Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
File: cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft (raw, json)
Hash identifier: X4veXOgods17hreyXf3CTAD13E1PV7jT6mi8qdB+Q/4=
Subject key identifier: DC:E6:94:0C:DC:0E:A6:F2:1C:BE:CC:87:08:38:00:B2:70:F1:BE:FB
Authority key identifier: 70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
Certificate issuer: /CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
Certificate serial: 01984A781E394973CD18C6E62D564D07A19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
Manifest number: 1265
Signing time: Sun 27 Jul 2025 06:00:42 +0000
Manifest this update: Sun 27 Jul 2025 06:00:42 +0000
Manifest next update: Mon 28 Jul 2025 06:00:42 +0000
Files and hashes: 1: UkvE8dqZrzxtAH_b1DZxgqF6vTM.roa (hash: wAlll9K9/ln6lzYhTcmMHQV62ZPi/AvIvfXVgruDZb8=)
2: cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl (hash: JSstTUfHY1dngCsJFXSo11wNYvMNdVEaEcjGLjwWh+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:1e:39:49:73:cd:18:c6:e6:2d:56:4d:07:a1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
Validity
Not Before: Jul 27 06:00:42 2025 GMT
Not After : Jul 28 06:00:42 2025 GMT
Subject: CN=dce6940cdc0ea6f21cbecc87083800b270f1befb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:90:84:7c:2e:2a:d4:76:3e:77:59:bd:50:c5:
7e:08:98:03:da:24:24:71:08:59:64:b9:5f:7d:65:
9a:4a:49:14:27:b3:41:ea:2c:9c:41:1e:e1:5f:bb:
e6:10:62:31:ba:cb:08:40:19:ba:ea:93:ce:0a:11:
79:72:43:58:c0:d9:1a:df:1e:70:70:02:e4:c1:cd:
19:1d:85:e9:57:69:aa:ad:77:e3:fb:75:eb:c9:df:
b6:43:9d:bb:80:d3:31:52:e4:0e:ad:8f:fd:71:5b:
8e:67:a8:66:47:86:61:d3:8b:f1:74:d1:b2:40:96:
8a:80:e6:0f:a3:2e:64:ae:80:30:10:36:8a:f1:63:
2b:48:5b:57:25:31:e7:b7:58:a7:8f:02:b2:4c:f0:
b7:52:53:8e:fa:c0:52:14:4d:6b:1d:43:1d:e4:84:
86:79:83:7c:67:b6:7a:35:fe:c4:45:b7:42:88:a8:
19:5a:67:60:bf:ec:5c:7b:69:cc:d1:78:cc:a0:ff:
23:3a:ba:2c:b6:09:74:8b:10:b8:b6:fc:db:08:f7:
ab:41:d6:d0:d9:89:28:89:34:30:92:18:5a:5c:e1:
e6:da:83:c2:10:92:95:02:3f:d5:be:39:43:67:90:
dc:a5:64:8e:ac:fb:89:0a:48:30:3a:53:5b:00:09:
95:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E6:94:0C:DC:0E:A6:F2:1C:BE:CC:87:08:38:00:B2:70:F1:BE:FB
X509v3 Authority Key Identifier:
keyid:70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:96:09:1c:d2:f1:7a:08:74:97:99:6c:b6:cf:85:b0:97:70:
2e:bb:8d:db:48:bc:72:5d:fa:ec:15:43:a6:7b:a2:64:c2:1e:
46:53:6f:ff:50:0b:b8:87:e6:d1:96:ee:96:95:b9:83:59:89:
e0:a8:2e:5b:b5:8e:1f:de:49:ca:40:9a:fa:43:81:3a:7e:7c:
5a:cb:43:6c:83:67:61:5a:2c:2a:be:42:d1:c3:bc:32:56:9d:
11:76:23:81:dd:7d:83:d0:7a:dd:67:50:90:07:b2:6f:a1:cf:
0a:3f:f0:05:38:4d:f9:14:92:2e:34:89:80:2d:c1:3b:56:e7:
7a:25:75:97:97:bb:7a:ba:50:3e:dd:37:ba:56:1c:d0:25:79:
f3:53:2a:f1:90:70:a7:94:f3:3d:e1:79:ce:ea:5d:a5:8b:50:
43:1a:b1:77:63:6d:bb:6d:fc:28:f5:bb:6e:76:04:e8:05:2c:
8d:86:f0:93:58:1e:44:f6:57:9b:f0:bd:09:1f:0a:e4:0c:a6:
15:c5:a4:12:fa:23:39:75:ae:7c:02:05:7e:96:48:54:a6:8d:
1a:83:46:d0:f6:29:b3:4f:1e:1e:2c:c9:e8:b3:37:39:dc:20:
ec:3a:9c:c8:9c:e5:1e:33:2c:11:1f:80:61:22:e7:bb:94:b7:
18:f1:60:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:01:20 2025 by rpki-client