Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
File: CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft (raw, json)
Hash identifier: YuN9+1k1ZFdDJgjlVt96cjsF6/Bk712v1Eg0jfg1nHs=
Subject key identifier: B8:D9:63:C5:B4:43:60:0E:58:B1:00:C8:5E:F8:E8:12:4B:4B:E7:B1
Authority key identifier: 0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
Certificate issuer: /CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Certificate serial: 0198D6980E7C50047D56E276F6D1F8053E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 11:02:26 +0000
Manifest this update: Sat 23 Aug 2025 11:02:26 +0000
Manifest next update: Sun 24 Aug 2025 11:02:26 +0000
Files and hashes: 1: CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl (hash: lO3LbcsxPoaubyT+7tKQhGWZqHzvGECRWSVtRub4xrY=)
2: w5pXk-zMDjFo7rYudSF_ATInnUI.roa (hash: 33j8kQlj8EM4Xb9f4KytIpk1E+D5CzmOoXGUrxjI1vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:0e:7c:50:04:7d:56:e2:76:f6:d1:f8:05:3e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Validity
Not Before: Aug 23 11:02:26 2025 GMT
Not After : Aug 24 11:02:26 2025 GMT
Subject: CN=b8d963c5b443600e58b100c85ef8e8124b4be7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bd:b2:f9:66:e3:d1:1a:8f:75:86:82:00:41:
1f:a6:96:8a:0a:8f:95:9e:05:d5:0a:0f:5a:f3:ef:
49:6c:42:ca:82:6b:ee:9d:eb:05:0b:06:20:69:96:
2d:79:70:b4:99:9c:cd:ea:0d:31:9c:6f:01:32:3c:
6a:fe:5f:6c:12:d1:d4:cb:72:68:b9:b8:37:8d:16:
b8:35:9b:d5:e7:ae:9c:c5:dc:e8:af:09:97:3a:ab:
6c:fd:ef:52:7b:14:ae:f7:8c:b1:0c:71:06:95:6b:
9a:e7:8f:43:e9:86:84:f9:30:1a:d3:82:67:41:f7:
5e:4d:0d:5c:72:c8:e2:74:84:5f:01:ff:37:87:a3:
4a:87:10:76:8b:59:8c:f5:8f:49:76:73:ef:23:e8:
61:6d:6c:18:4d:e1:7d:8c:c5:0f:22:b3:b5:a2:ee:
d5:aa:d4:a7:8b:c4:b7:d1:18:19:66:e2:c7:fb:66:
6e:e2:e6:e0:19:81:2c:82:2e:53:2a:56:1e:97:78:
6b:00:ba:fc:29:36:98:7d:fd:66:e9:8f:ed:13:b1:
8c:24:27:0b:ed:80:e9:08:fe:4f:d4:e9:b1:8e:91:
b6:a2:bd:9b:f1:ea:ac:1e:07:5e:18:fc:20:fc:9c:
df:fa:b5:d0:45:3a:c5:19:09:96:dd:34:c6:2b:52:
d0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D9:63:C5:B4:43:60:0E:58:B1:00:C8:5E:F8:E8:12:4B:4B:E7:B1
X509v3 Authority Key Identifier:
keyid:0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7e:d3:03:42:73:ea:7c:e5:08:1e:be:36:3f:ec:aa:5a:76:
86:48:b5:d3:91:53:ca:00:dd:d3:3b:d5:57:3a:4d:66:d0:e3:
