Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
File: ciLFq32z3TlmGS-q_gfzEVsMjuU.mft (raw, json)
Hash identifier: d905U9YH46n4vY8L+UU6xeMCnlhtUKZN0NxMuc1h48U=
Subject key identifier: 47:A5:C6:12:31:BD:8C:BA:DC:09:63:0C:BE:3E:72:80:6A:97:2E:EF
Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
Certificate issuer: /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Certificate serial: 0198D5BBD8EEAA8CD54D80A6ED20A19CB157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
Manifest number: 1320
Signing time: Sat 23 Aug 2025 07:01:54 +0000
Manifest this update: Sat 23 Aug 2025 07:01:54 +0000
Manifest next update: Sun 24 Aug 2025 07:01:54 +0000
Files and hashes: 1: ciLFq32z3TlmGS-q_gfzEVsMjuU.crl (hash: 4FsTmp58bT5ZXHa3lbl9nP7RY9n6jbXExE2hTOgCqj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d8:ee:aa:8c:d5:4d:80:a6:ed:20:a1:9c:b1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Validity
Not Before: Aug 23 07:01:54 2025 GMT
Not After : Aug 24 07:01:54 2025 GMT
Subject: CN=47a5c61231bd8cbadc09630cbe3e72806a972eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a9:7e:f8:b4:6d:4f:6e:af:83:a3:fb:de:43:
cf:11:ee:9b:9c:0c:1a:32:c0:97:7e:5f:45:f6:6e:
9a:ec:d5:45:54:7d:a6:c8:b4:e6:4f:a8:11:88:2a:
47:1b:44:2c:5a:7b:db:a2:0c:fe:b1:5f:b6:b4:71:
55:89:47:fc:6c:6a:49:36:c1:57:f6:d6:12:3e:93:
64:ec:2e:07:a3:11:ce:83:8a:62:bf:a9:e3:fc:7c:
56:ce:0a:af:31:ee:c9:74:1b:13:72:cd:ca:8f:88:
85:d0:eb:78:9e:2c:59:2e:0b:aa:69:cc:87:69:57:
ae:c8:99:2c:a6:66:28:7b:e1:e8:2b:37:a2:4b:2d:
73:be:6a:89:80:de:ff:af:c0:f7:24:3c:d0:7b:32:
6a:95:7a:28:6c:d8:c2:68:e0:d4:bc:1c:92:dd:96:
89:02:07:49:c7:88:8f:e0:8b:72:d2:88:0f:f9:ec:
a5:7d:4e:8a:53:66:d1:05:f4:d4:1e:11:0b:14:52:
c8:73:68:3a:18:9d:d1:2e:7f:fa:66:3c:6e:08:70:
9a:40:e6:0b:6f:6e:70:02:bb:34:a7:0c:3a:26:a7:
30:7d:f4:fd:8d:10:89:a2:99:65:cb:08:2a:75:06:
4e:cd:3f:33:9c:1e:08:1b:16:f7:a1:de:9d:00:42:
25:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A5:C6:12:31:BD:8C:BA:DC:09:63:0C:BE:3E:72:80:6A:97:2E:EF
X509v3 Authority Key Identifier:
keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e0:f7:5f:35:3b:29:a6:43:70:fe:21:95:36:52:08:13:17:
c9:dd:7b:a7:7e:08:51:e8:70:18:6f:4e:97:ee:8f:a6:4a:04:
e1:4c:31:b0:be:b5:9d:3c:69:50:7b:ee:65:3f:01:28:16:eb:
da:ac:78:10:ba:20:1b:b0:8f:a1:c6:a0:91:20:3a:e6:15:60:
8c:b9:1c:b0:c2:6a:3a:17:76:9f:e1:c5:a9:72:ba:1c:1a:bc:
c0:9c:12:4c:b0:47:59:54:e7:5c:9a:47:6e:e7:e2:0c:47:1c:
91:b3:ca:09:c5:bb:ac:c0:f6:47:95:f5:d5:29:41:70:85:e9:
b0:9e:1c:a3:5b:e8:5d:8b:29:b9:37:27:5f:d8:14:71:e0:50:
63:a0:cb:60:c7:e6:29:89:e8:25:e7:b1:64:e9:2c:79:f4:d6:
81:49:14:b5:2d:ab:6a:02:d6:fe:86:db:64:28:62:ba:86:b2:
77:d7:f4:8f:a2:03:57:f8:4a:9a:cb:10:55:0f:77:80:7e:a1:
87:ef:5e:df:d0:5b:6d:bf:38:44:34:ef:a4:65:f9:ba:93:e3:
0c:e6:48:31:db:60:15:f8:54:6c:13:2c:f0:10:95:f1:b2:f1:
40:f5:b4:96:79:1c:cb:94:4a:79:b6:f0:e8:65:f6:a6:10:d4:
7c:8e:49:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:48 2025 by rpki-client