Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
File: CiINqbbilYVbYn_qYQ4cthZGiUs.mft (raw, json)
Hash identifier: 0a5UruWiWplIL9GxzRSATAWi5oKd9s4b/VA7YF5D7D0=
Subject key identifier: EE:70:68:06:B8:32:FE:A7:65:4B:27:CE:BF:00:5F:4C:1A:D3:18:D2
Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
Certificate issuer: /CN=0a220da9b6e295855b627fea610e1cb61646894b
Certificate serial: 0197B7EA49D4FD1DB51331A8F35F1C052AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
Manifest number: 1135
Signing time: Sat 28 Jun 2025 19:01:14 +0000
Manifest this update: Sat 28 Jun 2025 19:01:14 +0000
Manifest next update: Sun 29 Jun 2025 19:01:14 +0000
Files and hashes: 1: CiINqbbilYVbYn_qYQ4cthZGiUs.crl (hash: DVf9ERIkch3azUovcAbNMwhrktgbZrGFKg8tAovMHXU=)
2: wkXSNgmrYa8rCdcuzp6T9kjqo9c.roa (hash: PKA5n5GL19/MWS8CZc9zMrpSRD9clDPEtJzbH91PkU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:49:d4:fd:1d:b5:13:31:a8:f3:5f:1c:05:2a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b
Validity
Not Before: Jun 28 19:01:14 2025 GMT
Not After : Jun 29 19:01:14 2025 GMT
Subject: CN=ee706806b832fea7654b27cebf005f4c1ad318d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9e:bf:42:2e:3f:33:6b:39:2b:e3:77:4d:c5:
9b:a0:7b:a4:ee:7d:18:12:53:5b:0d:2f:e6:5b:10:
95:25:ba:f9:3c:10:2a:ed:32:00:93:cb:93:5b:00:
cd:3e:e3:df:f1:5f:7c:10:96:ca:38:13:28:a1:17:
4c:c9:00:58:d6:d5:68:56:16:1d:0c:d0:a0:1a:7f:
fb:d7:87:bf:27:a8:2e:c9:da:53:4c:17:90:89:d8:
6b:fe:13:51:93:5c:41:5d:e0:af:e4:f5:44:1a:5e:
3e:bd:15:04:aa:bd:c5:4d:b3:b3:b3:28:1f:3e:a1:
08:dc:a8:04:5e:e2:0d:81:85:2c:b3:e3:fb:3e:61:
93:c3:86:f9:0d:be:bf:2b:ec:e5:99:1c:1d:84:a3:
3c:b8:5d:18:2c:b9:6d:26:ff:66:3c:80:9b:4b:76:
46:da:49:52:27:36:57:93:75:d7:bf:03:5d:6d:0f:
9a:e3:77:01:1c:01:2d:27:01:25:6b:c4:e0:3b:89:
27:d5:0f:08:db:a0:11:56:89:78:9e:55:3f:0b:46:
ba:e5:e0:64:25:52:10:23:e2:e2:53:a5:38:84:79:
d8:da:79:d2:0c:ba:28:dc:eb:63:55:22:b3:68:ba:
10:55:04:9f:a2:9d:87:78:b6:7d:d9:19:89:a9:ca:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:70:68:06:B8:32:FE:A7:65:4B:27:CE:BF:00:5F:4C:1A:D3:18:D2
X509v3 Authority Key Identifier:
keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:de:e5:bd:87:3a:33:f1:25:ad:d3:a8:77:d5:08:8e:6e:cb:
6e:31:ee:db:49:8d:61:10:e6:33:5c:65:52:c6:31:a8:3b:bf:
71:9c:56:0b:4d:58:da:db:b6:e4:98:e2:49:e9:af:85:e2:7b:
8a:9f:9e:b9:03:ed:c3:d9:37:40:16:a6:31:bc:7b:a7:ae:50:
ce:56:37:b8:7c:7c:44:4e:e2:be:81:f4:ba:0d:bc:ca:3e:89:
d4:0a:3b:0a:30:1e:f3:11:c6:3e:fb:3f:d5:fb:d1:b7:d7:74:
e2:7c:30:45:2e:9d:a5:ce:3d:d4:e3:a6:4f:9a:93:39:d1:b8:
bc:27:5a:b2:2d:68:f0:c9:75:46:ce:db:01:c5:90:62:16:28:
2a:da:47:c3:78:5b:c1:46:7b:e2:d7:c7:3d:d1:19:67:1a:f4:
29:53:04:0c:e7:1c:4b:96:43:18:f2:f1:86:98:43:d3:01:73:
53:8f:0e:6a:2e:c8:cd:d2:bf:8d:a3:f7:75:9c:5f:be:3d:e5:
4a:fe:0a:dc:e4:15:8b:5f:02:21:4f:df:8e:a7:56:e2:f9:2a:
fe:f8:d1:08:0b:67:fa:f7:23:c6:59:9f:bd:24:b9:8b:ab:33:
01:cb:f3:0b:72:64:5e:69:e9:3b:1a:2e:62:14:49:81:8d:b5:
81:b6:ff:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:18 2025 by rpki-client