Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
File: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft (raw, json)
Hash identifier: 2BDRc4E7pesXRK0cwujgrI+NzsU3MoqQuNtrsCoRols=
Subject key identifier: 86:33:16:A5:B1:9A:3B:74:79:D6:9C:CB:92:DB:2B:DD:5C:93:EB:AD
Authority key identifier: 09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
Certificate issuer: /CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Certificate serial: 0197B5FC20A8244EC0287703E81548DF040C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
Manifest number: 0F
Signing time: Sat 28 Jun 2025 10:01:28 +0000
Manifest this update: Sat 28 Jun 2025 10:01:28 +0000
Manifest next update: Sun 29 Jun 2025 10:01:28 +0000
Files and hashes: 1: 0En_rM3ItFKYLhaLLd8WBZOTlpA.roa (hash: 152maO322NYmeUI+2QBI3Muc080/yMuLJaeicPAME94=)
2: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl (hash: /+ATGPlunauJZHQsxrnydvsOAEQSpUjhwq0qEetndRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:20:a8:24:4e:c0:28:77:03:e8:15:48:df:04:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Validity
Not Before: Jun 28 10:01:28 2025 GMT
Not After : Jun 29 10:01:28 2025 GMT
Subject: CN=863316a5b19a3b7479d69ccb92db2bdd5c93ebad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:4c:68:03:8b:d6:61:42:c9:6d:84:2c:f2:
6a:1e:47:82:65:fd:e1:23:ee:81:ea:4e:a7:65:f5:
9c:40:e3:9f:f2:2e:df:4e:80:89:d0:7d:57:cd:4e:
b5:71:1e:37:0a:5a:5f:e6:ba:f5:5b:2f:51:cf:86:
e7:87:64:b1:81:3c:38:d8:4b:27:d4:60:4e:c5:e7:
5a:0d:71:72:f7:51:a6:f8:2e:a8:03:d3:9f:4b:b8:
d0:59:69:a8:ee:c0:88:33:fe:59:f7:1e:15:31:d3:
12:e5:f0:ca:6d:a1:d7:da:44:7b:80:4a:6c:40:74:
97:87:52:33:cd:a9:6c:77:32:9a:21:66:8a:da:74:
b5:ef:18:18:28:0b:47:3f:89:31:8f:11:77:3b:94:
a4:13:d3:75:ce:3a:7b:00:d2:06:47:de:0f:97:15:
29:5a:5f:84:64:86:8e:78:cb:48:e0:27:d4:73:bd:
af:fb:64:5b:7d:4e:c7:b8:6e:96:9e:61:17:6f:7e:
9d:8c:26:68:16:60:a7:2d:bf:7e:7c:e7:b6:ac:b0:
a2:6d:ac:1b:82:d7:35:2b:ad:68:c5:8a:0d:c4:0a:
55:26:fe:e2:45:27:a8:c9:b2:9f:ed:c5:49:46:d3:
6e:86:f4:8c:f3:6d:8d:0b:88:aa:e1:0b:4a:4f:64:
ca:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:33:16:A5:B1:9A:3B:74:79:D6:9C:CB:92:DB:2B:DD:5C:93:EB:AD
X509v3 Authority Key Identifier:
keyid:09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:59:5e:54:53:b4:a1:f3:b9:f7:3e:54:81:28:48:f2:1c:49:
99:a6:fa:9f:4a:50:33:8a:e1:2b:c4:e4:9c:14:b8:22:b6:00:
c9:61:0e:4c:ed:55:6d:5a:30:0d:dc:48:7e:40:19:4f:91:22:
36:84:5d:95:e7:95:1b:d8:ef:3f:60:18:99:cc:75:37:cf:eb:
64:ac:2c:23:be:80:b6:99:3c:42:72:a7:ca:42:13:0a:6a:69:
e2:ab:b8:1c:d9:1d:d0:87:68:76:49:8e:e9:73:e5:6b:56:d0:
a0:c7:42:00:18:f9:76:d4:e2:a7:c7:8e:9e:ad:ba:db:07:10:
e3:04:c3:07:88:54:1b:a7:99:81:6f:70:bc:ef:31:b7:a7:f4:
5d:7d:a1:bc:83:25:ba:ad:a0:a9:0c:42:8f:c2:92:a8:db:38:
c1:5a:25:dd:6e:e6:46:e0:8f:59:c2:b8:e5:5c:e6:85:ef:30:
d9:45:6c:8a:1b:cf:13:91:90:12:b8:5b:b9:ea:b1:23:d5:6c:
d1:5b:9d:34:9e:7d:94:06:c2:33:7c:03:1f:ca:9b:ae:d1:1d:
6d:16:5c:d1:7a:05:bd:33:ee:aa:ee:f5:87:bc:8e:a9:d7:a5:
f3:d9:dd:37:b4:07:20:86:0d:5a:dc:fd:89:3f:38:79:70:a2:
30:f8:33:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:00:48 2025 by rpki-client