Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft
File: ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft (raw, json)
Hash identifier: 2O/rMnubjCCC+b/mxzWbHCQSny/UiWWhDcNtiuYHIPY=
Subject key identifier: A7:42:49:B1:98:B2:BE:55:3E:E4:7A:9F:90:92:81:12:67:BF:2C:9C
Authority key identifier: 72:24:D6:F0:72:52:1A:D6:EB:3D:02:9B:18:9F:42:D2:40:A9:15:30
Certificate issuer: /CN=7224d6f072521ad6eb3d029b189f42d240a91530
Certificate serial: 0198D7058DD2BF0EBA62F91AE1937C7E0AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 13:02:01 +0000
Manifest this update: Sat 23 Aug 2025 13:02:01 +0000
Manifest next update: Sun 24 Aug 2025 13:02:01 +0000
Files and hashes: 1: ciTW8HJSGtbrPQKbGJ9C0kCpFTA.crl (hash: 2AChGPXluSJjckc7TYeuML2hjJg3ZhWwKWlENLkwKgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:8d:d2:bf:0e:ba:62:f9:1a:e1:93:7c:7e:0a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7224d6f072521ad6eb3d029b189f42d240a91530
Validity
Not Before: Aug 23 13:02:01 2025 GMT
Not After : Aug 24 13:02:01 2025 GMT
Subject: CN=a74249b198b2be553ee47a9f9092811267bf2c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:a9:67:3d:02:0e:cc:96:ef:77:43:b4:ec:
da:bc:42:85:f6:92:23:90:cb:da:49:55:f5:6a:f4:
8b:ff:dc:01:81:91:a6:17:30:72:f2:12:1f:b7:d2:
1a:a3:e0:b5:94:64:98:47:85:99:e2:18:02:b7:5f:
af:7e:4e:10:82:b7:b6:62:16:39:11:41:97:6b:af:
b5:d4:76:fd:8c:0e:05:23:14:c8:8b:5a:b7:f8:30:
3b:21:66:6c:07:36:96:6b:88:f6:3d:48:c3:33:16:
4f:b2:24:c6:b2:20:2e:1a:c1:bc:58:6f:03:02:18:
42:6c:9f:b0:f2:a1:28:68:39:c8:d1:cf:dd:44:d7:
3e:8d:3b:25:15:7a:e1:6b:af:57:05:18:54:2e:0b:
d7:16:5f:7a:0e:2e:11:6d:6b:55:b9:43:93:be:e3:
71:1b:63:0e:68:87:1e:17:6b:c7:60:04:e8:14:a8:
27:25:a0:33:b1:e0:ca:c9:ca:02:19:14:c2:62:40:
e7:11:1f:62:29:57:cd:ec:02:de:fb:2d:ec:d3:ac:
df:9d:69:d8:c9:2e:c6:03:27:00:60:36:bb:57:c5:
50:01:45:5c:a6:5c:76:b2:7e:92:ce:84:a7:03:20:
5b:66:51:c8:26:78:27:8b:80:ba:20:2a:a2:40:c7:
b1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:42:49:B1:98:B2:BE:55:3E:E4:7A:9F:90:92:81:12:67:BF:2C:9C
X509v3 Authority Key Identifier:
keyid:72:24:D6:F0:72:52:1A:D6:EB:3D:02:9B:18:9F:42:D2:40:A9:15:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/43f2d0-51eb-45c5-bbbe-9c1370da939e/1/ciTW8HJSGtbrPQKbGJ9C0kCpFTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:10:72:d5:d7:67:2c:7f:e1:e1:ed:cc:4b:03:43:9b:c8:60:
83:5d:e9:d4:05:d0:69:24:9e:b7:7c:20:d5:43:74:eb:36:c2:
3e:f4:8f:0a:9a:5b:d0:53:c7:d6:79:df:ca:b4:b6:f6:cd:4b:
15:1b:75:19:7c:62:f6:2e:38:82:f8:ee:a2:d9:1c:19:e8:12:
2a:f3:60:15:7e:91:19:71:f8:dc:ec:c8:fa:72:bf:13:50:4c:
39:0b:1b:f4:25:0c:e9:bf:e0:e0:f5:d3:5e:71:e1:71:4a:84:
47:fa:3b:69:a1:4d:48:b6:fd:28:6b:bd:06:7d:b8:88:ee:1a:
90:99:dc:60:40:ee:63:c5:83:02:0f:51:0c:ad:e0:e7:ad:d8:
e1:8a:52:63:6b:bf:4d:6c:9b:71:1a:fc:61:90:0c:06:96:84:
38:8f:72:ae:95:91:76:68:55:5a:a2:7c:47:8d:72:b5:3c:61:
ea:bf:26:32:2d:c8:b8:f1:fa:eb:73:5d:ad:0b:a9:f8:88:6d:
ba:16:84:65:d5:34:44:74:4e:5c:b3:75:e5:9f:de:f5:60:7e:
33:60:f7:72:ad:94:f0:bc:ff:c5:db:f1:29:99:61:46:49:5b:
7a:ae:ee:e1:08:be:a2:06:fa:34:15:b7:4e:ea:63:20:12:bd:
9d:38:91:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:58:11 2025 by rpki-client