Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
File: CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft (raw, json)
Hash identifier: klp79fx7lJC/jqobJnZw8g+lX+lK9Gk5BP6AxoH6kiI=
Subject key identifier: DF:CD:D2:83:77:CF:5B:75:38:53:79:E4:1B:F2:C6:43:FB:0D:4C:62
Authority key identifier: 0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
Certificate issuer: /CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Certificate serial: 0199183F788AD46ECD461DEBE6DAA26C0489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
Manifest number: 166B
Signing time: Fri 05 Sep 2025 05:00:36 +0000
Manifest this update: Fri 05 Sep 2025 05:00:36 +0000
Manifest next update: Sat 06 Sep 2025 05:00:36 +0000
Files and hashes: 1: CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl (hash: PwR3y3xKgXH9Oa1KiHbJS2TSDr6Kycoq7awkTD+KbaY=)
2: w5pXk-zMDjFo7rYudSF_ATInnUI.roa (hash: 33j8kQlj8EM4Xb9f4KytIpk1E+D5CzmOoXGUrxjI1vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:3f:78:8a:d4:6e:cd:46:1d:eb:e6:da:a2:6c:04:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Validity
Not Before: Sep 5 05:00:36 2025 GMT
Not After : Sep 6 05:00:36 2025 GMT
Subject: CN=dfcdd28377cf5b75385379e41bf2c643fb0d4c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f4:2d:12:96:11:0f:95:e8:51:0d:6e:4e:0c:
8e:7c:30:89:51:58:f9:28:ed:7f:fb:f6:76:cb:7c:
89:43:81:4c:7f:af:cd:0c:8f:fd:34:ff:d7:09:9c:
90:e6:bf:11:52:3a:a7:b4:5f:57:cc:13:1a:4c:32:
40:58:7f:03:77:a3:76:e7:4e:b1:2f:41:6b:00:c5:
39:ab:50:20:18:1d:6f:e5:27:60:b6:29:fc:d7:6c:
d6:23:26:5f:d8:35:e4:12:37:67:58:61:cb:fd:01:
4b:5c:23:e2:5e:e0:b7:81:bb:c9:a8:77:e2:7a:fd:
3a:e9:41:a9:b9:11:56:91:8f:3f:5e:b4:2c:d6:f4:
bb:64:14:01:82:74:eb:84:18:e4:4a:ce:e4:69:80:
5c:d9:51:d0:a9:b6:b2:54:71:e0:f3:03:c1:fd:d3:
b4:65:20:de:aa:e2:a1:ae:b1:b5:c9:b8:64:9c:8b:
5a:1e:b4:4f:77:e9:56:f5:36:1e:74:65:fd:0c:88:
50:85:de:cb:4e:1a:41:a8:33:a1:6c:79:04:50:b3:
3f:57:cd:e6:fb:07:46:be:72:d6:2c:37:85:ab:d2:
bc:f4:d3:c0:bf:58:9e:61:5e:92:8e:55:7c:bc:bd:
35:a8:2e:ac:39:47:2a:03:3e:9b:bd:81:6e:3e:29:
57:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CD:D2:83:77:CF:5B:75:38:53:79:E4:1B:F2:C6:43:FB:0D:4C:62
X509v3 Authority Key Identifier:
keyid:0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f0:ab:0f:b4:24:99:a4:cf:50:7e:84:1b:52:75:64:6c:c1:
0c:46:18:e1:85:1d:54:b4:99:30:8c:53:b2:5e:69:0b:c0:7d:
62:23:29:3b:f5:e1:0c:05:fa:21:fe:75:46:e5:f1:8f:46:ca:
cf:d6:c1:3d:28:20:e4:c7:c4:6a:dc:62:48:5b:69:aa:ed:58:
5b:8e:33:9e:8c:fd:0b:c7:cc:6e:04:92:b7:e5:96:91:c1:54:
3e:d3:0f:9d:ba:4c:b0:37:9f:ee:45:61:fb:31:d1:b0:7a:71:
5a:f9:fb:c2:84:f6:98:bb:6d:46:f8:aa:1f:10:4a:09:58:b1:
51:cc:04:13:6e:4e:ee:17:8a:dc:a2:6f:35:5e:cb:ab:a2:31:
ef:17:26:0b:2b:9e:48:2d:04:43:ee:e3:69:43:08:81:28:7e:
f7:8a:d3:b6:f3:a6:a3:1c:18:ff:de:a8:d7:f0:bd:f7:e6:6b:
59:d6:10:49:df:71:ad:39:9a:8b:96:b4:cf:af:6e:16:e5:63:
a1:2b:58:ce:ce:c1:6f:86:c4:a1:54:4e:6e:45:3a:8f:5c:02:
54:7d:b0:ff:24:cb:fb:22:7f:d3:85:4b:2b:52:72:7c:da:4a:
69:42:d4:6d:be:de:3b:1d:b8:56:aa:98:54:74:af:e9:c1:c0:
cb:c0:ba:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:33:05 2025 by rpki-client