Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
File: cspFbK0jiDCzjs1NJnys-lzV8fE.mft (raw, json)
Hash identifier: ss9fNN27pxh5uw3oBJZK/9rVJnJFKVziFaSUa/HB3Gk=
Subject key identifier: 04:04:BF:24:7F:2C:E7:C5:C4:84:EA:CB:EF:51:D9:92:1E:2A:38:1C
Authority key identifier: 72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
Certificate issuer: /CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Certificate serial: 0197B6A04DFC1C5E3E60207BA644F5B7BEE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:00:48 +0000
Manifest this update: Sat 28 Jun 2025 13:00:48 +0000
Manifest next update: Sun 29 Jun 2025 13:00:48 +0000
Files and hashes: 1: 9qsPYE67U8LKJS5RPyzpaJjKAjw.roa (hash: ate2+ga4mYDOeR+5DaCdTzRa6tHIKsrgVcrNBTn+5LQ=)
2: cspFbK0jiDCzjs1NJnys-lzV8fE.crl (hash: LJMCXiD+0KbQkhW0//E5T9PkI3Dg2GqkEqaObCM+sMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:4d:fc:1c:5e:3e:60:20:7b:a6:44:f5:b7:be:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Validity
Not Before: Jun 28 13:00:48 2025 GMT
Not After : Jun 29 13:00:48 2025 GMT
Subject: CN=0404bf247f2ce7c5c484eacbef51d9921e2a381c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:35:ec:f2:70:84:b3:6a:fe:d0:43:07:56:
bd:7f:7c:2f:81:81:28:d9:d3:e4:7e:58:2f:55:0a:
a0:16:6c:7e:3f:89:b1:8b:eb:5b:8b:bd:1e:d2:73:
94:c1:14:fe:2d:73:0d:7a:9d:36:cd:e3:9c:27:61:
3b:2f:83:9b:12:5a:ed:1f:16:86:03:40:f9:fb:5d:
9f:30:cc:68:fc:26:64:76:a4:57:59:04:b7:fa:18:
e1:28:b2:fb:ed:cf:75:79:0a:ca:a7:2a:41:44:76:
e1:eb:ac:0f:ca:80:9d:a7:e1:17:28:46:37:ba:a2:
46:f8:3c:5b:a1:02:3d:70:3d:fa:13:73:c2:50:a9:
51:0b:06:8c:20:7c:d8:bd:77:90:d3:21:3f:2d:88:
70:1c:f7:d2:27:28:5c:bc:a5:14:76:ad:83:01:cb:
01:72:a2:40:fc:77:c5:bc:74:83:e7:9e:b3:c9:ff:
ea:97:a5:95:ca:9b:27:b6:97:8e:5f:54:7c:7d:3f:
4c:da:5a:aa:9f:ae:7a:1c:bd:23:9e:92:0c:06:bc:
82:84:69:f8:4d:10:8b:7d:30:5f:74:82:9b:e1:31:
69:4a:dc:19:b4:1f:0d:8e:92:fb:19:7f:79:0d:90:
41:1b:c1:0a:88:7a:59:07:96:20:7d:1f:7b:3d:d0:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:04:BF:24:7F:2C:E7:C5:C4:84:EA:CB:EF:51:D9:92:1E:2A:38:1C
X509v3 Authority Key Identifier:
keyid:72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:fe:bf:bb:cf:cf:37:a7:0b:e9:a2:61:da:36:76:0f:fa:c5:
45:0b:6c:c1:d9:36:05:06:f7:33:3c:55:5c:f7:b6:1e:79:05:
03:68:e0:74:46:4e:b6:56:fd:2d:6d:3e:9b:e1:e8:62:07:e5:
cc:7e:ec:38:2e:b4:1f:fb:10:64:ee:c6:68:36:0b:1c:56:a8:
ce:ed:f7:e8:b3:97:2f:67:63:88:37:fd:84:96:fb:95:26:c7:
7e:59:b4:22:f3:47:d9:69:b1:99:da:2b:ed:66:f1:af:bd:9b:
31:ad:96:01:35:fb:bf:fe:e4:18:21:1e:34:2e:5d:cc:cf:05:
4d:43:bf:ee:53:96:3a:01:40:c0:77:ec:ef:a9:ea:aa:a5:ee:
9f:f5:36:ca:6f:12:a1:13:51:1b:4a:76:51:5a:12:18:c9:24:
82:a3:fb:70:37:31:cd:1e:a4:45:ed:b1:9b:b9:41:a4:9e:4d:
ad:46:c9:0d:68:0a:8a:fe:36:ea:ce:23:74:92:22:33:e4:6d:
c3:57:00:bd:01:b6:98:18:b1:dc:6b:2a:b2:2b:30:17:b5:66:
52:e2:ab:b9:32:f2:96:84:36:2b:48:48:9a:3b:c6:0c:e2:58:
db:b6:80:5e:20:9d:e2:e2:6a:61:0a:79:68:90:66:30:72:0c:
47:db:e1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:23 2025 by rpki-client