Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
File: ci8LM2ULfWSYufWKrFopfpJhSCI.mft (raw, json)
Hash identifier: a1ATQmcKYZ8vA6zN/XesoULSw/30cgWcdfH6+fxdn20=
Subject key identifier: E7:3B:EE:89:0C:55:DA:41:24:26:2F:A8:68:11:A9:B4:D2:07:F7:63
Authority key identifier: 72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
Certificate issuer: /CN=722f0b33650b7d6498b9f58aac5a297e92614822
Certificate serial: 0197B745A4355210DAF4575581D9813C0E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
Manifest number: 0948
Signing time: Sat 28 Jun 2025 16:01:23 +0000
Manifest this update: Sat 28 Jun 2025 16:01:23 +0000
Manifest next update: Sun 29 Jun 2025 16:01:23 +0000
Files and hashes: 1: 5uh-8NvfQB_oZowhRUdfu_0v2fA.roa (hash: gCC1UC6wWvqsz5JLnyhaum++DmlgyZmiMdDqSAXaOG4=)
2: ci8LM2ULfWSYufWKrFopfpJhSCI.crl (hash: LdMpQmTf1BdB0q6LB2mni3PiBTlV4m4eVdgHSoW7l7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a4:35:52:10:da:f4:57:55:81:d9:81:3c:0e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722f0b33650b7d6498b9f58aac5a297e92614822
Validity
Not Before: Jun 28 16:01:23 2025 GMT
Not After : Jun 29 16:01:23 2025 GMT
Subject: CN=e73bee890c55da4124262fa86811a9b4d207f763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:04:64:e5:82:b8:6f:af:15:f2:67:7b:36:2d:
54:03:0b:bc:1f:67:ea:1b:e8:c2:dd:31:a5:c6:b4:
bd:46:62:97:82:15:fc:ff:04:69:5b:60:bd:ad:02:
9a:f6:44:d2:91:9e:11:e3:28:b6:40:a0:44:d6:4d:
39:fd:ae:52:6c:b1:e7:2c:29:33:f5:80:2a:86:9c:
57:99:69:95:31:cc:95:2e:68:6c:d9:da:ea:20:9d:
96:14:e1:d1:4d:8e:75:e2:d8:39:a0:20:e7:57:29:
1a:ec:51:4d:40:58:96:57:51:5b:4e:d7:22:30:dc:
43:4a:fa:75:67:d7:53:78:2a:bb:b0:bd:55:44:a6:
42:cd:15:b3:9d:9f:1b:0c:61:c2:63:f5:b3:7c:50:
7e:38:51:91:35:6e:d1:2c:cf:9e:b2:92:a1:89:2e:
46:62:fb:6e:ac:ce:67:0e:02:7b:75:01:60:33:d7:
4f:85:e0:62:68:e4:f2:e6:10:a5:c2:5c:7d:4c:7d:
7f:87:fd:97:7d:b5:55:47:30:23:34:a5:00:22:92:
ee:39:9a:42:86:70:75:27:4b:a8:16:81:48:56:97:
1c:3b:3f:fa:4d:3f:96:b0:db:74:5a:54:15:32:a9:
08:61:54:a0:5e:90:5a:33:c8:81:91:a5:c7:9e:66:
f6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3B:EE:89:0C:55:DA:41:24:26:2F:A8:68:11:A9:B4:D2:07:F7:63
X509v3 Authority Key Identifier:
keyid:72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:13:29:03:d7:18:7c:f8:3f:cf:ab:d4:b2:4c:2b:0f:91:88:
c0:ae:44:01:c4:3d:6e:3c:1b:57:b7:1b:9f:18:4f:88:61:4a:
00:30:04:d8:4c:cf:d6:da:a4:06:14:f2:00:27:d4:98:5e:0b:
0a:17:d1:2f:a2:37:8a:9c:7d:ea:da:70:11:e2:d7:f0:18:0f:
83:a5:bf:a2:7b:6f:fa:46:cb:ab:5c:ed:84:52:8c:ce:d1:14:
08:df:6d:08:2f:8b:c7:28:08:72:a6:6f:62:ce:b2:ac:68:1c:
34:81:7c:9e:e7:43:cc:62:c7:5e:c6:54:36:cb:a0:5a:21:b4:
61:de:2c:8d:c2:06:a6:c9:93:84:6f:79:b5:e8:14:4f:b6:89:
54:f3:f2:2a:5b:6f:f4:27:ab:80:e0:21:d9:c5:cc:99:79:0c:
46:3d:76:9a:dc:22:39:2d:0b:13:2d:8e:6c:cf:47:fe:80:84:
c9:a1:80:f7:93:e9:fe:18:56:c9:b8:c9:36:a5:07:59:02:8e:
89:ad:cb:39:7e:3b:aa:0b:6c:df:ad:48:f8:38:37:fc:04:10:
e9:ed:78:08:eb:ca:3f:7c:41:36:c3:4a:2d:d7:3f:ff:c7:f5:
47:6a:71:74:35:9c:59:f2:2a:44:21:a4:d8:f8:1f:46:42:9e:
1d:7d:3a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:22 2025 by rpki-client