Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
File: ci8LM2ULfWSYufWKrFopfpJhSCI.mft (raw, json)
Hash identifier: o4csaF4ZI+noK0VmP/btg7/E0lH+PoVLEdwf9LTuFw0=
Subject key identifier: 31:91:8B:27:44:E2:C8:F2:FF:21:7E:D6:BE:07:3B:CA:99:7F:43:37
Authority key identifier: 72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
Certificate issuer: /CN=722f0b33650b7d6498b9f58aac5a297e92614822
Certificate serial: 01992255C5162E6B53AB72A9EAAE55104490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
Manifest number: 0A04
Signing time: Sun 07 Sep 2025 04:01:10 +0000
Manifest this update: Sun 07 Sep 2025 04:01:10 +0000
Manifest next update: Mon 08 Sep 2025 04:01:10 +0000
Files and hashes: 1: 5uh-8NvfQB_oZowhRUdfu_0v2fA.roa (hash: gCC1UC6wWvqsz5JLnyhaum++DmlgyZmiMdDqSAXaOG4=)
2: ci8LM2ULfWSYufWKrFopfpJhSCI.crl (hash: gltlfqS0bpx4zewaCX/C5vpdWkMMx6DtBP08Ds7wzwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:c5:16:2e:6b:53:ab:72:a9:ea:ae:55:10:44:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722f0b33650b7d6498b9f58aac5a297e92614822
Validity
Not Before: Sep 7 04:01:10 2025 GMT
Not After : Sep 8 04:01:10 2025 GMT
Subject: CN=31918b2744e2c8f2ff217ed6be073bca997f4337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1f:4b:4f:1a:b5:18:a1:d5:56:b0:c4:72:76:
cf:e6:1a:1e:a5:c1:f2:74:31:81:0f:bf:5d:1c:39:
29:5b:46:9e:49:d5:b0:15:82:53:ce:05:1c:df:ff:
d1:7f:c2:ba:2a:70:8b:98:44:3e:62:0d:bd:e3:d1:
db:b3:2a:cf:a9:b9:4d:56:0e:55:c9:a7:ea:2b:91:
4f:b1:ba:d5:cb:22:52:bb:8b:67:7f:cf:d3:86:00:
c0:7a:64:11:4d:a2:77:5e:11:47:2f:15:d7:5c:43:
35:55:b2:eb:c7:d8:7e:7a:c1:ce:4b:a3:77:35:7f:
37:53:54:d0:8b:6c:b8:62:fd:6a:b9:0c:f6:2e:24:
e0:a2:a6:71:c7:ef:d4:3e:b9:77:9d:0c:6f:f9:48:
c4:0a:f9:60:63:46:48:30:f3:18:fb:5a:a8:c3:05:
28:68:70:f3:b4:3b:58:32:1f:f8:48:31:f0:d5:c7:
0d:80:c2:2d:68:8c:94:28:8b:14:ea:6a:aa:54:02:
17:a4:7f:80:25:18:49:68:e6:20:c2:f5:44:bf:68:
91:49:ca:c3:14:58:15:31:ba:2c:1c:20:2c:b2:6d:
11:e0:01:2c:66:c2:f2:2c:44:9b:04:6d:f8:b9:d0:
56:85:a2:00:5d:a6:62:97:fe:0a:f0:1b:7f:26:fd:
35:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:91:8B:27:44:E2:C8:F2:FF:21:7E:D6:BE:07:3B:CA:99:7F:43:37
X509v3 Authority Key Identifier:
keyid:72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:16:02:0a:6b:79:4f:4a:20:5d:d3:03:71:57:1a:ad:df:31:
a2:43:81:67:fe:88:dc:3a:15:fc:ff:37:f0:67:2d:fb:cc:43:
3b:0a:2b:3e:7c:00:35:69:b6:75:b0:5b:42:08:a3:26:c2:27:
a0:93:4f:cf:c0:42:7d:9d:3e:b4:85:2e:5b:c1:e8:cc:97:e7:
2b:63:31:48:43:79:86:b1:76:6f:83:ce:e8:d0:c3:cc:cd:f2:
5a:f0:c2:6a:e1:b7:92:7e:e7:74:16:11:5d:b7:d2:b0:9d:67:
32:ec:50:9f:80:d4:ce:5c:af:88:49:ff:9d:00:3a:36:1d:fc:
ec:2d:1c:00:e7:c4:c5:4e:19:3c:ca:5b:84:40:4a:91:d9:ca:
19:03:c3:19:00:14:ba:e3:ff:91:aa:75:dd:d3:f2:9d:79:44:
5f:2c:a4:df:a7:55:d0:92:88:a2:1e:ec:ca:be:1d:23:8f:a4:
74:fc:5b:d0:ec:ea:ab:10:f7:d0:26:40:7f:a0:66:f6:a3:0d:
3f:9a:be:a0:89:f4:72:34:69:d6:55:0e:39:50:ed:62:4f:8b:
ac:a9:38:e9:6c:4f:23:a4:d7:8b:60:e3:16:33:c6:b3:5f:04:
7c:ef:a3:36:61:3e:f1:20:7e:c7:8f:f7:2b:63:6a:88:73:24:
a9:2c:db:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:11 2025 by rpki-client