Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
File: ciLFq32z3TlmGS-q_gfzEVsMjuU.mft (raw, json)
Hash identifier: Lr8vshLB+iyRyoudAk/FBAWfXKHMdcyWb1JJxXjnN2s=
Subject key identifier: BD:61:40:76:F3:16:98:2D:1D:1C:AA:5A:9C:8B:FB:71:AF:E1:65:CB
Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
Certificate issuer: /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Certificate serial: 0199FD342093F083363C3A0C66F9DE14F72C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
Manifest number: 13B9
Signing time: Sun 19 Oct 2025 16:01:15 +0000
Manifest this update: Sun 19 Oct 2025 16:01:15 +0000
Manifest next update: Mon 20 Oct 2025 16:01:15 +0000
Files and hashes: 1: ciLFq32z3TlmGS-q_gfzEVsMjuU.crl (hash: xiu0m2D6VTjulRzg5/lSabuh0ALV2Xz8SdID5i1aYgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:20:93:f0:83:36:3c:3a:0c:66:f9:de:14:f7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Validity
Not Before: Oct 19 16:01:15 2025 GMT
Not After : Oct 20 16:01:15 2025 GMT
Subject: CN=bd614076f316982d1d1caa5a9c8bfb71afe165cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2a:ba:53:25:e9:71:93:10:44:2a:32:0e:e7:
3f:be:73:d9:56:ab:9a:f9:05:db:30:f3:ae:2d:c1:
89:af:91:c3:79:a7:d6:9c:5f:37:05:70:72:05:c2:
52:d4:58:31:e7:da:d5:47:20:fe:98:cb:07:a6:dc:
e1:f4:49:7d:7c:76:a2:b4:65:85:9d:9e:e3:00:54:
40:0d:88:1d:a1:02:b0:c8:cd:d0:d3:9f:74:e6:54:
c0:85:5b:c8:1a:ee:9a:ce:ab:3f:d3:e4:5c:6d:0c:
59:8c:45:b1:32:0f:5c:c5:b2:b4:52:c7:79:2b:21:
fb:01:7d:11:b3:5e:ca:21:5a:66:91:6c:ec:d9:5f:
f6:d5:f4:1f:97:a5:dd:c8:15:ba:88:56:35:ce:34:
e3:f1:87:c0:9d:2a:40:38:34:ac:96:97:72:52:18:
87:82:83:56:44:7d:db:ec:17:30:d3:5b:3a:9e:9e:
01:3d:d4:13:ca:bf:93:ff:ff:d5:11:8b:68:30:49:
83:42:e0:48:4f:83:8a:a2:72:ef:17:71:1f:44:3d:
14:b6:96:4d:27:32:30:be:d6:3b:d8:bb:2d:50:02:
8f:c3:9d:32:57:bf:8f:dd:ef:6e:57:83:f5:5a:ca:
08:45:3e:1b:34:91:d0:e8:65:cd:4e:81:ec:07:92:
75:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:61:40:76:F3:16:98:2D:1D:1C:AA:5A:9C:8B:FB:71:AF:E1:65:CB
X509v3 Authority Key Identifier:
keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:87:f2:9f:96:89:cd:ae:f8:bd:4e:6e:2b:f2:30:33:ab:e7:
0b:6c:7b:b2:9d:33:18:c2:2e:a9:4f:b9:37:1d:ab:6a:af:a1:
30:3a:18:71:f7:f1:70:fe:89:14:00:a7:75:97:cd:13:70:46:
49:6a:87:22:03:2e:a8:fb:8b:b4:4d:9d:0c:0d:e8:ad:09:54:
25:f1:5c:c6:ae:16:7d:24:b3:b1:12:38:45:81:d3:4f:89:06:
90:da:c2:8f:a4:ae:e6:86:9e:e5:31:e6:56:37:02:b4:93:fc:
90:a7:86:ab:87:07:c5:e2:68:6b:b7:6c:74:53:27:7b:0d:27:
a6:de:5a:cf:c0:51:d4:15:3c:e8:0f:94:e4:8f:11:08:8a:63:
17:3f:90:93:a3:97:24:10:16:a5:ba:6b:72:d2:bf:cb:10:6d:
9c:d3:5c:52:4a:a7:03:cd:7a:a5:f3:a4:b4:09:d2:55:0a:b6:
2d:32:d7:a9:df:41:34:d1:8f:28:ec:10:cf:25:f7:de:62:ff:
ee:b5:2e:78:e9:22:2b:19:ba:a3:07:a7:d3:84:23:13:1b:a1:
73:77:cf:d0:8c:a5:d7:b3:df:21:d9:c9:8c:74:8e:13:1e:6f:
20:a2:fd:13:ce:23:1c:e0:a5:19:b5:06:d6:8e:41:75:59:50:
d5:0a:34:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:40 2025 by rpki-client