Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
File: cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft (raw, json)
Hash identifier: //WMyuEa7iIl9PAY8LMWcJ4vq5R/i7taRcTrSm7GKCE=
Subject key identifier: B3:09:00:77:96:8D:6E:2D:83:B3:FD:72:0B:B0:A7:B6:D0:2D:E1:38
Authority key identifier: 70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
Certificate issuer: /CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
Certificate serial: 01976E5032DD5E5587D0CABB5CD7BB6085F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
Manifest number: 11F3
Signing time: Sat 14 Jun 2025 12:00:39 +0000
Manifest this update: Sat 14 Jun 2025 12:00:39 +0000
Manifest next update: Sun 15 Jun 2025 12:00:39 +0000
Files and hashes: 1: UkvE8dqZrzxtAH_b1DZxgqF6vTM.roa (hash: wAlll9K9/ln6lzYhTcmMHQV62ZPi/AvIvfXVgruDZb8=)
2: cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl (hash: SX14CON/Y9NauEolT8fxb+SDQeiJsfSbkmhgqX9oFUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:32:dd:5e:55:87:d0:ca:bb:5c:d7:bb:60:85:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
Validity
Not Before: Jun 14 12:00:39 2025 GMT
Not After : Jun 15 12:00:39 2025 GMT
Subject: CN=b3090077968d6e2d83b3fd720bb0a7b6d02de138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7f:36:30:fa:b5:7e:cd:fd:fa:05:16:ff:8d:
8d:7c:97:df:6b:13:e5:1a:af:3c:af:c8:a3:f6:7b:
6e:ea:ac:f2:98:5e:cd:7c:b1:ad:6a:43:1d:e3:5d:
b0:da:06:05:02:79:39:6b:c3:82:a4:1e:02:cb:6e:
64:96:55:dc:91:ae:57:85:92:b7:c4:9d:8b:f0:7f:
da:fa:0c:3e:59:60:ce:c7:d5:d2:78:da:d5:7a:96:
ce:aa:d2:b7:bf:ac:5c:83:1a:dd:c2:d4:77:16:13:
e3:a3:df:06:49:b7:db:10:13:d6:ef:65:01:cf:d9:
64:19:25:f7:ad:c8:7a:22:fa:75:a4:be:8b:1d:05:
e7:91:80:50:e5:a9:39:35:b7:99:f8:45:3d:bd:93:
1a:26:e7:3b:e1:d2:85:ff:9e:57:f4:c5:fb:23:6b:
20:a0:cf:42:e2:d5:63:8b:38:b5:86:fb:e5:6a:0f:
58:05:d6:00:4a:59:15:43:aa:78:3d:41:3f:b7:30:
1e:c0:db:25:69:e7:65:65:60:16:15:18:cd:5d:2c:
83:e5:96:43:6c:64:c6:9a:be:b4:b7:6e:89:fd:3e:
10:29:16:fc:ec:cd:3c:ae:6c:d6:34:df:25:e7:6e:
09:ac:cf:8d:c1:e0:50:ae:4a:27:f4:de:91:55:62:
c3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:09:00:77:96:8D:6E:2D:83:B3:FD:72:0B:B0:A7:B6:D0:2D:E1:38
X509v3 Authority Key Identifier:
keyid:70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:59:b9:8f:d2:b3:6f:af:11:b8:68:2f:59:80:ac:9b:7a:73:
6c:e8:10:93:07:72:20:33:f9:50:05:04:13:84:8e:c1:e3:41:
b3:71:00:15:09:1b:13:1a:92:76:8c:1a:36:b5:cb:a1:ba:97:
9c:25:b9:da:7e:7f:a4:be:a9:9b:08:91:16:65:e8:ae:a8:5b:
95:75:43:26:04:14:16:55:1b:70:db:e9:13:32:54:d9:84:42:
9d:a2:5c:f5:bd:aa:3d:84:46:1e:49:e3:6a:f4:97:a4:ac:42:
e4:17:dc:d8:69:a6:6c:30:69:d1:61:aa:44:ac:f2:a3:5a:f5:
c9:dd:aa:cf:6e:d7:59:45:4f:7c:2b:68:29:7d:29:a2:57:76:
c5:7b:19:62:98:4e:97:8f:74:8c:65:83:96:ff:19:12:1c:7c:
54:91:6b:86:ce:e4:4b:33:88:3d:d8:b5:58:fa:25:3a:55:7e:
47:0c:78:ec:97:c7:12:ce:2d:08:65:aa:f0:63:9a:dc:7a:85:
fb:70:13:fd:ea:02:71:3a:f5:8b:df:40:a5:f3:57:40:ae:c4:
61:79:cd:78:0f:df:47:ea:25:81:0d:dd:0f:eb:22:fb:3c:c4:
c1:63:eb:2a:6d:eb:f3:cb:ae:8f:1d:06:5d:19:e6:62:97:44:
6f:c8:b9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:37:59 2025 by rpki-client