d:a6:ec:8f:16:
15:3e:a2:f2:5e:6a:e2:61:0a:02:3c:eb:a0:53:bf:79:1b:a0:
aa:b2:ba:2d:9c:8b:29:d2:c5:32:78:34:14:ec:80:c4:6c:66:
1b:dc:92:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:37 2025 by rpki-client