Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft
File: ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft (raw, json)
Hash identifier: kW56S/fz618Cqx5HQsDeLjfJQyHuW6m0NmWK6KDoQnQ=
Subject key identifier: 19:AF:21:C3:CD:BC:28:EB:E2:0C:41:72:94:01:E9:CE:32:94:07:DD
Authority key identifier: 72:24:D6:F0:72:52:1A:D6:EB:3D:02:9B:18:9F:42:D2:40:A9:15:30
Certificate issuer: /CN=7224d6f072521ad6eb3d029b189f42d240a91530
Certificate serial: 019A006BF89AD72CEEFCA8A02FBE842AE561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft
Manifest number: 16E0
Signing time: Mon 20 Oct 2025 07:01:07 +0000
Manifest this update: Mon 20 Oct 2025 07:01:07 +0000
Manifest next update: Tue 21 Oct 2025 07:01:07 +0000
Files and hashes: 1: ciTW8HJSGtbrPQKbGJ9C0kCpFTA.crl (hash: R0ybHxLYOYs/hvQgr6i8lo8wc//uVeZWTQvphHZ6xmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:f8:9a:d7:2c:ee:fc:a8:a0:2f:be:84:2a:e5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7224d6f072521ad6eb3d029b189f42d240a91530
Validity
Not Before: Oct 20 07:01:07 2025 GMT
Not After : Oct 21 07:01:07 2025 GMT
Subject: CN=19af21c3cdbc28ebe20c41729401e9ce329407dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e9:cd:c6:b7:20:66:03:9b:73:52:e4:b8:79:
f3:bd:c6:80:af:b9:d6:74:d0:cb:11:c3:76:e9:6c:
a4:6b:6e:f7:6c:39:33:87:06:5a:e6:59:dc:41:71:
7d:c3:01:4f:68:4a:8f:5f:60:0d:14:35:33:77:e1:
cc:21:fb:e6:b3:44:4d:c6:c1:8a:58:e6:2a:de:7d:
2a:09:55:54:1f:ff:ad:2f:5a:5a:bc:6e:ab:13:c1:
e6:ed:06:06:25:8a:66:92:38:53:8d:13:ed:35:bc:
8c:ea:be:21:20:01:7c:a6:34:90:d5:6b:1d:dc:7a:
a8:45:bb:e7:3f:65:9a:86:82:5c:f4:71:cb:13:c4:
d8:0a:c5:14:be:be:c8:3b:2b:5a:d6:9f:28:97:a6:
95:28:c1:94:07:5d:5d:a0:a5:7c:8a:a0:2e:82:03:
d2:d6:d6:5f:4e:ac:03:a4:cc:18:b2:2d:65:a4:c5:
88:f6:ed:86:fb:29:15:df:4c:22:c0:c0:c9:34:2f:
4c:73:fa:0d:13:29:61:dc:f3:2d:93:2d:0a:93:2a:
28:8f:4f:8e:58:90:ae:68:0e:58:29:78:c5:b1:a7:
5d:c5:d9:ed:05:22:20:70:1b:02:aa:f7:d0:db:c5:
27:59:ff:7b:f2:32:b2:42:d6:7c:2b:94:c7:7f:12:
4e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AF:21:C3:CD:BC:28:EB:E2:0C:41:72:94:01:E9:CE:32:94:07:DD
X509v3 Authority Key Identifier:
keyid:72:24:D6:F0:72:52:1A:D6:EB:3D:02:9B:18:9F:42:D2:40:A9:15:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:01:b0:ae:4f:39:d2:d5:63:54:05:64:c0:46:05:e8:a7:b0:
05:ad:55:84:5a:82:55:dd:d1:d4:c4:f5:4c:7a:ee:73:e5:69:
6f:d3:2f:df:37:8c:49:30:b7:9b:10:30:f9:1f:3e:dc:e3:a4:
a2:49:31:03:b3:c2:4d:aa:3d:7a:a5:7e:bf:28:5d:cb:f6:c3:
77:64:86:93:90:4e:84:2f:ea:03:3e:50:35:51:37:57:e1:03:
9e:46:47:27:fe:29:92:44:1f:6c:63:19:c3:1c:ab:09:0a:f9:
ea:a0:93:b6:a8:4b:5b:89:d0:07:29:53:e2:fe:9f:4c:6c:69:
ba:ec:79:c2:a1:b0:e6:e0:fd:88:98:19:85:39:e0:da:15:9a:
4e:7a:6f:44:86:db:a9:35:d0:e6:65:70:c7:60:ac:f0:74:55:
98:3f:c0:5e:99:27:0a:c8:1d:77:46:19:70:4b:b8:79:64:4b:
e1:fa:0e:00:39:7a:87:fe:74:e0:2c:1d:f6:bd:bf:0f:79:c9:
c1:dd:4e:a4:44:ea:1e:1c:63:da:ef:8e:aa:9f:92:af:b3:74:
6e:85:06:c3:10:8c:b5:6b:15:58:b5:05:b6:0a:98:f2:0f:4f:
29:f3:36:9a:17:9c:6f:bc:33:83:97:38:cf:dc:e4:b1:26:ed:
93:1c:9b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:29:13 2025 by rpki-client