Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
File: CiKtYJcp-O8REq28FY9REhWw854.mft (raw, json)
Hash identifier: 0KR9itjmw/G0ZPvCMg/19gNbviHjeJZHwcuJZWF5Heg=
Subject key identifier: CD:26:CA:44:22:CD:5E:6F:E8:10:36:EA:44:F3:55:25:7D:3B:CD:09
Authority key identifier: 0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
Certificate issuer: /CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Certificate serial: 0198D5BBD5C6F7A1BF444D2E8660343EE34F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
Manifest number: 04C7
Signing time: Sat 23 Aug 2025 07:01:53 +0000
Manifest this update: Sat 23 Aug 2025 07:01:53 +0000
Manifest next update: Sun 24 Aug 2025 07:01:53 +0000
Files and hashes: 1: CiKtYJcp-O8REq28FY9REhWw854.crl (hash: bssag0vlOSRWKgdtdfYEfUWpV+T0ug8mNxF1Cj3817M=)
2: Xl6alk1_LCqOIwPT8NdYHl31F1Q.roa (hash: mvzboSXfNbv0bSrCewCz7JJVKGgAnpVL6t7bOyNmT+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d5:c6:f7:a1:bf:44:4d:2e:86:60:34:3e:e3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Validity
Not Before: Aug 23 07:01:53 2025 GMT
Not After : Aug 24 07:01:53 2025 GMT
Subject: CN=cd26ca4422cd5e6fe81036ea44f355257d3bcd09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:82:32:22:93:61:d9:ee:3f:b6:fb:5a:40:4f:
ce:e2:9a:6d:09:07:cd:8e:53:1a:c2:2c:c8:0e:8b:
f0:b6:63:b4:fb:42:17:6a:06:38:12:30:14:b5:58:
98:c7:c8:4a:43:0b:45:f2:34:0b:de:86:65:94:75:
f2:11:8e:92:d4:ac:0a:f7:0e:85:7a:25:27:17:1b:
4a:ef:7a:a9:6c:45:d5:ca:15:7c:e5:29:44:9e:e4:
6b:d3:f9:a5:91:62:fd:06:05:00:e7:1f:60:fd:86:
55:01:fd:02:83:19:2c:79:cf:f8:8e:18:af:19:7a:
70:34:b8:84:e4:b2:67:a8:43:a0:3b:4b:74:55:67:
56:a1:8e:aa:9f:53:c2:95:22:6d:3b:3b:36:4a:1d:
73:40:94:de:2a:e9:d8:9b:1e:fe:5c:10:65:b4:1b:
8f:ec:0c:0e:4c:1a:39:39:eb:e5:2b:84:b9:90:5a:
62:75:15:e0:7c:10:6b:2c:eb:d9:bc:12:b5:4e:39:
24:ba:eb:d7:15:bf:56:be:7b:a7:62:7e:30:3a:05:
d6:87:fd:24:61:0d:52:a5:e1:78:dc:9e:18:57:6d:
aa:1a:0c:8d:c1:9a:15:c2:7b:ab:f0:6e:20:59:32:
68:60:82:f8:36:d4:08:e8:f1:04:10:be:d9:3b:18:
2f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:26:CA:44:22:CD:5E:6F:E8:10:36:EA:44:F3:55:25:7D:3B:CD:09
X509v3 Authority Key Identifier:
keyid:0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7e:a3:bf:67:12:b5:3c:b9:e7:7f:f0:e9:c4:69:f6:07:d2:
b8:f9:34:af:68:de:10:29:98:13:d5:2d:bf:c4:7a:48:c1:f9:
ce:ce:6a:ff:76:53:b2:05:cc:8e:37:64:9e:a4:31:54:34:00:
ad:c6:28:66:d6:93:f4:4c:83:47:fc:19:dc:dc:df:dc:c1:9e:
92:94:1f:bd:7c:c3:de:38:bc:d0:37:d5:ae:f7:cb:aa:96:cb:
33:d9:0c:77:df:10:f5:38:0f:6d:1e:2b:e9:b7:47:82:a4:d8:
8b:f5:a1:bc:67:37:cb:5a:f7:60:2b:59:dd:df:25:43:cb:45:
c2:23:fb:10:b4:9b:e7:5b:96:3a:46:f9:c9:94:b8:6c:aa:42:
65:7d:aa:8b:4d:ba:a9:42:4c:c0:f4:fc:92:cc:45:36:42:10:
e5:c3:6c:2f:11:c4:b4:23:35:50:05:94:59:fd:26:12:56:89:
f6:38:1e:99:2b:4c:12:89:3d:41:59:8b:25:22:be:9b:37:0d:
0f:31:e9:b2:2a:3b:a0:1b:90:2c:77:63:c6:bb:68:30:d5:09:
79:ad:8e:32:51:b5:83:d0:ad:44:34:c2:7a:4f:85:f9:71:50:
29:a7:62:ec:e2:c4:46:1c:5d:f1:92:32:30:ec:25:71:d1:ee:
97:22:2f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:31 2025 by rpki-client