Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
File: ciLFq32z3TlmGS-q_gfzEVsMjuU.mft (raw, json)
Hash identifier: Gi4SEE8+XRctNZj1jMueREgBEK/UWJKbnAToNntZUHg=
Subject key identifier: D2:B8:CD:B0:E9:53:F0:7C:9F:63:3E:B1:D1:39:8A:3D:60:A6:D2:17
Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
Certificate issuer: /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Certificate serial: 0197518F9A5C0D50136866CF1A394F76907D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
Manifest number: 1257
Signing time: Sun 08 Jun 2025 22:00:55 +0000
Manifest this update: Sun 08 Jun 2025 22:00:55 +0000
Manifest next update: Mon 09 Jun 2025 22:00:55 +0000
Files and hashes: 1: ciLFq32z3TlmGS-q_gfzEVsMjuU.crl (hash: +HXUcVK2PzU4L8HaZtrFdKocwuw5Le0/1UsWFK12J5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:9a:5c:0d:50:13:68:66:cf:1a:39:4f:76:90:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Validity
Not Before: Jun 8 22:00:55 2025 GMT
Not After : Jun 9 22:00:55 2025 GMT
Subject: CN=d2b8cdb0e953f07c9f633eb1d1398a3d60a6d217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:10:bd:b8:8f:e8:40:3a:5e:5a:41:4a:e1:84:
c9:37:b2:5d:95:81:5a:fe:b4:b6:f2:bf:bf:4c:85:
4c:d4:46:84:b8:26:12:13:07:3a:ac:f7:7e:3f:9f:
12:6b:9b:71:cc:c4:b1:19:01:74:38:30:0c:61:52:
c1:e9:a3:fe:fe:59:04:a0:29:00:8a:ef:60:02:ba:
59:ef:ae:d1:0f:d7:ca:27:79:6f:17:d0:8b:5a:2b:
f8:8f:06:2f:95:d0:85:43:e7:66:2d:a7:c6:e7:b0:
8c:23:ea:22:83:d7:c0:57:97:3c:d5:89:45:ec:dc:
f7:fb:40:42:ab:d3:80:24:4b:c7:56:fc:88:e0:c5:
22:d8:8e:a4:00:70:f3:68:2a:46:1e:cb:ee:39:af:
7d:ef:7b:b1:36:24:05:11:3f:67:df:ab:e7:6a:2f:
f4:c6:89:51:30:af:ec:68:18:08:b8:fa:c7:42:d2:
12:9a:18:07:8f:e0:52:a7:5f:eb:b0:58:cb:da:96:
0c:a9:4f:74:de:2e:1f:6f:3b:ed:f6:44:3f:87:3c:
da:b6:3c:e7:a5:9d:20:c0:19:11:85:0d:fa:af:6b:
5c:e6:53:be:94:ee:2c:52:8f:a9:0d:98:27:55:83:
b4:be:f7:49:a4:79:25:9d:0f:a8:68:9f:aa:7f:c4:
a1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B8:CD:B0:E9:53:F0:7C:9F:63:3E:B1:D1:39:8A:3D:60:A6:D2:17
X509v3 Authority Key Identifier:
keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d4:bd:4a:3a:0f:73:17:43:82:a6:93:aa:7a:ed:66:b0:48:
66:bf:3c:fb:2e:c0:ce:58:28:66:51:0a:e4:b3:21:bc:e0:1b:
d1:33:22:09:42:1e:08:10:00:76:64:ec:05:80:e8:82:4d:e7:
56:04:cb:fb:b1:19:02:75:0c:8a:85:09:40:34:f2:0a:36:5b:
56:f9:fb:d8:29:0e:da:9a:30:00:5f:66:42:16:cc:64:db:9b:
4a:90:b1:36:0f:27:68:3d:37:0b:5a:0b:8c:96:fc:b1:a0:b7:
48:9d:e2:2a:3d:bc:93:16:8e:65:d5:d2:1e:66:77:ec:50:39:
76:a2:db:97:e5:33:7d:a2:03:4b:ea:3e:2f:d1:ea:ce:5f:6f:
9d:4a:8b:a4:96:43:63:7c:18:d5:67:08:f4:74:23:d8:50:aa:
25:3b:fa:92:3b:f1:fc:8a:d6:48:ae:85:aa:b0:a2:cb:a5:84:
1c:54:77:45:08:ff:e5:2a:e9:50:12:40:4d:36:28:21:d4:1f:
11:d1:59:61:e1:b4:67:18:40:de:8e:ff:2c:20:98:a7:87:0b:
b2:25:98:63:a1:15:04:5d:81:3b:1e:8a:1d:8a:ee:c7:cd:b4:
b7:22:06:f7:20:9e:45:c2:82:92:34:de:df:97:ed:44:b5:be:
2a:0a:03:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:55:10 2025 by rpki-client