Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
File: CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft (raw, json)
Hash identifier: /opxNC6lpsQff9lUHflPovQgHoxunfOJgFBcHSCxEmA=
Subject key identifier: F4:77:F6:5D:81:29:05:A7:59:ED:FD:7B:F6:8E:6D:03:06:2F:BC:8B
Authority key identifier: 0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
Certificate issuer: /CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Certificate serial: 01976F62EEF2C940C34E4EE6652F40C1888B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 17:00:43 +0000
Manifest this update: Sat 14 Jun 2025 17:00:43 +0000
Manifest next update: Sun 15 Jun 2025 17:00:43 +0000
Files and hashes: 1: CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl (hash: S1VP5qPyLgMmUMTVwkPfWEWOq251fHZVRZOMgagJCM4=)
2: w5pXk-zMDjFo7rYudSF_ATInnUI.roa (hash: 33j8kQlj8EM4Xb9f4KytIpk1E+D5CzmOoXGUrxjI1vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:ee:f2:c9:40:c3:4e:4e:e6:65:2f:40:c1:88:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Validity
Not Before: Jun 14 17:00:43 2025 GMT
Not After : Jun 15 17:00:43 2025 GMT
Subject: CN=f477f65d812905a759edfd7bf68e6d03062fbc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:95:33:31:cd:3b:70:2b:37:3d:0f:b5:a4:
bd:23:83:fa:b2:28:e9:90:c2:f9:5c:ef:83:de:a3:
b0:62:64:6e:fb:32:d1:f5:34:59:c7:a0:53:3a:b0:
fe:f2:ca:80:a9:24:b3:d4:bd:7b:1c:e9:91:19:2e:
39:a2:ed:4e:0d:6c:af:0a:36:fd:87:83:0d:e4:56:
01:bd:63:fb:9b:66:dc:dc:3a:ee:60:a6:51:e6:2a:
42:26:9e:e0:b5:07:83:b2:2d:c7:54:3e:60:ca:e3:
cc:b5:07:74:b0:e7:37:5c:86:72:70:8e:07:4e:b1:
89:b7:b4:0c:0b:84:8e:df:8b:4c:eb:af:52:02:53:
ac:dd:3d:e6:d0:0b:88:12:0d:b5:e6:77:cb:dd:b7:
84:ac:e0:61:4c:07:8f:9a:50:65:11:cc:a0:63:e5:
da:34:0c:3f:92:8e:a0:15:52:2e:ef:b2:f1:cc:b7:
e9:b8:ed:b7:0d:6d:56:eb:0c:72:04:63:c9:7e:a3:
a5:02:70:f4:ae:4b:32:31:0d:6d:b6:b3:fe:e8:04:
07:7e:56:9a:29:7c:80:57:43:36:41:d3:c4:3a:b9:
98:59:0c:2b:e1:bf:36:3a:e3:fc:92:c1:d5:13:2c:
73:3f:83:2b:68:c1:25:94:15:23:46:fb:8b:8c:92:
b2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:77:F6:5D:81:29:05:A7:59:ED:FD:7B:F6:8E:6D:03:06:2F:BC:8B
X509v3 Authority Key Identifier:
keyid:0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:97:76:df:2d:ec:54:e9:2d:b3:87:aa:b5:bf:4b:d1:9e:2b:
13:b7:1c:92:ea:a3:fb:68:97:cd:72:48:67:60:1b:b5:ba:f9:
28:a4:9e:e4:81:78:de:ce:de:13:c9:f0:14:5f:65:65:fd:e9:
14:02:27:a1:68:6b:d5:19:44:53:9c:76:ca:79:17:50:ff:1e:
75:43:3d:98:f9:ae:8b:9d:ee:13:22:8b:24:a5:f6:1c:8e:bc:
7b:4a:b6:96:e3:23:04:1a:c9:52:ca:4c:f7:66:52:21:1f:f1:
c1:9d:5d:eb:32:ce:67:80:94:34:7a:d9:5b:54:5d:5d:13:ec:
04:83:52:f4:93:a2:89:66:cb:52:b9:32:c5:8a:68:0b:5e:12:
1d:b3:b0:11:80:ea:78:4d:91:cc:73:3f:75:04:28:d7:ab:e8:
c5:96:21:cb:62:e7:a4:01:34:23:8b:23:e2:30:e4:79:95:71:
25:ba:f6:4c:6c:64:e8:01:f9:79:11:9a:f9:82:68:90:f0:11:
75:ae:95:2b:a7:00:c0:fd:0f:a1:a9:c5:85:c9:55:29:3a:14:
8d:6a:8c:34:7a:14:a1:1c:91:8e:f1:56:6f:36:d3:bf:d2:0d:
3d:20:77:d8:90:4c:91:0f:1f:53:65:e0:51:ec:4f:82:20:ed:
4a:b0:41:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:10:32 2025 by rpki-client