Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
File: CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft (raw, json)
Hash identifier: yy+COiqRRP2BDT30RR0J2qbCLPDq6ODxQ2sMiJYrIIE=
Subject key identifier: 1E:27:EA:41:D2:37:86:BF:8B:2E:70:66:BE:D4:CD:04:D5:8D:4F:17
Authority key identifier: 0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
Certificate issuer: /CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Certificate serial: 0199FC21619C467F17D705C3A3D1659FF657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 11:01:10 +0000
Manifest this update: Sun 19 Oct 2025 11:01:10 +0000
Manifest next update: Mon 20 Oct 2025 11:01:10 +0000
Files and hashes: 1: CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl (hash: pjJtWpbDHdPX6UFpZl+dZS5O1IEhQDhzctoxCO1tj88=)
2: w5pXk-zMDjFo7rYudSF_ATInnUI.roa (hash: 33j8kQlj8EM4Xb9f4KytIpk1E+D5CzmOoXGUrxjI1vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:61:9c:46:7f:17:d7:05:c3:a3:d1:65:9f:f6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Validity
Not Before: Oct 19 11:01:10 2025 GMT
Not After : Oct 20 11:01:10 2025 GMT
Subject: CN=1e27ea41d23786bf8b2e7066bed4cd04d58d4f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d0:91:04:d6:8e:a9:de:5b:59:cd:18:16:85:
b9:03:c9:46:63:04:54:49:1f:8d:72:fd:59:1d:0d:
a2:47:c7:fe:50:97:ec:70:08:b3:61:69:d6:9a:f6:
67:3f:0e:2c:d5:1c:1b:98:f8:3b:53:4f:a3:6c:d4:
bd:44:48:03:70:81:4b:ea:95:e9:e2:c5:1d:18:56:
b3:3c:bf:d8:13:2e:ce:8b:86:31:9f:e4:f7:c8:82:
28:30:fb:4e:bd:3b:88:76:54:54:4c:43:6b:c0:1f:
c9:43:79:5c:9a:cb:52:5f:a5:b1:23:83:12:e1:d7:
21:2a:b0:56:b6:88:83:77:bf:64:e1:f7:49:89:67:
9e:b1:f0:1a:b6:98:e9:87:4b:80:0c:0d:6a:bf:3a:
01:77:52:38:99:a9:de:73:29:ed:39:69:db:e3:7b:
ee:5c:0e:ef:96:7e:90:ff:d0:89:f0:2a:e4:15:a2:
65:58:70:5c:6b:4e:8a:db:6d:49:42:39:d9:17:55:
98:e4:99:2b:0d:48:29:fb:a2:bf:5c:7c:2a:19:ab:
7a:76:2d:d2:ee:d3:50:73:94:14:0a:0b:e4:87:77:
1f:32:a5:90:23:45:9c:2f:99:2a:7b:9b:5e:6b:90:
bc:c5:14:6f:fb:9e:77:c9:d4:d7:6f:24:c7:65:b8:
73:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:27:EA:41:D2:37:86:BF:8B:2E:70:66:BE:D4:CD:04:D5:8D:4F:17
X509v3 Authority Key Identifier:
keyid:0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:74:58:72:93:bf:f7:bf:17:bd:2a:af:25:eb:fc:56:5d:3d:
b0:81:53:73:c5:4a:85:fb:57:0a:4c:ae:bf:8c:43:a0:42:46:
14:bd:23:f8:31:f9:02:e2:1a:1b:9e:04:1f:55:f2:71:1e:dc:
ad:df:58:55:73:63:e3:53:88:28:2b:96:aa:ef:4f:86:fc:40:
75:10:e7:a1:e1:7d:98:ea:4d:60:78:ae:ba:26:ba:e4:d9:a5:
fd:f1:59:f1:79:0d:b8:be:2a:ad:53:0d:1b:fb:3b:b8:a5:b2:
54:d0:bd:6c:f9:8c:3e:92:cd:b0:72:99:2c:b5:06:63:0c:1d:
10:c3:62:7a:b1:56:02:f4:2d:b5:43:b2:0c:5a:7f:ba:0a:d6:
e6:02:e5:0b:3d:09:46:b0:53:ed:a6:72:89:7e:57:e1:a3:3f:
9d:fa:39:f9:e7:69:8c:8d:e1:e6:86:d9:b0:f6:83:b7:84:b1:
19:7f:38:2b:91:51:c3:86:39:99:1d:6c:e1:01:5f:8a:21:de:
ab:af:e0:c6:eb:df:d4:3c:91:b9:69:f9:bf:42:87:ba:c3:3b:
89:97:af:e8:89:08:53:74:19:be:f7:23:fc:ff:80:71:72:2f:
6d:13:46:5f:ad:da:f0:71:26:c4:15:3b:f5:67:07:21:39:4c:
68:23:94:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:26 2025 by rpki-client