Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
File: cIYS6HA6ZgiJyg9FfPG02KDVO00.mft (raw, json)
Hash identifier: uqyVOPj4apeVedDip6OZcQ1L5hnZlTPyBeSHtQCPz5A=
Subject key identifier: FC:94:AA:80:41:6C:EE:74:A2:42:EB:21:4A:51:22:EF:F2:99:4C:F3
Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Certificate serial: 0198D5BBEE94934D592E80702422295BD667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
Manifest number: 0CEE
Signing time: Sat 23 Aug 2025 07:02:00 +0000
Manifest this update: Sat 23 Aug 2025 07:02:00 +0000
Manifest next update: Sun 24 Aug 2025 07:02:00 +0000
Files and hashes: 1: DmXSHAWyzkOoxqiFMJESxxoNQRE.roa (hash: JS4gdknzcsCYuR0k7tQp82qH1Pua7AKi87dIAAaokTc=)
2: G1B5f1Zo9mXXkjO8qvbHOoggkQk.roa (hash: aEmK04Ia5XU5AnX1t6+4/7AVUK1sMbT5CaQWCjlA0q4=)
3: cIYS6HA6ZgiJyg9FfPG02KDVO00.crl (hash: /OEHgmuNoGGiW8H84vPVED4icGe0Wn3st+0Hf3D8UaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ee:94:93:4d:59:2e:80:70:24:22:29:5b:d6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Validity
Not Before: Aug 23 07:02:00 2025 GMT
Not After : Aug 24 07:02:00 2025 GMT
Subject: CN=fc94aa80416cee74a242eb214a5122eff2994cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:a8:52:13:c6:f9:7f:e1:75:fd:e0:7a:a2:
e2:07:7b:49:a9:18:13:c0:dd:a1:57:5a:e6:84:fe:
20:7f:82:d6:8c:f2:46:b6:ec:30:12:44:ff:ac:ec:
e4:df:15:37:d4:b0:78:5e:39:60:bd:e4:91:06:36:
df:d4:7a:d6:5d:a5:3d:f2:a3:20:c3:f3:bc:4d:e1:
7b:53:11:ae:44:36:25:df:c0:03:aa:f4:b9:a2:80:
0f:5c:f0:4f:05:ee:75:02:84:d7:41:02:29:aa:bd:
b9:da:b4:b5:bc:86:e3:cd:c8:52:70:aa:01:67:9a:
81:2c:5e:cf:fa:85:4a:5c:91:12:e2:ad:e8:98:47:
9b:fe:bd:02:67:4d:f4:4a:71:89:94:4f:cb:dd:4a:
bc:92:4e:b9:63:74:48:69:79:4a:9e:f7:ea:b2:58:
a8:a2:82:a5:ff:9d:35:fa:31:48:14:40:f0:94:47:
dc:62:39:da:50:e2:4a:b7:f2:df:82:48:65:1f:8d:
cc:fb:e3:2c:c4:58:38:5c:58:8c:f3:8b:2d:13:a1:
8d:3e:f9:0f:a8:91:07:db:69:b2:55:80:b9:51:18:
99:b0:14:6e:d6:3d:44:61:56:e3:47:83:4b:81:dc:
2b:aa:fe:81:04:4f:5b:97:00:fd:cc:b7:4b:ae:fe:
4f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:94:AA:80:41:6C:EE:74:A2:42:EB:21:4A:51:22:EF:F2:99:4C:F3
X509v3 Authority Key Identifier:
keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:83:84:f0:4c:1a:72:7b:06:9e:6d:ea:3a:61:0f:11:57:88:
65:e0:be:b8:af:e5:c8:d5:6c:9d:f3:10:82:cf:96:68:66:13:
dd:83:d8:fc:18:cc:24:13:8c:f8:a5:37:c5:e0:05:1c:64:5a:
0d:4a:a2:f7:56:56:5f:a0:04:ef:69:c5:c1:d8:8d:6b:21:42:
21:71:1f:6f:3c:01:9d:13:b2:5d:31:d2:55:d8:09:c7:c2:56:
11:87:7b:eb:78:9c:4d:f6:74:cd:04:df:75:47:93:5b:2b:b1:
ff:3e:97:cc:b8:72:a3:52:20:7e:9f:8f:4c:69:57:d9:6c:96:
66:60:bb:17:61:5d:72:6f:12:9e:88:20:59:e3:c0:39:86:c3:
8f:97:0c:a0:4d:ee:8f:56:ae:2e:dd:75:d1:6f:fa:b2:35:5e:
55:71:d2:93:5c:e6:82:44:3d:e1:4a:4d:7c:17:c5:4f:71:b6:
98:92:23:da:5e:ad:9c:a1:8e:bd:0d:b0:85:04:19:99:67:3a:
2b:37:ac:75:94:0f:c5:f6:9d:fc:17:40:00:de:89:1c:8b:20:
22:52:ed:ff:de:9c:eb:47:b0:62:57:4d:83:61:5e:86:dd:2a:
f1:7d:01:c0:71:30:08:fc:74:51:9c:41:46:19:d6:0f:46:cf:
3b:3c:fd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:20 2025 by rpki-client