Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
File: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft (raw, json)
Hash identifier: ykG4PTtOsEg05rV9FTU8Machp8ab9YJrWye5qn9n+u4=
Subject key identifier: F3:3E:B1:55:BA:D9:6E:49:BE:37:1F:C3:F7:4B:9E:DA:A4:B7:96:91
Authority key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
Certificate issuer: /CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Certificate serial: 0197B70F25817ABBF778102FF0ECC0B98013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
Manifest number: 12EE
Signing time: Sat 28 Jun 2025 15:01:52 +0000
Manifest this update: Sat 28 Jun 2025 15:01:52 +0000
Manifest next update: Sun 29 Jun 2025 15:01:52 +0000
Files and hashes: 1: 2WXmLCsyw8fMc90USjqmpJq_P0k.roa (hash: X6trTAm4sd1BCoRMyM8T/lu1+HYVfbsSp9+0QPBx8Ps=)
2: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl (hash: 8IwP57uiBZjpBCg2+3XCDy2DcfzNurCsBAuExJcn/+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:25:81:7a:bb:f7:78:10:2f:f0:ec:c0:b9:80:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Validity
Not Before: Jun 28 15:01:52 2025 GMT
Not After : Jun 29 15:01:52 2025 GMT
Subject: CN=f33eb155bad96e49be371fc3f74b9edaa4b79691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4b:4d:64:a2:38:bc:2d:e8:be:60:ac:7c:5e:
ff:27:0a:36:88:16:26:30:51:ab:ef:9c:38:cf:b2:
87:41:27:b3:06:ef:c0:48:82:65:52:01:20:dc:23:
d1:bb:89:1e:73:0b:0f:75:c8:ee:18:60:3e:8c:df:
7a:a7:ab:7a:2c:66:f2:94:08:e7:b8:f4:32:ef:4d:
b4:6f:72:06:e9:f9:c2:6a:9d:17:00:cd:dd:9e:a2:
db:99:e8:45:fc:7c:13:52:41:32:82:2d:3d:ef:9f:
fb:6e:ab:d7:1e:f6:5a:c7:3b:6e:89:61:5e:74:5b:
c7:3a:a8:93:9b:fc:a8:f4:31:e8:42:a3:3e:bd:1b:
54:44:cb:31:1a:00:e9:6f:c1:c6:1a:25:39:5e:b0:
39:37:f1:1a:3f:ca:79:d5:bb:a9:e3:92:8f:9c:98:
bb:a3:a6:d9:6e:99:16:14:3b:15:a1:bf:03:53:bb:
36:a2:ce:f6:99:18:dd:64:65:15:42:db:93:f4:e9:
4e:82:4f:04:34:a8:2b:d3:da:7d:b4:66:35:64:bf:
5f:17:db:f7:8b:ae:5a:84:ec:f9:7b:f8:4b:1b:5c:
fb:58:7d:59:c9:f0:34:b3:2d:ba:f2:eb:f7:e4:00:
66:83:1c:da:41:49:a3:d3:0e:26:59:92:9a:f5:d8:
f2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3E:B1:55:BA:D9:6E:49:BE:37:1F:C3:F7:4B:9E:DA:A4:B7:96:91
X509v3 Authority Key Identifier:
keyid:0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:02:ca:d5:07:83:32:c6:d8:1b:32:f3:6c:3c:be:44:2b:50:
17:fe:48:77:3d:15:a2:1c:8c:c4:22:03:94:27:ea:1d:a0:10:
a3:0e:14:47:91:79:84:4b:be:4b:f0:1f:47:f5:5d:3c:b5:65:
16:50:b8:7e:e7:72:4a:ce:8e:af:2a:1f:a3:e1:ec:d2:4b:93:
7e:36:bc:fd:dc:30:2e:34:9c:04:4e:22:15:70:13:b2:d6:57:
8b:ad:95:94:10:a6:35:2c:fb:0d:71:e7:3e:0f:84:2b:fe:8e:
8b:7f:0e:3a:cd:3e:c4:3e:13:fe:4a:2d:72:25:e0:af:56:66:
a8:28:5e:e0:2e:7f:18:a0:ab:d3:75:fa:d7:5f:29:88:87:2e:
19:4c:90:dc:be:27:aa:9e:dd:24:7f:6e:13:ec:9e:4a:99:30:
30:58:f7:f4:ac:3c:56:35:05:17:ca:ae:a6:4f:51:48:7a:ff:
61:83:99:d3:29:ec:1a:10:ba:67:b9:2f:89:2a:64:75:7f:d6:
f4:2b:52:cb:aa:be:4b:09:00:47:05:19:20:0d:60:b4:cd:33:
13:3b:c1:0d:be:66:59:04:ec:35:9e:af:fb:d8:b2:93:c9:44:
cb:9f:19:b7:3e:41:dc:8f:d3:23:a8:f7:06:3a:83:86:27:e4:
28:4a:10:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:29 2025 by rpki-client