Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
File: CIAqhiH4eCf9WXI85my1nDj5HyE.mft (raw, json)
Hash identifier: 4j3RRdVrJHIfRTFE5xbHNBUGlMsHEp7Y3lX/6GgcsE0=
Subject key identifier: 0A:58:5F:2A:F4:D5:2D:B1:87:2A:B8:22:C0:81:36:47:A8:DD:5D:D0
Authority key identifier: 08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
Certificate issuer: /CN=08802a8621f87827fd59723ce66cb59c38f91f21
Certificate serial: 0199221EF02CE0E98CAE5FA782059E3D3300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
Manifest number: 09C9
Signing time: Sun 07 Sep 2025 03:01:16 +0000
Manifest this update: Sun 07 Sep 2025 03:01:16 +0000
Manifest next update: Mon 08 Sep 2025 03:01:16 +0000
Files and hashes: 1: CIAqhiH4eCf9WXI85my1nDj5HyE.crl (hash: J0rJ5O4IJuRR2c+R9lr1C4xOhDQWgP0b9THkGiDnPNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:f0:2c:e0:e9:8c:ae:5f:a7:82:05:9e:3d:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08802a8621f87827fd59723ce66cb59c38f91f21
Validity
Not Before: Sep 7 03:01:16 2025 GMT
Not After : Sep 8 03:01:16 2025 GMT
Subject: CN=0a585f2af4d52db1872ab822c0813647a8dd5dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5c:b1:36:93:75:81:fd:0c:bb:78:77:91:50:
ea:3c:f1:16:59:01:e3:e1:d5:b5:67:99:1e:14:a1:
5b:2c:07:48:34:e9:16:32:18:2f:0f:82:b9:8f:07:
62:9d:30:06:e6:51:ba:ee:08:fe:90:ac:e5:13:88:
fd:67:33:6a:d1:ee:a8:61:46:cc:49:e6:7e:38:93:
93:0a:12:a6:34:37:48:7e:69:07:20:9b:24:2b:ef:
02:cb:6b:81:e4:60:de:b6:25:cf:ba:0b:f4:82:ab:
09:d3:74:4d:7e:e4:34:cc:08:7f:48:7e:e7:c8:75:
97:e7:45:d0:99:12:b1:da:13:42:49:74:d8:f7:06:
ae:eb:03:91:b4:46:c9:21:4b:83:8e:7b:d2:8c:70:
1c:6e:68:2c:d1:57:5d:14:80:4a:42:9c:64:c5:9c:
eb:0c:c7:9e:f7:cb:d0:86:d8:1a:6a:25:0e:d4:f4:
3a:e8:ef:1e:98:0f:1d:96:83:26:6a:a2:53:1b:99:
7a:71:79:4c:57:27:34:c6:f3:2b:44:15:dd:9c:c5:
39:cb:9f:79:b3:f4:d9:23:b3:37:c2:6f:35:88:f8:
e7:20:4e:d1:c4:67:79:08:04:34:b2:f8:b2:04:de:
30:42:9f:00:8f:91:00:7f:f0:63:99:24:39:51:33:
3b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:58:5F:2A:F4:D5:2D:B1:87:2A:B8:22:C0:81:36:47:A8:DD:5D:D0
X509v3 Authority Key Identifier:
keyid:08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9c:99:93:c5:e9:77:73:85:40:b1:dc:87:df:e4:56:14:f2:
ed:6d:b4:11:c8:7c:c1:07:e8:a1:d4:bb:18:5c:5e:2c:75:68:
93:86:da:5e:13:d0:5c:69:70:c6:01:5d:c7:12:47:b0:47:dd:
db:41:10:f7:5f:eb:f6:d5:da:33:40:53:43:c8:3d:8c:44:23:
9e:f2:d2:6f:29:05:0a:64:13:46:e7:17:b8:e0:d9:c2:09:f1:
10:64:bb:82:d3:0f:a6:09:1b:44:9e:20:b1:bc:f9:5c:b1:db:
b7:a7:80:f4:50:8b:27:02:4d:b6:66:fc:b3:f6:3c:42:73:32:
6b:2b:a9:74:c5:1b:11:31:6e:36:3e:43:e2:bf:8e:39:c6:01:
02:81:32:37:ed:b9:e0:22:2e:3b:e3:30:92:ee:75:6e:3a:57:
48:e3:89:c5:d3:c2:48:7a:3c:8f:56:09:42:25:0b:9a:f1:74:
47:82:b4:50:e9:38:34:5c:cb:71:9f:e7:18:79:6e:af:30:f8:
c9:8a:b2:18:a2:94:a6:1e:61:fe:fa:0b:b8:10:d9:b4:9b:9e:
2c:40:d5:90:58:8b:29:19:05:e8:cb:8f:1b:cd:95:b0:29:dd:
b0:e8:40:fc:0b:8b:11:74:21:72:a4:fa:b9:b3:78:e4:8a:b4:
37:41:84:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:17 2025 by rpki-client