Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
File: CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft (raw, json)
Hash identifier: hlY061ADpw6D+aMYDF04TFngov3WxYQUggh3dkm0DAg=
Subject key identifier: F9:85:B0:FE:6D:46:EC:2C:0D:1A:12:F6:31:7D:88:3E:02:F8:C8:35
Authority key identifier: 0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
Certificate issuer: /CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Certificate serial: 01987418C9F5568715388C95EA3B342382AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 08:00:38 +0000
Manifest this update: Mon 04 Aug 2025 08:00:38 +0000
Manifest next update: Tue 05 Aug 2025 08:00:38 +0000
Files and hashes: 1: CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl (hash: QuADTRO2k+t1zKf9BFOyyWXGBX4j9gRAava7forsESQ=)
2: w5pXk-zMDjFo7rYudSF_ATInnUI.roa (hash: 33j8kQlj8EM4Xb9f4KytIpk1E+D5CzmOoXGUrxjI1vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:c9:f5:56:87:15:38:8c:95:ea:3b:34:23:82:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Validity
Not Before: Aug 4 08:00:38 2025 GMT
Not After : Aug 5 08:00:38 2025 GMT
Subject: CN=f985b0fe6d46ec2c0d1a12f6317d883e02f8c835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f9:52:2f:7b:97:6b:1c:7c:1e:db:93:10:fd:
9f:b8:19:89:ef:2f:e9:bf:8d:42:26:0f:00:42:95:
aa:db:db:51:21:4d:58:c6:76:17:c6:f1:bf:36:31:
78:01:40:b5:00:c7:32:d3:52:a1:df:2b:a7:d2:66:
79:45:3b:b4:ac:06:57:ce:95:19:05:30:82:37:42:
ec:13:62:15:2c:da:dc:5c:46:68:9c:93:af:33:5a:
30:06:df:32:10:64:5e:b1:6b:f7:55:04:d6:4f:3e:
e4:69:79:4d:40:66:cd:fd:65:0b:88:c2:08:e0:8d:
82:ba:9a:7d:cc:0a:cd:fb:41:5f:2b:d6:01:75:eb:
11:c6:40:56:7a:62:53:00:ba:21:07:bc:00:b9:8c:
28:65:59:df:59:5b:44:21:4d:57:2d:8e:4c:7e:ab:
d9:ed:d2:5b:a2:c1:47:67:f5:db:8b:e7:df:9b:58:
03:95:e2:f3:7d:06:08:79:8b:89:9e:cf:2c:89:b7:
9f:35:da:1a:d6:d2:86:bc:1d:74:3c:5f:b4:96:07:
fc:9c:fe:e0:5f:d1:20:34:8e:c8:47:e2:a5:bc:dc:
74:80:df:56:60:f0:44:fe:79:ea:a8:87:ea:20:9a:
82:2b:3b:23:2f:44:10:c3:eb:69:2f:f2:f9:47:a1:
8b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:85:B0:FE:6D:46:EC:2C:0D:1A:12:F6:31:7D:88:3E:02:F8:C8:35
X509v3 Authority Key Identifier:
keyid:0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ee:55:15:36:ab:24:13:8e:a8:11:99:64:66:34:94:d8:95:
13:3a:0a:6e:13:ac:d3:97:c3:72:41:92:82:71:72:a7:37:a4:
94:a7:a7:70:90:c6:7b:50:15:94:85:d3:64:0c:24:3d:c3:b5:
db:01:04:62:d1:22:d3:a0:1e:2a:7b:4d:52:26:15:ab:ad:f4:
23:e9:e2:7c:86:fc:21:df:60:ea:41:61:d2:4d:a7:43:c3:e1:
e3:27:38:b5:da:4f:14:e6:03:30:50:b9:bf:cc:9d:fd:61:6f:
18:72:e3:df:e5:d2:ac:73:33:15:be:e7:7a:8b:bf:a5:e4:5b:
a7:6a:d3:5c:15:fe:3f:77:dd:c2:32:1f:64:20:d8:67:a4:a8:
34:63:c9:bb:6e:ab:9c:05:5a:db:35:d1:de:35:0f:2c:fa:00:
66:73:73:86:03:e4:d7:d3:23:f0:87:4e:5d:4b:62:06:4f:74:
16:dc:7b:e4:96:f5:08:8e:de:09:78:b9:3f:cf:28:59:57:88:
80:bd:2b:ce:d6:bf:2a:a8:1e:71:58:87:93:12:d4:96:ac:e5:
be:f5:58:18:dd:39:6e:8d:11:b3:81:8f:cf:8a:32:d9:4d:8a:
91:24:5a:09:5f:3c:94:87:7c:76:dd:11:8a:1e:14:2d:87:82:
33:52:94:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:37:42 2025 by rpki-client