Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
File: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft (raw, json)
Hash identifier: mCMST9Jkw/3iOljlG5SpOeirwjfzGCXktfg6yp8tfCY=
Subject key identifier: 50:50:D5:F3:56:86:16:7B:3F:56:6B:80:CA:CF:75:F3:94:68:15:75
Authority key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
Certificate issuer: /CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Certificate serial: 0198D6CCE0D645A3C2C19232ED249F43C942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
Manifest number: 1383
Signing time: Sat 23 Aug 2025 12:00:07 +0000
Manifest this update: Sat 23 Aug 2025 12:00:07 +0000
Manifest next update: Sun 24 Aug 2025 12:00:07 +0000
Files and hashes: 1: 2WXmLCsyw8fMc90USjqmpJq_P0k.roa (hash: X6trTAm4sd1BCoRMyM8T/lu1+HYVfbsSp9+0QPBx8Ps=)
2: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl (hash: ucpZi3cX36+007rbsWLS0F5jDsyII6Cyk8CdouRpY0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:e0:d6:45:a3:c2:c1:92:32:ed:24:9f:43:c9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Validity
Not Before: Aug 23 12:00:07 2025 GMT
Not After : Aug 24 12:00:07 2025 GMT
Subject: CN=5050d5f35686167b3f566b80cacf75f394681575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3d:cc:12:af:b3:21:3f:8c:55:b0:60:81:a2:
c6:85:f4:f7:15:87:69:fb:db:32:ef:96:28:e5:a8:
bc:b1:8d:a6:17:9f:82:64:3f:02:eb:94:6e:9d:5a:
f7:c7:54:0e:8b:fd:6f:80:10:be:6a:ab:1f:dc:80:
e2:98:ac:04:5d:b3:82:72:61:60:58:ed:1b:85:b9:
78:84:86:49:26:cb:7a:76:c5:c8:34:47:3c:57:ee:
8e:78:1a:bc:1a:68:c2:59:d4:ed:a3:bf:f6:60:94:
27:dd:d8:2f:2a:af:36:c6:d1:80:e7:f4:6b:9d:a2:
6b:40:b7:6d:cd:13:b6:9d:89:3f:bb:3a:64:f0:20:
be:aa:93:d7:47:ee:c9:82:c7:af:30:3e:0c:9b:31:
9c:5b:57:64:84:85:76:e0:a8:d7:4e:02:bd:d2:35:
ec:e3:40:a0:a4:1d:81:40:5a:e5:d9:f5:ed:39:43:
7c:d8:58:80:a2:57:28:09:99:4d:56:fe:7b:bf:09:
69:9b:cc:08:15:fa:62:b2:3e:f1:37:32:1c:dc:61:
eb:52:aa:63:d9:80:35:56:05:fc:b1:52:df:0d:e5:
7e:69:da:46:d0:ab:26:0b:35:26:8f:b9:f9:a3:f1:
04:7e:5d:15:5b:de:b7:b0:ab:45:dd:42:5c:f4:79:
94:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:50:D5:F3:56:86:16:7B:3F:56:6B:80:CA:CF:75:F3:94:68:15:75
X509v3 Authority Key Identifier:
keyid:0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:39:25:8f:58:56:7b:df:37:ee:44:11:e7:f1:1d:26:f7:88:
84:72:02:3e:07:ef:2e:ec:77:61:d5:38:f7:ce:1a:bc:23:07:
c2:2e:22:13:8f:50:4d:f5:12:ca:07:90:da:cc:48:06:fc:a4:
76:cf:93:bc:46:dc:77:2f:69:9e:50:6a:c6:99:71:8a:bf:1c:
d0:f9:16:5e:43:17:c7:38:d3:39:ca:05:fe:e2:8e:c0:83:0a:
54:b6:33:02:9b:79:e7:14:98:20:a4:6d:2f:ec:b5:ff:fd:5b:
c0:7e:0b:a6:41:c4:96:94:14:4d:da:13:a3:5f:18:d3:33:e8:
ae:68:02:bd:82:ed:01:ed:cb:cf:c5:cb:6e:ed:10:84:87:c3:
6c:bb:7e:16:a0:85:6b:f0:a5:a7:36:d4:25:a2:b4:85:a5:5f:
c2:97:67:76:32:a1:26:7a:5b:3e:b1:c5:78:2b:ba:6f:15:50:
a8:97:66:6f:07:56:b5:75:db:4f:cd:8e:6f:1f:61:aa:bd:89:
cb:36:33:86:51:96:12:c8:07:13:62:65:1a:a0:32:d3:2f:57:
2b:0c:48:31:da:1c:e1:87:f1:96:7b:0e:5a:48:6b:72:8b:45:
66:e6:2f:f9:eb:e1:60:ba:15:76:73:c1:7a:0e:6c:31:c7:bc:
bd:53:38:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:45:20 2025 by rpki-client