Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
File: CiINqbbilYVbYn_qYQ4cthZGiUs.mft (raw, json)
Hash identifier: OOTLTSrhxVQaYp6VRWJwe669sZXaIepW2emScXrU6y4=
Subject key identifier: C7:24:BE:58:25:1D:1A:A7:53:33:CD:E2:89:29:91:E1:5B:AD:88:60
Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
Certificate issuer: /CN=0a220da9b6e295855b627fea610e1cb61646894b
Certificate serial: 0199FD34442010FDCFE8E42C860B3A5E888B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
Manifest number: 1262
Signing time: Sun 19 Oct 2025 16:01:24 +0000
Manifest this update: Sun 19 Oct 2025 16:01:24 +0000
Manifest next update: Mon 20 Oct 2025 16:01:24 +0000
Files and hashes: 1: CiINqbbilYVbYn_qYQ4cthZGiUs.crl (hash: 7PRbrvqcSh+8cueeP0AQsfHPkgge3MQC4mK8RrH3S6o=)
2: wkXSNgmrYa8rCdcuzp6T9kjqo9c.roa (hash: PKA5n5GL19/MWS8CZc9zMrpSRD9clDPEtJzbH91PkU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:44:20:10:fd:cf:e8:e4:2c:86:0b:3a:5e:88:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b
Validity
Not Before: Oct 19 16:01:24 2025 GMT
Not After : Oct 20 16:01:24 2025 GMT
Subject: CN=c724be58251d1aa75333cde2892991e15bad8860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:e7:91:3c:1e:be:77:1d:03:f7:de:ef:86:
97:a2:4c:ca:09:0b:e1:8a:91:1d:10:17:ed:ce:e8:
38:79:83:52:b9:69:7f:76:87:c3:52:52:f3:c9:a9:
79:a9:1d:45:40:11:ea:c1:4a:ba:58:01:de:19:bd:
34:58:a8:e8:4c:7b:64:dd:c3:c4:82:39:40:c9:2d:
e9:a9:85:e4:e5:d2:27:3f:f1:a7:dc:50:fc:86:b0:
56:cd:45:10:8c:54:98:10:fe:3a:1e:08:bf:79:d6:
6c:69:cc:5c:44:c6:43:92:24:5c:bb:76:2a:dd:b4:
45:e1:43:8a:d6:0c:65:de:8d:88:34:9c:62:d5:15:
45:f6:ad:1a:5b:34:10:78:e7:3b:f5:cb:51:b3:48:
7d:5a:7b:cb:cd:ef:ad:db:6c:b8:83:2c:fa:ae:93:
fb:de:8a:db:c5:d2:f6:16:3c:ae:88:e3:4b:bb:3c:
cc:2f:8a:4d:a8:60:90:2f:88:db:3a:0a:03:54:aa:
02:99:4b:fe:0e:fe:f7:4e:c3:94:46:b1:f0:97:6b:
63:40:65:11:53:b3:2e:6f:8b:25:cc:19:72:dc:ee:
41:a1:bc:37:a6:fe:d1:33:93:44:a2:23:63:ee:98:
16:a2:eb:a1:7b:94:88:96:a2:14:ac:83:50:4d:5e:
33:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:24:BE:58:25:1D:1A:A7:53:33:CD:E2:89:29:91:E1:5B:AD:88:60
X509v3 Authority Key Identifier:
keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:79:6e:b7:ea:71:0c:c3:09:67:09:9c:56:00:84:f0:bf:68:
26:61:2b:52:63:1a:3e:b9:34:72:5c:17:43:31:f4:ab:b7:d3:
2c:83:9c:cd:71:23:9e:4a:2f:d1:fc:8c:ae:97:5f:d4:88:21:
74:55:39:80:94:7d:09:92:21:43:60:4a:08:9a:cc:06:fe:4d:
0e:cd:4c:e6:f3:d0:8e:8e:da:ef:68:c4:50:aa:a3:5d:93:56:
72:c2:03:8c:ec:07:b3:75:09:78:ac:c0:ce:c1:ac:c3:f9:c5:
72:cf:c9:80:8f:23:84:28:c9:43:8e:ae:06:be:71:5d:7e:c1:
c0:f6:0b:c8:33:3a:fb:1f:ac:56:b5:54:53:10:28:dc:fc:0a:
7f:f0:3f:de:3b:65:06:98:ef:69:f7:d3:d1:03:26:e4:95:55:
fd:06:6e:32:8c:f0:49:e5:4c:5a:f1:a7:20:a5:1b:76:31:d2:
9e:31:03:e6:e7:1c:52:31:da:db:24:0e:ed:6f:64:d1:6b:35:
14:34:c4:55:73:b4:ab:25:c3:2d:c4:b7:68:d8:76:9b:6b:f7:
96:45:ae:81:cc:77:ab:e2:d0:08:6d:8c:ed:31:7e:4f:4f:d4:
f7:a6:38:30:89:0a:d1:ea:d5:f4:be:a3:44:db:75:ea:d4:8f:
94:fa:26:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:37:46 2025 by rpki-client