Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
File: CI4DIScTMq_HfkyFefDlVZzAnFA.mft (raw, json)
Hash identifier: 0abdaW9UwGJT2VLC1yfoZwIZ44Prf/5jIAz7f5vPpyI=
Subject key identifier: FB:B0:89:B9:C7:E6:BB:1E:00:B9:9F:93:23:F3:42:A2:09:09:90:E5
Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
Certificate issuer: /CN=088e0321271332afc77e4c8579f0e5559cc09c50
Certificate serial: 01987306FBFCD5E03D4924AD9414F66797A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
Manifest number: 12DC
Signing time: Mon 04 Aug 2025 03:01:34 +0000
Manifest this update: Mon 04 Aug 2025 03:01:34 +0000
Manifest next update: Tue 05 Aug 2025 03:01:34 +0000
Files and hashes: 1: CI4DIScTMq_HfkyFefDlVZzAnFA.crl (hash: D7bAFogSj6DpEl/dVwhVhyLG0fYiH91Z9KCs7eAPlpc=)
2: K7_rFk-ex3hFwh3MJxaQxyN-Xpk.roa (hash: +E0IiIySxfBfIZxXi+3jzbpb+rQYgtEbnhfMPIDheqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:fb:fc:d5:e0:3d:49:24:ad:94:14:f6:67:97:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50
Validity
Not Before: Aug 4 03:01:34 2025 GMT
Not After : Aug 5 03:01:34 2025 GMT
Subject: CN=fbb089b9c7e6bb1e00b99f9323f342a2090990e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:a1:3e:2e:b9:a7:10:c2:1c:9e:7d:1b:42:
9e:4d:84:26:44:79:10:78:f5:07:07:25:c1:dd:8e:
fd:76:0d:5d:41:3c:0b:fd:9a:67:fe:db:e5:bc:2d:
5d:0d:f9:be:b9:6a:43:96:bc:1c:78:3f:15:f8:34:
84:07:ea:2b:8e:5c:25:99:d6:01:41:2c:49:77:86:
ea:0a:f5:a7:1f:e2:18:d8:88:d6:0b:40:36:15:05:
17:b6:83:cf:ef:63:fb:c4:8d:0b:92:2a:bb:63:e5:
5d:a7:66:76:2c:d3:d1:6a:ea:1c:3c:54:3a:d5:b4:
fb:83:73:79:c6:03:8d:17:83:ce:9b:8a:9c:10:48:
f4:a6:11:38:aa:45:e4:f1:fa:58:94:f4:ce:bb:24:
62:f8:f8:0b:f2:4e:ec:d1:47:59:f0:41:2e:25:7a:
17:87:d1:87:b9:a1:47:52:88:e4:50:2e:dc:68:c7:
a1:95:14:e6:aa:b2:c9:80:7d:de:27:75:fb:2c:14:
00:85:62:98:d0:9b:40:b9:31:40:db:fa:56:98:5a:
4d:29:83:8a:23:15:09:f6:61:53:5a:18:de:1e:aa:
4d:73:4d:69:d1:34:bf:98:39:80:ef:df:01:7c:68:
e6:7b:a8:54:f7:22:dd:90:1c:40:65:06:08:54:e3:
75:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B0:89:B9:C7:E6:BB:1E:00:B9:9F:93:23:F3:42:A2:09:09:90:E5
X509v3 Authority Key Identifier:
keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:97:e4:ff:8f:c9:9b:07:e5:33:4e:6a:46:e4:80:68:c7:07:
f0:19:f7:3e:6e:4f:18:28:df:c3:66:26:26:d9:3b:00:99:d3:
7b:d3:2a:e3:fb:cc:0b:48:7d:e6:14:c4:4a:fb:0a:35:60:a1:
f9:ab:ac:e2:74:d4:a3:d4:c0:28:7b:1f:b4:03:5e:7a:98:2d:
40:21:24:4d:15:d0:71:bb:ea:93:20:b7:5e:74:5d:c3:ab:a6:
8f:28:e4:cc:ac:71:45:3c:be:cb:30:b6:95:bf:6d:2c:5a:e0:
36:f6:fc:71:ed:05:e4:97:08:f7:9b:a4:aa:e0:ea:95:55:6c:
0e:80:13:fb:0e:4c:e3:c4:e2:b6:03:19:91:db:03:19:33:d7:
70:d0:ea:3e:7b:92:f0:6f:9e:df:22:de:a4:1c:3f:8f:61:c0:
fd:58:00:a5:63:aa:99:79:89:a7:3c:72:8c:14:98:d7:fd:35:
72:f1:51:5a:81:6f:4d:aa:4c:62:84:71:75:29:f9:ab:5a:2e:
f1:74:ba:d0:32:f2:58:9e:24:ed:c8:e1:94:ad:62:a4:6f:aa:
50:bc:27:e0:2a:91:95:cc:1e:12:79:33:e8:d9:a5:09:c8:91:
07:40:32:3f:b1:5e:3f:bc:5e:0c:72:fc:63:c7:c2:ac:29:e5:
65:57:df:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:50 2025 by rpki-client