Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
File: CI4DIScTMq_HfkyFefDlVZzAnFA.mft (raw, json)
Hash identifier: 3vByCknrYonIIQ/rhgGxMTS5Sv0SbtvfyCbKJ1Jpav4=
Subject key identifier: 6A:73:34:A5:55:30:9E:AE:15:9D:93:F3:84:8C:D7:66:68:60:96:1E
Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
Certificate issuer: /CN=088e0321271332afc77e4c8579f0e5559cc09c50
Certificate serial: 0198D773AEB8626DF4D34D50CC296D44B321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
Manifest number: 1310
Signing time: Sat 23 Aug 2025 15:02:19 +0000
Manifest this update: Sat 23 Aug 2025 15:02:19 +0000
Manifest next update: Sun 24 Aug 2025 15:02:19 +0000
Files and hashes: 1: CI4DIScTMq_HfkyFefDlVZzAnFA.crl (hash: zGCy9L0u6Vz7Qy3oUfviNRP8lp0Qh6gFTvcnep9nBg0=)
2: K7_rFk-ex3hFwh3MJxaQxyN-Xpk.roa (hash: +E0IiIySxfBfIZxXi+3jzbpb+rQYgtEbnhfMPIDheqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:ae:b8:62:6d:f4:d3:4d:50:cc:29:6d:44:b3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50
Validity
Not Before: Aug 23 15:02:19 2025 GMT
Not After : Aug 24 15:02:19 2025 GMT
Subject: CN=6a7334a555309eae159d93f3848cd7666860961e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:67:01:ff:a7:cd:39:1f:69:55:73:c6:da:
2b:fd:b5:1c:53:c0:12:46:55:80:6c:bc:d0:4b:f6:
a8:f5:a1:9e:39:e7:d0:2d:a5:5e:19:3b:4e:1b:f4:
8b:57:61:88:bf:0d:52:68:65:f5:a7:86:77:fb:50:
c9:92:ad:53:57:8f:3f:a7:1c:d9:d2:6d:67:9c:52:
c6:55:d4:24:6e:30:90:a4:ae:6d:4b:77:83:cf:1c:
99:8a:9a:73:37:be:44:c9:e2:ba:82:06:4b:64:24:
70:cd:8c:72:ab:4f:40:1c:0a:96:cc:86:41:98:b5:
1f:d4:7a:79:12:b8:71:44:20:80:0b:a2:62:9a:20:
b4:8e:1b:02:40:cf:62:8f:4b:04:80:58:21:cb:87:
4e:47:3c:8f:07:c8:26:fa:10:40:73:5a:25:3a:62:
c9:6c:dc:5c:3c:6c:80:85:39:9f:21:9a:a6:7a:22:
8e:ba:04:01:0d:fc:68:1e:2c:5f:4b:31:af:da:74:
ae:cf:d3:9a:db:8c:66:f8:a0:fe:ff:09:cd:98:93:
d6:54:f6:04:63:21:d0:c2:60:28:2b:1f:0c:24:99:
cc:f7:3e:c0:42:a4:c5:66:ca:4b:d3:c7:95:d5:6c:
6a:5e:91:ac:22:50:16:d7:d8:77:fe:7d:95:f7:c1:
1b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:73:34:A5:55:30:9E:AE:15:9D:93:F3:84:8C:D7:66:68:60:96:1E
X509v3 Authority Key Identifier:
keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:50:25:94:b3:3f:94:36:bd:35:53:97:2d:93:5f:e3:3b:d5:
42:86:d8:77:1b:be:c7:ca:93:ee:e4:6e:3e:70:27:67:59:6d:
cf:d2:f9:4a:39:bf:c7:f9:6d:16:06:25:06:b3:e9:3c:f1:7d:
3a:1d:0b:30:c5:a0:7b:17:70:a7:f1:5d:2a:8d:ec:4e:62:8f:
98:35:48:a1:83:5a:16:b6:b3:c4:72:7a:57:82:65:c4:8f:f1:
7d:bb:71:ab:16:8e:a3:fb:e9:47:a4:33:f4:b5:8c:e2:bd:fb:
e2:f8:00:db:63:c2:e0:4b:08:f2:ad:b9:93:0d:05:e9:36:51:
52:5d:9e:63:42:0b:73:d4:7c:33:dc:89:e6:c6:d2:6e:fb:00:
ed:f3:72:4b:66:56:63:37:6f:ae:c0:fd:90:91:c7:ab:54:1f:
fd:a3:6e:6d:13:fd:39:3b:93:d9:2c:2c:b1:fd:09:0e:5d:83:
a9:4f:71:6d:3f:a2:6b:3f:19:0f:01:d1:ee:03:8d:8e:cc:49:
b4:8f:05:ab:99:84:4f:9c:36:57:61:53:9b:39:58:e4:44:f6:
f9:d7:4f:9b:21:ea:6c:17:61:dd:91:fb:96:92:eb:ed:7a:b0:
d7:ca:54:ae:46:96:6e:a7:a2:5a:61:36:f6:f5:96:9d:3a:61:
2c:f8:9a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:21:09 2025 by rpki-client