Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
File: CiKtYJcp-O8REq28FY9REhWw854.mft (raw, json)
Hash identifier: VgTdlL99faalyslRSgMI7eTCm/u76zcj2/ITRqDD6Jg=
Subject key identifier: 54:F4:91:D5:74:35:AD:56:D3:FB:51:7A:62:76:C5:90:EC:1A:48:F2
Authority key identifier: 0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
Certificate issuer: /CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Certificate serial: 0197B7EA90EC2426DBC0765D1FFE4BBA548B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
Manifest number: 0433
Signing time: Sat 28 Jun 2025 19:01:32 +0000
Manifest this update: Sat 28 Jun 2025 19:01:32 +0000
Manifest next update: Sun 29 Jun 2025 19:01:32 +0000
Files and hashes: 1: CiKtYJcp-O8REq28FY9REhWw854.crl (hash: XLBzZixR+tXQoNjqRMavUKfwbYf79/Fy8CM8/fdksds=)
2: Xl6alk1_LCqOIwPT8NdYHl31F1Q.roa (hash: mvzboSXfNbv0bSrCewCz7JJVKGgAnpVL6t7bOyNmT+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:90:ec:24:26:db:c0:76:5d:1f:fe:4b:ba:54:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Validity
Not Before: Jun 28 19:01:32 2025 GMT
Not After : Jun 29 19:01:32 2025 GMT
Subject: CN=54f491d57435ad56d3fb517a6276c590ec1a48f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:08:7d:64:1d:7a:92:5b:75:9d:6a:2d:c6:06:
73:e7:02:13:e7:f2:c5:c0:7f:f2:ff:78:e1:03:a5:
91:92:a6:2b:5d:5b:b9:73:7e:44:42:e1:9e:d9:8f:
5f:bc:c7:71:d9:76:41:dd:be:eb:60:69:47:64:65:
ed:87:b0:4b:2e:9c:68:53:b6:6f:c6:ef:3c:ff:32:
ec:a2:32:c1:90:80:60:72:8f:46:e1:30:28:6c:3d:
c8:a3:82:43:55:79:fd:ac:ae:71:c1:5f:9a:e6:dd:
b8:9c:8f:37:3f:d0:9b:ab:46:b0:a0:3b:d2:05:74:
43:d0:76:4c:cf:e3:c2:fd:c0:f9:e7:6a:82:e4:e1:
92:50:48:49:d2:12:7a:0f:7e:03:7d:1f:f8:01:7d:
14:9e:72:51:bb:ca:6d:e4:36:fe:80:e8:a4:a1:a1:
2b:eb:e2:32:a4:e1:6c:45:f4:a8:92:6c:34:63:b8:
1e:ce:ac:13:0b:e0:09:6f:49:0d:39:2a:db:33:6a:
e4:c4:0c:72:6c:fd:38:b7:53:b0:43:e5:41:c0:36:
1c:10:f8:19:bb:d4:22:45:bd:6e:b6:95:36:25:6e:
21:d0:9a:a3:2e:33:30:6a:02:8b:9b:63:56:6f:31:
cd:ed:a3:32:22:74:ab:5e:cc:4d:d3:e4:c6:00:3f:
69:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F4:91:D5:74:35:AD:56:D3:FB:51:7A:62:76:C5:90:EC:1A:48:F2
X509v3 Authority Key Identifier:
keyid:0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6f:59:46:0a:52:db:7e:63:fc:8d:92:80:85:b5:df:b5:e8:
91:7b:46:ee:7b:8e:80:80:89:4f:bc:9b:aa:34:2e:2b:69:8f:
5c:14:76:2e:c2:22:63:36:f8:b3:3f:95:bf:0f:4d:76:13:37:
37:82:e1:51:42:6b:b2:3d:fc:a9:a0:cc:83:1a:2f:3e:8e:39:
78:3c:ed:4d:e2:c2:de:26:c6:c5:7d:0c:e5:63:75:a8:7d:3b:
00:45:39:27:ab:3f:d2:5d:e1:bf:ca:97:a5:c7:98:f7:17:9a:
f2:45:48:ea:4e:85:70:4f:2a:3a:3c:34:f3:a0:a2:b2:8d:b9:
68:ef:35:db:5c:9e:82:8f:43:e3:04:67:cf:6f:7a:15:9c:49:
92:38:0c:5b:07:63:49:2c:29:62:3a:54:fa:e6:4e:ca:fe:e3:
ee:3f:bd:5e:79:5d:22:95:a8:9f:28:95:6a:c1:be:1f:af:05:
ef:ac:4c:18:2b:dd:f7:78:da:e2:29:2c:9e:3d:82:a7:78:88:
82:b8:ed:12:d8:a3:c9:d8:89:50:be:9c:2d:16:ec:89:f6:33:
71:a9:99:19:26:3e:84:de:a3:4c:e6:52:b1:96:c6:22:c7:4b:
ae:24:da:ba:e4:9a:15:e7:01:01:24:34:6d:bd:04:38:78:00:
53:30:fb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:33 2025 by rpki-client