Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.mft
File: ci0p5qil5cpi3rc-r_OrE95VBq0.mft (raw, json)
Hash identifier: F13Gq9t7bd7rUXp3Lh8ikUStxUK4CluKahIJRZm+FMQ=
Subject key identifier: 33:E6:A9:88:6D:04:B8:43:54:BB:6B:91:A6:63:79:1C:4A:B1:65:59
Authority key identifier: 72:2D:29:E6:A8:A5:E5:CA:62:DE:B7:3E:AF:F3:AB:13:DE:55:06:AD
Certificate issuer: /CN=722d29e6a8a5e5ca62deb73eaff3ab13de5506ad
Certificate serial: 0199176449C04401A17AF420518AF9C39D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ci0p5qil5cpi3rc-r_OrE95VBq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.mft
Manifest number: 0172
Signing time: Fri 05 Sep 2025 01:01:12 +0000
Manifest this update: Fri 05 Sep 2025 01:01:12 +0000
Manifest next update: Sat 06 Sep 2025 01:01:12 +0000
Files and hashes: 1: ci0p5qil5cpi3rc-r_OrE95VBq0.crl (hash: t2yfX8ndMc124U2LSGOYlpXRd4Fl/fwMBnWmaMD2BGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ci0p5qil5cpi3rc-r_OrE95VBq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:49:c0:44:01:a1:7a:f4:20:51:8a:f9:c3:9d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722d29e6a8a5e5ca62deb73eaff3ab13de5506ad
Validity
Not Before: Sep 5 01:01:12 2025 GMT
Not After : Sep 6 01:01:12 2025 GMT
Subject: CN=33e6a9886d04b84354bb6b91a663791c4ab16559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c7:cb:51:7a:69:53:7c:8e:4c:2b:8f:95:16:
6f:d6:70:2a:dc:ae:dd:85:5d:27:d7:eb:b3:e7:2d:
a5:d5:8a:4d:04:ad:f9:2f:98:4e:99:63:e6:d1:59:
fc:f9:3b:c4:dc:55:09:90:31:b0:f6:1b:a2:02:fc:
a2:a8:1b:7c:17:15:dd:0d:14:4c:05:4c:7b:2e:9b:
f9:9e:81:bd:c0:42:ea:0f:14:c0:ef:a3:9f:47:db:
3c:6c:c7:9f:55:82:d6:3a:29:66:d9:2b:ad:b9:89:
85:91:c5:65:ab:76:6d:a5:d5:a9:7c:2d:2b:16:87:
85:ad:d6:ab:ac:5e:5e:21:a1:9b:36:d6:66:8c:52:
5b:91:b0:58:26:d6:dd:b8:a1:ac:e4:aa:c5:fe:5d:
8c:52:b2:81:42:c8:a6:7c:5d:e5:68:01:d1:03:50:
bf:88:15:cd:b2:ed:6f:f7:5e:95:39:55:4a:fc:07:
a6:fc:57:7c:7b:d1:7b:e8:45:fb:97:bf:22:fd:c1:
cd:4e:17:6a:4d:29:a4:b5:35:47:9d:2a:9f:28:38:
f6:58:37:09:3f:b3:42:52:ce:77:7b:af:00:00:65:
1a:76:b3:f1:60:0a:cc:55:ad:0c:46:25:42:6c:fe:
80:d2:74:3e:ac:60:29:20:fc:ae:c3:af:a3:d9:a8:
e7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E6:A9:88:6D:04:B8:43:54:BB:6B:91:A6:63:79:1C:4A:B1:65:59
X509v3 Authority Key Identifier:
keyid:72:2D:29:E6:A8:A5:E5:CA:62:DE:B7:3E:AF:F3:AB:13:DE:55:06:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ci0p5qil5cpi3rc-r_OrE95VBq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b0:a0:e7:94:ad:2a:f3:77:9a:96:f0:d2:d7:f7:d4:af:a5:
81:8a:7f:a6:d9:bf:4b:8a:cb:b0:3a:5c:4c:8d:87:0e:e3:6e:
97:aa:7a:16:0f:67:cb:5b:c1:2d:64:b4:e1:85:39:1d:87:75:
2a:cc:2e:ea:60:10:de:d2:a0:67:3b:23:14:04:6b:e8:da:c4:
ba:8b:0c:dd:e1:b1:76:6e:d0:c2:b8:33:f0:fe:e1:63:f1:6e:
a4:ca:4a:3e:23:e1:c3:bf:80:c7:c7:65:7d:9f:53:7c:a6:08:
9d:83:d6:a5:ec:15:fd:05:3d:c7:06:bd:e0:95:63:db:f2:af:
74:dc:b8:96:09:f2:34:88:e2:02:1e:b8:35:bb:0a:cc:26:a7:
98:2d:0c:8c:2f:76:85:66:44:77:6c:49:db:99:f9:bb:c9:d9:
0e:fd:6e:ed:1d:72:2c:71:5f:bd:e1:13:5d:41:fa:f9:e4:68:
5c:66:4c:55:9b:4c:0b:da:dd:7c:65:b5:e6:d9:02:0f:da:15:
22:f7:0c:92:61:4b:52:6f:90:6f:47:a7:16:a6:7a:77:6c:69:
12:95:85:66:bf:a1:52:89:d1:f2:a2:da:6c:21:a4:85:c3:7a:
14:a2:81:3f:86:3c:7a:67:a2:3b:56:66:5a:ba:34:ae:cc:11:
4a:f8:19:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:14 2025 by rpki-client