Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
File: CI4DIScTMq_HfkyFefDlVZzAnFA.mft (raw, json)
Hash identifier: t39pILSIAEesPPxUGsEauxCZPyUm0gA9wz07xWq1bNc=
Subject key identifier: 50:75:B5:C5:BB:DD:FD:54:AF:C1:A5:1D:F7:16:F8:D5:B6:6E:75:FE
Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
Certificate issuer: /CN=088e0321271332afc77e4c8579f0e5559cc09c50
Certificate serial: 01992367CE01000CF450D53CC8F7824F691D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
Manifest number: 1339
Signing time: Sun 07 Sep 2025 09:00:29 +0000
Manifest this update: Sun 07 Sep 2025 09:00:29 +0000
Manifest next update: Mon 08 Sep 2025 09:00:29 +0000
Files and hashes: 1: CI4DIScTMq_HfkyFefDlVZzAnFA.crl (hash: YpeEEunnDiw4ZoPXVV2iyDbK7pE8pp7Hz5CxvTT9wro=)
2: ICR_37PsCBP-8LWQQc9BQZWkbu8.roa (hash: qbGaCfhiVfxLumC4av9v0LJhrwsxTdIAQc0ayhncJww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:ce:01:00:0c:f4:50:d5:3c:c8:f7:82:4f:69:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50
Validity
Not Before: Sep 7 09:00:29 2025 GMT
Not After : Sep 8 09:00:29 2025 GMT
Subject: CN=5075b5c5bbddfd54afc1a51df716f8d5b66e75fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:13:72:fa:5e:fb:0a:dc:72:e4:ba:bc:a3:a0:
54:87:c8:f1:95:15:8d:eb:78:ca:cc:e7:ad:c8:ac:
d7:62:c7:0c:6c:5e:96:5e:8b:fb:92:55:17:4c:dd:
c9:62:49:82:2a:90:e5:65:db:31:0c:92:87:54:d2:
40:fb:0d:03:f2:29:a9:7f:90:89:bd:2b:a6:c4:82:
20:7a:c2:72:80:a1:30:fc:9b:05:eb:fa:6b:bb:aa:
b0:1c:43:a2:c5:6a:08:fe:4d:a5:8f:25:0d:c0:0d:
2c:68:77:8b:a7:a6:d8:45:24:ce:d5:0c:ad:5f:2e:
38:f1:73:b0:49:46:8c:f5:d0:1d:b8:8f:f1:b7:c3:
6d:d0:5b:79:a8:7a:05:d3:68:e9:ba:4e:ad:56:dd:
4c:6e:9a:2c:52:bb:9d:b0:dc:c6:08:63:01:14:e2:
f9:97:e6:1e:c4:6b:29:10:58:95:35:ee:0f:c8:70:
b4:b7:d1:64:fc:b7:4a:f4:28:3a:18:23:2e:a1:de:
98:7d:6b:9e:e9:6b:91:f7:ba:3a:30:5b:39:5f:2c:
bb:66:c4:91:0b:fa:ff:a9:3e:bc:4e:20:5e:cd:b4:
c0:6c:b0:5c:9f:0b:41:87:04:42:32:a4:9a:14:79:
9b:34:3a:72:28:66:68:1d:85:cb:8b:f4:14:78:08:
40:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:75:B5:C5:BB:DD:FD:54:AF:C1:A5:1D:F7:16:F8:D5:B6:6E:75:FE
X509v3 Authority Key Identifier:
keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5b:92:53:ef:7f:47:6d:b3:82:fc:4c:0f:80:47:1f:dd:ec:
cd:f7:0c:f6:7e:23:72:b9:45:9f:e4:4a:6e:de:fa:93:29:f0:
d0:54:55:1f:6a:f6:bf:4f:9a:ef:10:f7:f4:9e:98:92:d2:76:
68:68:94:c2:54:fb:13:8f:4f:79:11:2e:ca:ce:f0:ed:9c:8a:
bb:73:af:ac:77:3c:7a:b9:a0:6e:4f:7d:c2:08:d7:f6:b1:eb:
dd:b5:6f:a9:dc:f0:7c:3e:cc:9c:0a:25:6d:fe:69:32:b6:09:
94:84:d4:56:6b:12:24:4b:07:6e:13:4c:d0:e6:2d:d7:b7:ea:
e1:ef:c0:8d:e3:09:06:6f:38:d4:ff:33:0c:01:40:e2:5e:21:
07:51:80:19:34:46:70:8a:ef:37:37:5b:dd:62:79:9f:33:ff:
bf:c9:9f:e8:18:e1:f9:81:d4:7c:4e:96:61:91:2f:fd:06:78:
bd:67:1a:00:09:fc:89:0a:7f:66:46:df:4b:c9:38:58:41:61:
4c:5f:e7:bd:f7:db:dc:be:ce:41:42:13:5b:0e:18:f5:24:02:
a8:1f:02:09:2f:85:d4:a4:b4:e5:f3:a5:08:b7:33:e7:05:52:
62:b2:82:df:03:84:07:ea:53:ae:da:11:f9:2a:7b:e1:23:5e:
26:73:d7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:41 2025 by rpki-client