Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
File: CiebQDjgAue9ZOUHbRo56-lvI8Q.mft (raw, json)
Hash identifier: nxvwcCim0IJ5Yl5/g9CIJ7eN9dKEw5BMmta/nJyjtfU=
Subject key identifier: F0:46:94:AF:81:6A:EC:7E:BB:84:31:52:A2:26:44:08:96:14:18:DC
Authority key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
Certificate issuer: /CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Certificate serial: 01984776DFE9B0E4629B1BE33B78926126A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
Manifest number: 06AF
Signing time: Sat 26 Jul 2025 16:00:29 +0000
Manifest this update: Sat 26 Jul 2025 16:00:29 +0000
Manifest next update: Sun 27 Jul 2025 16:00:29 +0000
Files and hashes: 1: CiebQDjgAue9ZOUHbRo56-lvI8Q.crl (hash: DkkSn4k0BtnuJ4iWU733vVDZdtnexGNAnsZOTiojJhs=)
2: XgZiHyWgL10sySKObf_Bjn8Hh_Q.roa (hash: 2Dl4jp91F4zOnOBtmwjhJgpK+aRbbY/cT57xX5iOAng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:df:e9:b0:e4:62:9b:1b:e3:3b:78:92:61:26:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Validity
Not Before: Jul 26 16:00:29 2025 GMT
Not After : Jul 27 16:00:29 2025 GMT
Subject: CN=f04694af816aec7ebb843152a2264408961418dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dd:c7:58:25:f8:d5:2c:d3:4f:d6:9f:9c:5e:
8b:4a:9f:ac:e7:64:d3:b8:f2:f4:0e:7f:7d:56:b4:
f3:8b:48:d6:5f:07:97:c7:aa:d5:f7:ef:73:67:25:
3f:c0:3f:e8:10:2b:f6:7d:d9:18:98:d1:3c:ba:5a:
40:58:40:43:9b:60:70:3f:aa:79:c0:ee:f1:a4:f3:
99:00:f6:de:81:94:1b:68:8c:5e:21:40:c7:4b:25:
56:df:63:d6:33:e9:b8:60:d1:8d:62:5f:a8:66:f3:
b2:93:1d:fd:b4:8f:76:9c:c4:a4:49:fc:ba:a6:96:
bc:06:98:ab:2f:fb:32:12:31:ef:8c:d2:ad:d0:a3:
ae:5e:5c:ce:86:36:25:2b:10:26:09:8a:95:04:e8:
fe:d6:e8:6e:6e:72:15:ac:ce:a0:43:0c:3c:04:24:
5e:71:51:99:36:af:d8:65:58:3d:44:aa:00:61:42:
52:7c:36:fc:1f:e6:bd:e5:bf:cc:7e:27:3a:a4:94:
0d:7c:d2:25:e6:f2:52:43:74:ad:da:12:34:72:a8:
c2:c5:12:08:0e:ff:ff:0e:c8:3f:8d:06:7f:aa:5d:
20:b3:54:e5:89:f9:b8:14:69:46:1c:50:12:ef:14:
08:d0:50:5b:fa:f1:04:af:ee:1c:6e:5f:66:08:71:
25:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:46:94:AF:81:6A:EC:7E:BB:84:31:52:A2:26:44:08:96:14:18:DC
X509v3 Authority Key Identifier:
keyid:0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:58:64:0a:ba:f5:1f:81:6d:f3:7d:da:2b:52:d9:b3:8b:c5:
30:f5:9e:cc:86:f8:f4:49:45:ba:35:47:d9:8d:28:52:c4:f6:
ef:df:d2:10:bc:ca:88:d6:e9:7c:b2:18:37:b2:cb:9d:b7:79:
3d:f7:6a:75:fb:6e:9d:44:a1:3a:6a:54:34:2c:76:9d:1a:6c:
09:01:3e:c5:92:ec:da:0d:23:06:82:b1:20:53:b5:43:1d:38:
e4:48:e1:63:a6:ee:be:4e:09:84:51:95:d3:73:67:12:db:21:
66:ff:1a:16:82:39:29:61:d5:50:bb:fe:03:02:e2:f4:7a:37:
fd:54:4b:65:63:42:30:41:63:b3:1a:ea:fa:eb:ae:49:6d:65:
4a:91:42:63:77:98:18:fc:29:f4:d6:40:19:24:41:f9:2a:06:
03:83:df:1d:fc:06:cd:c0:27:9e:a5:0c:4b:ca:04:9c:ff:8b:
33:e9:72:9e:c2:ae:4a:d6:27:c6:87:c7:e6:4e:34:dd:47:35:
b2:1e:5f:24:20:16:b8:25:e1:8a:b0:a9:ab:df:1d:a0:08:0d:
44:66:fc:51:88:4a:f1:8d:22:ae:c3:94:68:af:e4:ea:aa:6b:
59:86:31:b9:54:1c:9b:f3:47:48:59:6e:37:e9:94:c1:d8:85:
75:d9:75:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:51:23 2025 by rpki-client