Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
File: CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft (raw, json)
Hash identifier: 32YCyu9QyQWiJnnOm09TX/pP6rh6Ely+9NWzSiVSJZ8=
Subject key identifier: DE:A2:8F:0A:9C:B4:F3:F7:72:79:67:69:D6:5C:52:E6:27:7F:35:9B
Authority key identifier: 0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
Certificate issuer: /CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Certificate serial: 0197B6D7B43B685262EB9CD595DE1DABE8C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 14:01:18 +0000
Manifest this update: Sat 28 Jun 2025 14:01:18 +0000
Manifest next update: Sun 29 Jun 2025 14:01:18 +0000
Files and hashes: 1: CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl (hash: N4kNI+e2npyGajotNqCB5FWC4nmKsxOG/TULoAYZwi8=)
2: w5pXk-zMDjFo7rYudSF_ATInnUI.roa (hash: 33j8kQlj8EM4Xb9f4KytIpk1E+D5CzmOoXGUrxjI1vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b4:3b:68:52:62:eb:9c:d5:95:de:1d:ab:e8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Validity
Not Before: Jun 28 14:01:18 2025 GMT
Not After : Jun 29 14:01:18 2025 GMT
Subject: CN=dea28f0a9cb4f3f772796769d65c52e6277f359b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:43:7b:86:3d:68:a6:cb:6d:b9:76:d5:6a:
df:cc:89:83:00:86:c8:74:54:8c:56:9c:bb:53:07:
f1:1a:56:4d:f2:2b:67:de:f3:5a:83:5e:11:ee:1c:
60:20:05:fb:b7:a2:95:76:f0:0a:50:66:60:46:1e:
a8:df:b1:cf:19:32:a2:59:9a:10:c4:5f:ca:12:3a:
86:c3:09:0b:24:8d:3f:f4:18:55:b8:12:de:1a:c9:
ec:cf:25:1b:63:92:2b:27:98:1c:60:b2:0a:cf:1e:
20:f9:d8:55:78:96:0c:ca:54:33:ec:f7:0f:3e:b8:
5e:e9:3d:db:1b:94:a0:d8:01:1a:0d:34:c2:5a:73:
e0:12:46:17:19:06:69:33:c5:1f:ac:49:a3:d5:75:
b2:76:d8:54:b1:5d:4a:d1:60:52:41:ec:0d:35:ce:
5f:45:99:6f:ba:39:c2:80:28:41:5f:40:04:63:dd:
b7:8f:f1:a1:d8:af:c0:ae:12:b6:de:e9:24:4b:7b:
52:7a:8b:14:eb:10:02:b7:ad:94:34:8b:5b:c0:5b:
16:b4:53:69:7d:e0:3d:16:1b:fb:a7:e9:7d:2c:f0:
ef:de:cf:3e:3d:a5:32:3a:a6:2c:b4:22:04:66:43:
a5:a7:4d:a3:a6:15:f7:56:3c:22:5d:6b:5a:91:fe:
49:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A2:8F:0A:9C:B4:F3:F7:72:79:67:69:D6:5C:52:E6:27:7F:35:9B
X509v3 Authority Key Identifier:
keyid:0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b7:48:7a:00:24:6f:fe:6a:ca:2c:49:8b:ad:f8:fd:88:93:
fd:85:83:8b:00:30:ad:35:e7:60:65:95:e1:f2:17:c6:03:45:
ca:f4:5c:a1:be:9e:19:53:2a:65:71:a2:4c:43:59:30:1c:6c:
5e:fe:4f:ab:47:ef:49:7d:03:b1:3d:3b:cf:49:d2:70:10:01:
70:95:fe:90:75:da:31:24:1a:a4:9d:32:ce:c2:7a:4e:a4:cd:
d8:85:29:81:1a:fa:c6:af:7f:8f:1d:e1:36:21:eb:48:23:a1:
3a:d3:01:9a:cc:b7:49:22:d1:b7:9a:c0:b4:03:d8:10:6b:a0:
0f:97:c1:94:3d:01:9c:9b:5e:1b:43:42:8f:22:3a:e1:a2:8d:
96:50:08:49:be:bc:5d:cb:c1:64:69:da:1a:0d:c2:c3:99:9f:
85:c1:87:fd:66:28:4e:cf:4d:c3:d3:60:68:85:a6:39:8b:c3:
ef:f1:58:f7:22:bd:f3:eb:51:4d:ae:c0:93:64:2b:78:55:34:
53:90:c0:45:90:c4:0c:a3:a9:27:43:33:bc:5d:44:fb:bb:71:
16:1e:16:f3:a6:fd:a9:c5:62:9c:16:ea:26:21:19:60:b1:f4:
e5:58:0e:36:34:0c:17:f7:b1:88:84:d1:8f:36:21:a4:77:c2:
db:a0:df:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:09 2025 by rpki-client