Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
File: cspFbK0jiDCzjs1NJnys-lzV8fE.mft (raw, json)
Hash identifier: evWLBaeyzE3I7SrrLPn8LeTbPN47XapVTJTkVwEJdDU=
Subject key identifier: 27:51:A6:5C:30:93:D9:6A:EF:04:E8:FA:84:B1:BD:8D:CD:95:93:C2
Authority key identifier: 72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
Certificate issuer: /CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Certificate serial: 0198D65F72CA5C536B88FDA582A907154130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:00:36 +0000
Manifest this update: Sat 23 Aug 2025 10:00:36 +0000
Manifest next update: Sun 24 Aug 2025 10:00:36 +0000
Files and hashes: 1: 9qsPYE67U8LKJS5RPyzpaJjKAjw.roa (hash: ate2+ga4mYDOeR+5DaCdTzRa6tHIKsrgVcrNBTn+5LQ=)
2: cspFbK0jiDCzjs1NJnys-lzV8fE.crl (hash: S3LbtVTogfcZil/v6ayCw8rzVdDKxk3ukdgK3RZ9HzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:72:ca:5c:53:6b:88:fd:a5:82:a9:07:15:41:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Validity
Not Before: Aug 23 10:00:36 2025 GMT
Not After : Aug 24 10:00:36 2025 GMT
Subject: CN=2751a65c3093d96aef04e8fa84b1bd8dcd9593c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:26:c3:07:ac:72:36:c7:d8:a8:ca:6b:03:cb:
8f:33:86:b8:85:8c:10:c7:dd:98:ff:28:98:7e:72:
60:61:e3:a1:59:4b:63:44:7e:bc:b9:93:50:e0:9c:
ec:f3:e8:f8:41:f2:d5:d8:8e:3e:bb:94:4e:6f:19:
5a:0c:bf:88:4d:bc:a2:2e:25:a2:e0:53:e2:e3:98:
55:b6:b9:31:76:36:ca:fb:df:d0:dc:aa:59:da:9b:
a0:39:37:61:98:1b:11:25:24:8f:90:e4:00:e2:92:
e7:2b:7b:9f:9d:55:5c:dc:22:dd:13:10:6e:d3:ef:
42:ab:a0:db:1e:de:fc:84:2f:7d:32:c5:bd:c8:b3:
41:a7:a4:1f:22:20:80:79:b0:05:4b:7f:e3:69:b9:
fa:a0:1c:06:51:0b:e4:a5:8e:d5:88:6a:55:08:bf:
e7:7e:eb:eb:b4:09:ab:5a:3c:f2:d8:f2:c6:e4:f8:
91:a9:fa:22:cd:99:97:cc:7b:b5:42:ae:03:6d:c3:
03:dd:6e:9c:bf:2a:2f:fe:d7:04:11:97:46:b3:be:
64:44:62:00:e6:37:10:41:76:b1:3e:ad:f9:78:12:
17:64:78:82:05:af:59:f7:da:3b:26:9c:e1:fb:8c:
33:db:2e:e3:ab:df:03:1c:07:ad:d8:68:c0:fc:7a:
16:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:51:A6:5C:30:93:D9:6A:EF:04:E8:FA:84:B1:BD:8D:CD:95:93:C2
X509v3 Authority Key Identifier:
keyid:72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a5:b2:79:b6:0c:97:6e:a6:08:0e:99:54:49:88:ed:de:c7:
05:39:f6:4e:66:94:70:b6:e9:43:41:c3:c2:30:c9:c2:23:b3:
4e:c2:4b:53:2d:1f:a0:fc:0c:cb:0a:ff:60:b7:40:9c:4d:c3:
34:53:2e:d7:f3:14:75:39:8f:ca:38:22:42:a7:c8:dd:a8:40:
3e:a3:14:ee:a1:81:67:03:29:c0:2f:7f:56:e0:23:5f:ff:28:
f4:6e:d8:db:50:68:7b:c3:2b:2c:c5:9e:05:74:75:4a:85:31:
e7:2a:68:88:24:24:94:7b:7c:3c:11:19:a5:d4:47:6f:9f:1a:
13:81:2e:9d:38:bf:9d:c5:cd:0b:b9:6e:e5:5d:08:e4:b0:48:
8f:e5:45:72:c8:f0:2c:ef:39:52:4a:50:31:05:04:a2:f4:e2:
fc:02:27:30:29:98:09:d6:cd:bf:8c:5b:ce:c8:5d:23:31:12:
95:c6:e9:6d:39:e3:51:57:36:d8:83:42:90:06:49:c6:b0:b6:
8c:52:5e:e6:58:09:c0:65:42:df:39:cc:bc:94:7c:b3:8c:65:
c0:fa:4b:39:b0:26:ea:ca:55:b6:2b:ec:c1:13:e7:e0:b1:06:
da:4f:a6:e9:25:c4:92:19:81:d2:30:fb:14:69:1a:fe:14:a8:
9b:8f:98:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:53:26 2025 by rpki-client