Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
File: cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft (raw, json)
Hash identifier: PnnseiTQMGq7R9Xp1xF+c1MTdAo1joZWFYCeGaBIpVI=
Subject key identifier: 37:2C:9C:C0:D1:9D:7E:2A:68:00:91:E5:02:2C:FD:78:8C:FD:12:CD
Authority key identifier: 70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
Certificate issuer: /CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
Certificate serial: 0198D583B4A4991653F17256E7A86AC179AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
Manifest number: 12AD
Signing time: Sat 23 Aug 2025 06:00:35 +0000
Manifest this update: Sat 23 Aug 2025 06:00:35 +0000
Manifest next update: Sun 24 Aug 2025 06:00:35 +0000
Files and hashes: 1: UkvE8dqZrzxtAH_b1DZxgqF6vTM.roa (hash: wAlll9K9/ln6lzYhTcmMHQV62ZPi/AvIvfXVgruDZb8=)
2: cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl (hash: lTEg1PYmIv9eZSoo3msUFt9U43RvXdaOZLCwCvCiLI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b4:a4:99:16:53:f1:72:56:e7:a8:6a:c1:79:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
Validity
Not Before: Aug 23 06:00:35 2025 GMT
Not After : Aug 24 06:00:35 2025 GMT
Subject: CN=372c9cc0d19d7e2a680091e5022cfd788cfd12cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:cf:7a:ea:b2:1f:39:cf:db:35:1b:7b:4e:
a1:fa:92:c9:eb:5d:5b:66:82:c6:9b:fc:f3:f2:9d:
13:2c:e4:98:7e:41:b4:29:c6:6c:c9:ab:9d:94:e9:
7f:76:16:f4:bf:42:e6:71:09:19:00:4a:3b:40:1f:
21:86:fa:83:96:3d:c8:f4:03:6a:7e:99:bb:d2:18:
14:f7:91:7f:f6:94:ff:fc:fa:0a:5e:da:e4:a1:e2:
eb:82:16:18:e1:df:46:3b:68:be:46:11:f3:53:9d:
b1:c1:d6:0b:73:24:3d:6a:f3:fc:68:36:7c:ab:62:
c3:8c:e4:79:82:21:e6:8a:11:a9:5a:dc:b6:8a:06:
0c:e7:4e:d6:9c:89:dc:cc:1c:a5:10:2a:a6:b0:ca:
fa:ba:13:f6:5d:15:35:fa:05:92:c0:51:42:de:4b:
d3:c5:fa:1f:34:bb:32:60:a8:8b:a9:ae:a6:d8:f2:
89:5a:94:46:1c:9b:9b:c7:a2:80:a7:b7:0b:ee:35:
7c:b0:73:c5:af:bd:c5:27:0c:b9:76:56:1a:09:b7:
38:b0:19:9f:e2:6b:8c:d2:06:7d:21:9a:e7:8b:fb:
5e:ff:e0:71:97:38:b5:0b:10:50:fb:fc:a7:e3:a8:
a8:bb:38:49:c0:88:02:59:99:9d:16:87:fb:1b:ae:
c1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2C:9C:C0:D1:9D:7E:2A:68:00:91:E5:02:2C:FD:78:8C:FD:12:CD
X509v3 Authority Key Identifier:
keyid:70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:97:ff:34:be:dc:9f:77:b3:56:e6:53:07:99:59:84:24:c3:
a1:17:c7:cd:a0:28:20:34:71:1c:05:fb:39:e6:a6:55:8e:aa:
56:75:e0:29:98:e7:c1:37:9f:ae:9d:22:5b:df:cc:ed:c3:04:
3a:56:cd:7d:ee:32:43:19:7b:f0:63:eb:3e:02:7a:8a:01:f1:
9c:ed:4b:f4:db:2a:f7:a4:57:2d:68:cc:47:c0:b9:cc:d1:0f:
cf:2a:a4:e4:82:48:4b:49:42:d1:cf:ff:79:a8:9b:21:d0:11:
1e:6d:1a:a7:5a:51:1e:b0:a5:f7:11:1e:31:b2:42:15:6d:6d:
f1:3c:1d:0c:a3:d4:be:20:7b:54:58:61:a8:f8:8a:b3:b0:ed:
ce:61:55:6a:7e:80:be:76:bd:62:be:70:cb:da:fc:98:41:01:
46:1d:10:55:9f:9f:de:9d:85:95:7c:76:57:4b:6f:40:e4:b5:
f8:0e:bd:1a:9e:a1:c0:9e:d4:16:ed:00:f8:cd:46:56:0f:91:
7c:f6:2b:84:54:c4:92:be:1a:a2:7c:48:5e:f1:d1:26:55:3f:
47:9c:d5:29:90:8b:71:d8:b5:eb:19:da:87:6c:29:8c:db:37:
0a:e1:db:3a:09:56:90:1f:71:c6:53:3d:07:f7:51:df:61:43:
74:2e:8b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:45 2025 by rpki-client