Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
File: CIAqhiH4eCf9WXI85my1nDj5HyE.mft (raw, json)
Hash identifier: efxaq61LQwVVPGWVtFwvAtAuj9ex8SqjCC3N2QUyzJ4=
Subject key identifier: 24:B6:A9:D2:DA:F1:1E:81:CA:AD:75:92:92:C8:19:F8:CA:A3:90:B8
Authority key identifier: 08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
Certificate issuer: /CN=08802a8621f87827fd59723ce66cb59c38f91f21
Certificate serial: 0197B70F1DA2C027CF667CACE3E2624466F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
Manifest number: 090D
Signing time: Sat 28 Jun 2025 15:01:50 +0000
Manifest this update: Sat 28 Jun 2025 15:01:50 +0000
Manifest next update: Sun 29 Jun 2025 15:01:50 +0000
Files and hashes: 1: CIAqhiH4eCf9WXI85my1nDj5HyE.crl (hash: G703QtvuA2jsmv6SZFVmgYtOOOp5v7YVheMniiN401U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:1d:a2:c0:27:cf:66:7c:ac:e3:e2:62:44:66:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08802a8621f87827fd59723ce66cb59c38f91f21
Validity
Not Before: Jun 28 15:01:50 2025 GMT
Not After : Jun 29 15:01:50 2025 GMT
Subject: CN=24b6a9d2daf11e81caad759292c819f8caa390b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e8:58:a9:23:e3:a8:03:0d:05:2f:db:df:67:
a2:b3:43:fe:e6:a4:5c:3d:32:47:b2:37:1a:ea:0b:
32:a7:c7:1d:ab:57:a6:77:03:35:70:67:1c:63:03:
68:63:b5:59:81:c4:0e:f3:e0:a0:f8:04:35:0d:1f:
ef:e5:65:65:28:1d:df:f1:e5:ff:a8:af:fd:d7:22:
0f:cc:2c:e8:2b:15:48:b5:3f:3c:fa:85:a7:37:b8:
f8:f6:38:4b:fc:da:73:5e:f2:f9:cd:97:8b:2a:4b:
31:2b:ac:84:04:be:12:e6:05:6a:9b:bd:b9:fd:19:
05:81:4d:d4:e7:3a:0e:b9:2a:10:6d:1f:75:ff:d7:
53:c0:b9:e4:c1:96:6b:fe:44:fb:ea:10:56:18:c0:
b9:84:c6:b2:86:6d:9c:a6:bd:c1:9a:12:39:53:6d:
be:40:cd:6f:f0:ae:ee:7c:5f:ed:b4:65:8c:3b:c5:
af:30:12:66:84:f0:be:2a:92:8c:2d:45:7d:32:f2:
e2:65:75:0a:be:49:3d:dd:94:1f:93:96:ac:80:23:
08:bf:c0:23:17:1f:1b:8d:e3:c6:4e:49:e2:ba:4f:
77:8a:1d:8e:89:51:28:06:64:8d:6b:89:ee:ba:86:
34:d2:a9:47:1a:0c:e0:3b:75:2d:8b:df:50:03:db:
54:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B6:A9:D2:DA:F1:1E:81:CA:AD:75:92:92:C8:19:F8:CA:A3:90:B8
X509v3 Authority Key Identifier:
keyid:08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e8:b4:5d:a5:cd:75:ad:ef:e9:6f:9f:f1:e6:89:7b:c4:42:
71:cf:84:c0:70:5d:96:4d:c5:88:fe:30:79:a4:22:1e:e8:51:
30:1d:7b:e6:9b:4a:1e:25:0b:e6:df:08:22:13:d5:99:4a:dc:
d4:03:e4:e9:5a:2d:29:f5:7d:de:95:9b:0d:00:2b:bd:f2:3c:
51:84:95:7e:3c:e9:c6:c3:75:f0:46:b6:aa:5b:13:af:2e:59:
d4:b2:1c:58:3c:70:c7:b0:3c:93:a6:0b:b6:66:23:1a:0d:e2:
48:31:94:f5:36:9c:f2:9d:b3:07:fb:21:d5:17:a7:bf:28:5e:
02:24:33:b6:4d:ec:c6:ca:b8:08:13:bf:b7:c4:45:ba:c7:b1:
76:c0:0a:8a:14:d6:bb:18:df:f7:4a:1c:a9:f5:60:0b:6e:16:
9b:74:9c:93:db:ab:92:37:b3:66:26:b5:08:1a:d0:c8:ea:25:
1a:c5:9d:aa:56:5e:92:20:53:ce:e8:5f:5a:df:53:fb:9f:69:
f6:19:f2:83:dc:ae:a8:6e:b2:86:7e:e5:33:8d:80:b5:5e:b6:
e6:a9:1a:4c:a7:9a:3b:f8:48:ea:55:ba:b8:33:da:41:cd:ba:
1d:dc:20:38:ad:4a:2f:3f:23:e9:14:51:6f:9d:35:3c:a4:c8:
0c:02:77:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:52 2025 by rpki-client