Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
File: ci8LM2ULfWSYufWKrFopfpJhSCI.mft (raw, json)
Hash identifier: UTJQaq6tLxCTbhFlK0rFkSLTBxm0z/cBw3ln18vT3MU=
Subject key identifier: 42:43:1B:60:F0:76:53:8C:1C:A9:37:50:2B:52:BE:F2:BE:23:94:81
Authority key identifier: 72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
Certificate issuer: /CN=722f0b33650b7d6498b9f58aac5a297e92614822
Certificate serial: 0198D51595DD0F34322EED178219EFFDE591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
Manifest number: 09DC
Signing time: Sat 23 Aug 2025 04:00:18 +0000
Manifest this update: Sat 23 Aug 2025 04:00:18 +0000
Manifest next update: Sun 24 Aug 2025 04:00:18 +0000
Files and hashes: 1: 5uh-8NvfQB_oZowhRUdfu_0v2fA.roa (hash: gCC1UC6wWvqsz5JLnyhaum++DmlgyZmiMdDqSAXaOG4=)
2: ci8LM2ULfWSYufWKrFopfpJhSCI.crl (hash: dDHJBKmvpKtWB9YAljXcd/QEdT10KzNmVNtSFEv5HiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:95:dd:0f:34:32:2e:ed:17:82:19:ef:fd:e5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722f0b33650b7d6498b9f58aac5a297e92614822
Validity
Not Before: Aug 23 04:00:18 2025 GMT
Not After : Aug 24 04:00:18 2025 GMT
Subject: CN=42431b60f076538c1ca937502b52bef2be239481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:e7:7e:de:35:32:b2:91:59:74:d5:50:ab:
0b:a2:af:23:a4:58:20:ee:36:2a:70:c0:b7:24:11:
0d:d1:20:45:82:2f:0d:4b:ec:a7:f5:c3:b9:32:91:
14:48:0b:27:ce:e8:40:3a:f4:1d:38:ca:b0:9c:83:
ea:77:60:54:49:af:7e:ce:11:dc:b8:64:04:c1:ef:
fd:76:cd:14:2a:ef:5c:f2:d5:ce:df:fe:fd:17:2a:
61:f3:09:04:6c:2e:c4:ec:60:6f:06:a7:6a:ae:74:
f6:7b:29:aa:64:f2:2b:a1:c5:d5:ec:1e:53:b9:57:
8e:c5:f5:82:11:01:1c:3f:d9:1b:ab:62:05:ed:44:
45:00:4d:6e:06:71:f9:05:d1:13:ff:47:14:4f:98:
bb:64:ab:86:63:81:b4:94:9b:d9:c0:14:5a:0c:4f:
27:1d:db:06:1d:e2:9f:56:60:38:20:fd:ad:5e:cf:
6d:e2:6e:12:04:78:b9:59:14:8b:1b:29:c4:23:d7:
2c:c2:fb:f7:aa:43:4f:de:bd:33:3e:2d:59:c1:42:
96:fe:2a:eb:7d:5a:52:a4:b7:f4:10:3c:9b:70:01:
5b:3c:e7:c6:34:4e:fb:fb:da:d3:6a:e1:55:60:27:
66:da:6b:10:2d:43:6e:d7:26:49:0b:82:86:25:b2:
01:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:43:1B:60:F0:76:53:8C:1C:A9:37:50:2B:52:BE:F2:BE:23:94:81
X509v3 Authority Key Identifier:
keyid:72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6f:72:68:4f:8a:00:12:8c:07:f9:e2:e1:b9:78:82:39:80:
f2:ef:2a:df:14:c8:e7:f5:0b:91:1d:59:a3:0a:6c:bb:42:ba:
cd:c5:a4:b1:3d:b2:af:18:61:49:a3:66:29:75:70:b5:c0:f4:
db:fe:32:00:8a:42:16:a8:47:f7:e4:09:0b:6c:f6:92:3b:fe:
95:4d:5f:c6:6a:de:c1:40:88:f7:61:dd:11:2d:1a:c3:97:66:
9e:ba:e3:d1:cd:62:7a:52:fe:fe:bf:c8:4b:be:90:29:0b:86:
7a:1f:d5:b8:e9:60:ac:2d:ac:0e:9f:66:23:e0:b4:02:12:f5:
32:36:8f:07:81:7c:cb:f4:22:3f:a2:3e:dc:97:d1:c9:3c:08:
a4:58:35:99:0a:52:37:74:cc:6f:f9:d3:3f:02:7d:84:ad:a8:
80:5e:d9:34:48:71:1d:78:b7:4d:be:e5:7b:7b:c7:69:ea:72:
dd:3c:3e:8d:dd:9c:7c:1c:66:c2:b0:f1:58:41:bf:1c:bd:6a:
46:7c:23:2a:1f:0f:39:64:d5:1c:73:fc:6f:65:cb:8c:c6:d2:
aa:e0:f2:d2:57:7d:f8:0d:4f:82:3d:96:69:07:e4:85:6e:2b:
2d:97:22:17:3e:21:c6:cd:48:42:63:c0:33:68:74:fa:56:0d:
41:94:06:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:51:44 2025 by rpki-client