Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
File: cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft (raw, json)
Hash identifier: FdBBd/tSn8v9KS4BwAmCZFiOXa8i2kMHKRSYkescr3w=
Subject key identifier: 83:0C:79:34:1C:88:16:88:92:A6:C9:D3:31:D1:E3:1F:73:7F:B1:A6
Authority key identifier: 70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
Certificate issuer: /CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
Certificate serial: 01974B8D510294EB9CA51B0151DAEFE4D41C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
Manifest number: 11E1
Signing time: Sat 07 Jun 2025 18:00:41 +0000
Manifest this update: Sat 07 Jun 2025 18:00:41 +0000
Manifest next update: Sun 08 Jun 2025 18:00:41 +0000
Files and hashes: 1: UkvE8dqZrzxtAH_b1DZxgqF6vTM.roa (hash: wAlll9K9/ln6lzYhTcmMHQV62ZPi/AvIvfXVgruDZb8=)
2: cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl (hash: n85kIP8RdP1/iVVdIBK4fhLF1qrheT6TlvG/9ysp+wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:51:02:94:eb:9c:a5:1b:01:51:da:ef:e4:d4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
Validity
Not Before: Jun 7 18:00:41 2025 GMT
Not After : Jun 8 18:00:41 2025 GMT
Subject: CN=830c79341c88168892a6c9d331d1e31f737fb1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1c:b1:3d:35:6c:f1:43:8f:a5:7b:8b:0e:e7:
17:6c:f6:5e:f9:0b:42:51:af:74:19:7b:4e:ab:09:
9e:a5:e8:e2:bd:ad:0f:f0:97:ed:b1:f6:0f:e6:22:
d1:ba:80:d9:d5:1d:e9:ab:70:fb:10:bb:60:ca:ab:
3d:e7:ea:6f:17:16:c5:c3:31:bc:47:d1:dd:e5:64:
b1:02:42:a0:fd:87:5b:d0:ec:4c:27:bc:4c:54:45:
07:c0:82:8e:13:c4:db:1b:54:55:b3:64:30:6e:65:
f6:cd:b0:b6:63:15:79:ce:be:e6:e1:62:39:87:d9:
b3:a7:8c:0f:22:6a:2b:44:e1:30:9b:88:8c:78:88:
61:6a:26:c4:bc:48:01:ba:9e:fc:cc:fc:f6:ae:40:
b9:da:cf:ea:1c:fb:8f:1c:e9:29:07:36:93:5d:4e:
b0:d3:7c:0a:2d:a6:7c:04:ba:da:2c:1d:97:3a:7d:
26:74:82:e7:a8:59:0b:aa:ec:1e:d4:6a:97:33:20:
04:88:d5:d2:56:a9:f5:b9:83:75:26:15:34:e5:46:
82:60:fc:d5:c6:d9:e1:02:cf:c1:b4:49:59:8c:18:
32:60:83:1b:cc:0e:0a:db:dd:78:c6:ed:da:d4:c7:
85:6c:8d:00:a1:64:94:f4:eb:3d:53:1c:f8:ed:6c:
a6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0C:79:34:1C:88:16:88:92:A6:C9:D3:31:D1:E3:1F:73:7F:B1:A6
X509v3 Authority Key Identifier:
keyid:70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:82:01:96:ed:57:2a:3d:b1:47:5c:a8:9d:4b:16:bf:10:b3:
86:62:da:c7:8e:4e:7b:08:ef:c4:3e:da:0f:50:ab:a6:d4:6f:
0c:cb:ce:eb:6d:8d:5f:4b:e6:53:8d:54:04:1d:4b:80:4c:e2:
d9:23:5b:2c:74:0c:05:54:d7:e9:62:1d:d7:0e:ab:f1:fa:6f:
f9:85:bd:bf:50:3a:62:99:0d:03:ab:fa:3d:00:8a:5c:cd:d8:
89:89:f2:52:00:f5:13:e8:74:1e:92:18:e6:52:82:ea:55:0d:
0b:14:62:50:db:03:20:61:1e:fc:c0:a7:d7:16:e5:f1:e1:d8:
02:1e:60:e6:df:e5:ba:5c:96:b4:41:6d:1b:4f:7b:25:99:b9:
a0:0b:45:4a:62:83:ce:b5:90:9a:a0:85:96:37:66:f0:03:86:
73:92:be:2c:25:a8:c4:96:9c:bd:b0:c4:c9:2f:67:91:49:84:
98:01:45:94:f7:0d:84:e7:1a:e7:bc:6a:04:31:9c:5b:23:26:
fd:56:7f:e2:ba:e4:c3:9e:80:8d:ef:07:55:9d:1f:9c:06:f2:
4c:be:04:5c:3d:d1:47:57:80:00:2f:ab:c1:7f:22:23:f2:84:
62:32:d9:0b:e2:46:3b:a9:4f:f8:cf:cd:b3:87:01:8d:06:5b:
53:ed:b2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:36 2025 by rpki-client