21:90:ea:93:8e:fc:05:56:1f:a8:dd:3a:9d:01:66:22:71:ec:
ee:ac:05:ad:35:ee:0f:c4:5d:2a:33:b6:64:82:54:9b:47:5d:
fc:ae:55:81:fa:a0:89:ef:e4:bf:49:81:ec:a8:50:62:65:ca:
13:ea:50:84:5a:4f:51:8c:4a:fe:5b:33:0f:26:cf:8d:eb:51:
d8:13:1c:13:0a:8e:db:29:d2:18:be:1e:a1:5d:46:38:08:ff:
69:66:07:a1:c5:25:18:92:e8:39:39:a3:e8:3f:f6:01:37:b3:
91:df:12:bc:4a:c5:39:db:56:4e:2e:f7:4b:a5:71:12:76:f0:
26:e6:cf:02:3a:19:ac:56:55:49:57:77:9c:69:d9:90:37:29:
ef:29:d3:c8:0a:bd:bc:28:ca:5b:8a:85:cd:bf:d0:3d:90:3f:
74:fe:6c:b2:a0:88:a1:7c:c2:9b:35:6d:26:96:3c:b0:f6:1e:
97:b9:2b:a9:fb:59:a2:61:63:4e:4d:9e:fd:62:67:5a:e5:9a:
75:c1:f7:36:a0:b9:c8:fc:59:ba:d6:08:fc:08:42:d7:1a:54:
93:9e:bd:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmA58UAR9VuJ29tH4BT4MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMjNlMmYwYjA2NDA4N2ZkODRmMDQ4YjFmYTk5OTcwMjNk
NTk5ZTEwHhcNMjUwODIzMTEwMjI2WhcNMjUwODI0MTEwMjI2WjAzMTEwLwYDVQQD
EyhiOGQ5NjNjNWI0NDM2MDBlNThiMTAwYzg1ZWY4ZTgxMjRiNGJlN2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn72y+Wbj0RqPdYaCAEEfppaKCo+V
ngXVCg9a8+9JbELKgmvunesFCwYgaZYteXC0mZzN6g0xnG8BMjxq/l9sEtHUy3Jo
ubg3jRa4NZvV566cxdzorwmXOqts/e9SexSu94yxDHEGlWua549D6YaE+TAa04Jn
QfdeTQ1ccsjidIRfAf83h6NKhxB2i1mM9Y9JdnPvI+hhbWwYTeF9jMUPIrO1ou7V
qtSni8S30RgZZuLH+2Zu4ubgGYEsgi5TKlYel3hrALr8KTaYff1m6Y/tE7GMJCcL
7YDpCP5P1OmxjpG2or2b8eqsHgdeGPwg/Jzf+rXQRTrFGQmW3TTGK1LQBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjZY8W0Q2AOWLEAyF746BJLS+exMB8GA1UdIwQY
MBaAFAoj4vCwZAh/2E8Eix+pmXAj1ZnhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2lQaThMQmtDSF9ZVHdTTEg2bVpjQ1BWbWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jOTgzYWEtYjYxZS00ZWQ4LThlODEt
YmMxZTU1YzY5NzU1LzEvQ2lQaThMQmtDSF9ZVHdTTEg2bVpjQ1BWbWVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jOTgzYWEtYjYxZS00ZWQ4LThlODEtYmMxZTU1YzY5NzU1
LzEvQ2lQaThMQmtDSF9ZVHdTTEg2bVpjQ1BWbWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfX7TA0Jz
6nzlCB6+Nj/sqlp2hki105FTygDd0zvVVzpNZtDjIZDqk478BVYfqN06nQFmInHs
7qwFrTXuD8RdKjO2ZIJUm0dd/K5Vgfqgie/kv0mB7KhQYmXKE+pQhFpPUYxK/lsz
DybPjetR2BMcEwqO2ynSGL4eoV1GOAj/aWYHocUlGJLoOTmj6D/2ATezkd8SvErF
OdtWTi73S6VxEnbwJubPAjoZrFZVSVd3nGnZkDcp7ynTyAq9vCjKW4qFzb/QPZA/
dP5ssqCIoXzCmzVtJpY8sPYel7krqftZomFjTk2e/WJnWuWadcH3NqC5yPxZutYI
/AhC1xpUk569Yw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:49 2025 by rpki-client