Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
File: CI4DIScTMq_HfkyFefDlVZzAnFA.mft (raw, json)
Hash identifier: 8HohtNvGw2Q4DySNEayZgP+vGTJG1TpQT49y+nHRUIc=
Subject key identifier: FF:BE:83:16:83:03:CC:DC:C1:CE:B1:82:35:89:B1:10:44:F0:72:D1
Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
Certificate issuer: /CN=088e0321271332afc77e4c8579f0e5559cc09c50
Certificate serial: 01974B8DBB79A9B4551AAD88B8CE41630C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
Manifest number: 1243
Signing time: Sat 07 Jun 2025 18:01:09 +0000
Manifest this update: Sat 07 Jun 2025 18:01:09 +0000
Manifest next update: Sun 08 Jun 2025 18:01:09 +0000
Files and hashes: 1: CI4DIScTMq_HfkyFefDlVZzAnFA.crl (hash: 3bb+UsZtxblcq19tFqRdmn2OHXapkP6Q650GMWNs82k=)
2: K7_rFk-ex3hFwh3MJxaQxyN-Xpk.roa (hash: +E0IiIySxfBfIZxXi+3jzbpb+rQYgtEbnhfMPIDheqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:bb:79:a9:b4:55:1a:ad:88:b8:ce:41:63:0c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50
Validity
Not Before: Jun 7 18:01:09 2025 GMT
Not After : Jun 8 18:01:09 2025 GMT
Subject: CN=ffbe83168303ccdcc1ceb1823589b11044f072d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:94:7c:db:5a:2a:8b:1e:8c:d2:2b:74:56:9f:
ed:bc:9b:1b:b1:b0:f3:d3:e8:79:3f:50:e1:e2:82:
d3:38:a8:03:74:fd:2a:2e:94:4f:87:34:fd:d3:28:
f7:df:50:c9:b4:7f:44:d3:34:dd:e5:aa:a7:26:78:
9e:90:e8:e4:5a:97:31:8f:f4:5a:8f:66:d4:72:d8:
b3:a0:a8:62:92:d3:2b:39:15:d9:d7:a6:6c:99:03:
41:eb:18:35:ad:52:bb:fb:2d:a0:6a:eb:06:58:d8:
0e:cd:ea:dd:db:ca:2b:80:7c:66:57:b4:8b:cd:b4:
66:cf:81:3a:5b:b5:2e:92:e7:45:68:ca:01:db:3d:
40:1d:db:5b:29:45:8c:1e:f9:d6:b8:fd:dd:c2:f7:
1c:23:d2:f9:16:07:7e:51:a0:c2:05:f6:71:01:4c:
f1:3e:5e:2c:1f:f7:8e:ba:48:30:45:8a:ac:8b:cb:
ea:4f:c6:ea:38:b6:f7:bb:64:de:d3:83:b0:62:ce:
d2:21:a9:85:35:30:f2:f8:3b:76:91:a2:9c:de:00:
28:25:86:2b:f5:b8:16:70:2f:83:3d:5d:b7:e1:6e:
81:47:4a:4d:20:4b:3d:51:98:c2:a3:b5:29:12:86:
c0:af:34:d4:95:b4:9a:01:86:05:26:78:70:6e:9e:
cf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BE:83:16:83:03:CC:DC:C1:CE:B1:82:35:89:B1:10:44:F0:72:D1
X509v3 Authority Key Identifier:
keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d8:29:0e:f0:b5:f2:69:ae:3a:a6:09:f1:53:91:ae:a3:53:
2d:8b:3b:71:78:e0:2c:81:4f:06:ac:e8:5f:d8:63:c7:56:e1:
80:7d:bc:51:aa:f2:6f:77:c3:27:6a:ef:0a:e6:f0:70:4f:12:
0d:bd:c4:45:75:51:db:b4:fb:af:d7:a9:0d:5a:f1:6a:cb:14:
e5:0d:b0:e0:d3:f6:35:12:6b:28:7b:68:74:35:56:e4:38:d8:
8c:51:b4:5e:b4:db:a2:06:5f:51:82:68:a3:ad:75:c8:64:2f:
9b:6c:56:a8:bd:47:a8:62:b5:48:26:53:32:28:de:8a:00:bd:
16:1e:0e:a8:fc:d6:4f:f4:82:fa:4e:56:db:07:67:07:8f:57:
69:fe:f8:71:83:76:58:24:9a:3d:21:4f:eb:bd:53:b6:52:2c:
bd:16:08:36:1b:86:34:20:6a:74:97:6d:4a:24:d3:0f:11:8a:
f1:dd:f4:b1:2b:45:8e:5b:62:4f:30:e8:ba:8d:b4:ff:f6:8a:
9c:73:53:4e:46:06:6d:b1:0d:5e:7d:90:0b:22:18:25:af:8e:
44:f6:89:f0:5a:30:c5:bd:6e:76:0c:7b:f5:cc:57:e1:64:11:
3e:42:4e:0f:bc:cb:1a:f5:e3:9d:eb:35:1f:28:3f:a8:ad:df:
b7:06:98:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjbt5qbRVGq2IuM5BYwwgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OGUwMzIxMjcxMzMyYWZjNzdlNGM4NTc5ZjBlNTU1OWNj
MDljNTAwHhcNMjUwNjA3MTgwMTA5WhcNMjUwNjA4MTgwMTA5WjAzMTEwLwYDVQQD
EyhmZmJlODMxNjgzMDNjY2RjYzFjZWIxODIzNTg5YjExMDQ0ZjA3MmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZR821oqix6M0it0Vp/tvJsbsbDz
0+h5P1Dh4oLTOKgDdP0qLpRPhzT90yj331DJtH9E0zTd5aqnJniekOjkWpcxj/Ra
j2bUctizoKhiktMrORXZ16ZsmQNB6xg1rVK7+y2gausGWNgOzerd28orgHxmV7SL
zbRmz4E6W7UukudFaMoB2z1AHdtbKUWMHvnWuP3dwvccI9L5Fgd+UaDCBfZxAUzx
Pl4sH/eOukgwRYqsi8vqT8bqOLb3u2Te04OwYs7SIamFNTDy+Dt2kaKc3gAoJYYr
9bgWcC+DPV234W6BR0pNIEs9UZjCo7UpEobArzTUlbSaAYYFJnhwbp7PswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP++gxaDA8zcwc6xgjWJsRBE8HLRMB8GA1UdIwQY
MBaAFAiOAyEnEzKvx35MhXnw5VWcwJxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hMmE1MmMtMTM2YS00M2E4LTk2N2Mt
ZjZkOTY2Y2E0ZjA3LzEvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9hMmE1MmMtMTM2YS00M2E4LTk2N2MtZjZkOTY2Y2E0ZjA3
LzEvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUtgpDvC1
8mmuOqYJ8VORrqNTLYs7cXjgLIFPBqzoX9hjx1bhgH28Uaryb3fDJ2rvCubwcE8S
Db3ERXVR27T7r9epDVrxassU5Q2w4NP2NRJrKHtodDVW5DjYjFG0XrTbogZfUYJo
o611yGQvm2xWqL1HqGK1SCZTMijeigC9Fh4OqPzWT/SC+k5W2wdnB49Xaf74cYN2
WCSaPSFP671TtlIsvRYINhuGNCBqdJdtSiTTDxGK8d30sStFjltiTzDouo20//aK
nHNTTkYGbbENXn2QCyIYJa+ORPaJ8Fowxb1udgx79cxX4WQRPkJOD7zLGvXjnes1
Hyg/qK3ftwaYVg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:55:42 2025 by rpki-client