
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
File: ciLFq32z3TlmGS-q_gfzEVsMjuU.mft (raw, json)
Hash identifier: h0j1wFzNnknzzFTvQSkwDbCywcC5cKdQ+xEz6w1/HpI=
Subject key identifier: DD:87:B3:E5:FF:B6:0D:E3:58:1F:26:FF:BB:D5:1A:F1:58:E0:C8:2A
Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
Certificate issuer: /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Certificate serial: 019922FAC535D060EAFA404DF9FEEB0733FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
Manifest number: 1348
Signing time: Sun 07 Sep 2025 07:01:23 +0000
Manifest this update: Sun 07 Sep 2025 07:01:23 +0000
Manifest next update: Mon 08 Sep 2025 07:01:23 +0000
Files and hashes: 1: ciLFq32z3TlmGS-q_gfzEVsMjuU.crl (hash: j5DPvV24X7uq+bu9RAEO/VuIxJtgxPzNqZmUEMRR1Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:c5:35:d0:60:ea:fa:40:4d:f9:fe:eb:07:33:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Validity
Not Before: Sep 7 07:01:23 2025 GMT
Not After : Sep 8 07:01:23 2025 GMT
Subject: CN=dd87b3e5ffb60de3581f26ffbbd51af158e0c82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:89:2b:84:a6:77:8c:df:0d:ee:23:80:31:1e:
4a:8f:59:1b:ca:8a:b8:15:0b:c8:c6:0b:73:47:90:
8c:c4:8f:65:d8:cf:eb:e3:3a:7f:f8:11:82:66:b6:
19:07:9a:6f:c3:46:6b:42:1a:30:9f:44:c1:48:40:
d9:0e:17:09:42:6f:42:a1:68:3a:b3:90:69:73:bf:
4d:a2:04:94:89:97:6c:92:b2:0a:cc:0f:cd:a1:7b:
29:41:4c:2a:9b:cd:17:b1:57:3f:b2:0f:0c:b1:bf:
ec:f2:87:c3:cc:ac:22:ca:d6:e0:85:0a:aa:4e:dc:
a3:e1:78:56:0f:e7:38:1d:0c:fe:bb:e2:fc:d2:9a:
68:ee:91:46:9b:bc:68:ea:87:1d:d8:5d:b7:8e:9f:
ad:e9:df:4e:53:35:4c:1c:2e:6c:31:09:23:40:8d:
da:f5:d6:fd:92:91:4a:46:c1:60:21:74:ec:a3:c0:
ee:85:2c:42:cf:24:73:e3:12:34:86:d9:2c:ee:fd:
54:21:4d:c7:3d:46:02:1b:03:e7:8d:6a:45:c9:b1:
fd:8b:4f:83:1f:82:8a:81:51:e0:48:45:a8:f5:fa:
98:22:55:db:ba:ea:e9:3a:c2:44:9e:c7:bd:0a:b4:
15:e1:dd:55:72:a2:0e:71:9c:76:7b:c1:06:c7:0c:
7a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:87:B3:E5:FF:B6:0D:E3:58:1F:26:FF:BB:D5:1A:F1:58:E0:C8:2A
X509v3 Authority Key Identifier:
keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a2:3e:98:f6:62:b2:a8:f4:c8:f6:00:5c:d2:ec:b5:51:10:
3c:fc:0b:4d:e6:80:b6:02:d9:21:68:b5:cf:88:ee:8d:e0:ba:
42:2d:d9:5d:6a:84:20:b8:fc:ce:45:42:0e:b3:1a:d5:67:da:
25:d0:d0:97:d9:8d:6b:bd:38:7d:d0:7b:b5:7e:ec:95:1d:85:
26:53:59:60:95:d1:f7:c0:11:fc:32:32:84:35:e2:df:cb:2c:
c9:7c:f6:a3:d8:8d:62:a0:52:92:01:23:5b:04:1b:7e:34:00:
0e:28:b0:bc:34:7e:f0:40:00:10:d2:a9:73:d1:35:4a:26:5e:
70:3e:e3:b1:8c:99:e6:b8:51:9f:f3:e5:9f:94:13:60:10:9b:
e8:f9:44:80:73:f2:07:47:48:7e:a5:6c:4e:ee:17:6f:9b:4d:
1d:e8:0d:a6:64:c3:c3:07:13:96:c7:ae:5b:58:31:21:c9:f9:
41:2d:6c:77:98:49:e3:12:04:4c:3a:a2:f2:1c:18:2f:83:81:
cc:04:27:92:2a:dd:e5:fb:fc:9d:f5:4f:a3:a5:d1:6e:f9:22:
85:d6:47:62:3f:df:bb:b3:a6:c6:0a:a5:73:c5:28:81:36:72:
eb:96:fd:00:67:5e:de:a4:9b:6a:4c:09:ae:9b:97:d6:d2:83:
e5:a7:b6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:55:29 2025 by rpki-client