Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
File: CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft (raw, json)
Hash identifier: i0WNmi/YnvcuDZmYPgETEcmpb8aoJKjv656nvEgnHXQ=
Subject key identifier: 3F:DE:51:78:BE:64:55:EE:0B:03:90:99:1A:56:5A:34:92:ED:55:4D
Authority key identifier: 0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
Certificate issuer: /CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Certificate serial: 019748C3323A43E41F68EA5F8DCEC47800A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 05:00:41 +0000
Manifest this update: Sat 07 Jun 2025 05:00:41 +0000
Manifest next update: Sun 08 Jun 2025 05:00:41 +0000
Files and hashes: 1: CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl (hash: 9XFgkCrJk34evWKANsbHVGTEcb0WCG3wlIfFFgKpegw=)
2: w5pXk-zMDjFo7rYudSF_ATInnUI.roa (hash: 33j8kQlj8EM4Xb9f4KytIpk1E+D5CzmOoXGUrxjI1vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:32:3a:43:e4:1f:68:ea:5f:8d:ce:c4:78:00:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Validity
Not Before: Jun 7 05:00:41 2025 GMT
Not After : Jun 8 05:00:41 2025 GMT
Subject: CN=3fde5178be6455ee0b0390991a565a3492ed554d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:04:e1:f2:b3:36:3a:3d:d8:13:ee:81:9b:34:
ab:6c:5b:11:d3:b1:de:da:67:58:13:00:4e:c8:0b:
34:29:01:ce:7b:ee:6f:62:57:4b:0a:50:78:45:0f:
50:36:77:e3:61:df:25:20:7f:b6:63:bf:5b:fd:56:
0e:7b:7f:b4:49:93:12:51:27:ce:fe:f6:07:c7:b1:
f3:9b:ab:48:5b:76:8c:13:1a:63:bf:43:79:d8:45:
9f:21:14:92:e7:f8:02:f7:7c:24:05:10:ca:7f:af:
d9:9c:b9:13:30:f3:54:4a:c6:8e:1c:dd:10:2e:c4:
67:d4:87:f3:0a:3a:a9:8f:12:2c:c4:a9:56:1b:ce:
d1:53:b3:54:71:1c:3a:98:01:76:a7:0c:78:85:65:
63:c6:aa:b5:b4:4d:44:6b:1b:dc:d1:49:11:cc:fe:
54:02:69:c5:4f:86:26:c1:64:c7:e8:6b:df:6e:b0:
c0:62:11:6e:08:70:5e:13:9d:ea:50:6f:40:ce:52:
aa:14:55:58:f5:45:55:17:3a:9f:5b:44:03:e7:0a:
47:67:61:73:2b:cd:a1:57:7d:b0:80:44:81:74:d2:
ad:6b:11:b2:2d:73:c1:75:f8:12:d1:cf:76:4b:1f:
db:d2:d1:29:83:b4:fa:50:fa:f7:c1:60:10:f5:33:
08:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DE:51:78:BE:64:55:EE:0B:03:90:99:1A:56:5A:34:92:ED:55:4D
X509v3 Authority Key Identifier:
keyid:0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:3e:2f:da:4f:bb:c6:e6:63:55:28:20:be:4d:6f:47:fa:0e:
b3:99:df:28:56:82:02:95:c9:b2:9a:84:fb:b8:d7:a9:f9:3d:
b4:c1:be:68:8b:e2:81:97:a3:76:20:08:ba:b3:04:15:d6:e5:
aa:fc:6c:7e:55:07:33:46:57:da:ae:63:46:f3:02:a9:aa:bf:
51:45:66:eb:42:d8:92:02:48:f5:61:90:b2:66:f2:06:9a:9f:
36:49:70:6f:64:17:34:42:8b:6d:66:16:9b:63:90:97:46:03:
70:e3:5f:3f:4f:86:54:7f:33:f6:c7:e2:dc:f0:58:b5:54:39:
ab:6b:e8:ad:75:85:03:4b:08:d5:9e:83:28:81:2b:fc:e6:a7:
48:9f:eb:5d:12:5d:32:7d:81:d9:e3:db:7a:a2:03:cd:20:65:
cb:8d:b7:ab:27:03:60:a0:06:d4:9f:2e:f8:7d:ae:b2:3b:fd:
fb:1a:c2:bd:e6:f9:0f:48:6d:ac:14:77:f7:c8:70:35:cd:5c:
40:df:27:00:2a:71:d8:ed:ad:3b:bb:70:a3:3a:66:d6:5a:b0:
14:46:23:ba:3c:fb:78:09:e2:cf:cb:f2:c3:ff:5d:08:36:23:
d2:54:d8:f0:cc:b9:06:07:19:0c:18:3f:33:ce:05:a9:42:ab:
a8:13:7e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:57:16 2025 by rpki-client