Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
File: csZGC0-x70a8dFf_DPRjvcTgP6k.mft (raw, json)
Hash identifier: T27c4RHqAxsXs3xcAyJY51IvZg6/fkasPz0rOk3JDlA=
Subject key identifier: CD:69:59:34:BF:54:1C:D3:C9:7B:13:B7:95:E2:4C:FA:EB:CD:39:5A
Authority key identifier: 72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
Certificate issuer: /CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Certificate serial: 0198D6606E9CF9D9B16E3465A93D823B312F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
Manifest number: 09B7
Signing time: Sat 23 Aug 2025 10:01:40 +0000
Manifest this update: Sat 23 Aug 2025 10:01:40 +0000
Manifest next update: Sun 24 Aug 2025 10:01:40 +0000
Files and hashes: 1: 8FajeVqA6rp1U8VNJu9yQBP6r54.roa (hash: UxuQ4k50fW+4+o9lGY7FVNHYu3QDBc/d+VkzXgLQ8PU=)
2: HHgODZNYaWmnAzu5Y5NNc-vPrnI.roa (hash: 7yz6aWHri/zQdagup6M2sNC0XfiDvGTcFvrpM1dBPtk=)
3: LTAgEPcIg7XQBzK3Cj9I5PVLMk0.roa (hash: eGy7JgSFjwLiCaGzQfjzKTQz7d3s5HQiA3TVI/81xK0=)
4: csZGC0-x70a8dFf_DPRjvcTgP6k.crl (hash: EkgdtSZoZ8XE/qAOI/10IHnUESRfq7DY/hmqgxFy5h0=)
5: ho0kqJfEMlf2sbVibqdADBrNulw.roa (hash: 5FbaBKa2Ni/RgBsUj459P0dwR0J+n0l8NmhVw0Fcivw=)
6: knF6nEQYYWVpL3rBGNBc8_KXbEw.roa (hash: mTLWLsXkA+rHwy07iVSYRIKt6HL9jKzw2c+wO1sgCtg=)
7: spZ3gq52Rs1Brqgro5g4rfptHLc.roa (hash: JmluqSt/yaPZfKeNSsXMXym5ysVFHQT+kOW0mDU1DxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:6e:9c:f9:d9:b1:6e:34:65:a9:3d:82:3b:31:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Validity
Not Before: Aug 23 10:01:40 2025 GMT
Not After : Aug 24 10:01:40 2025 GMT
Subject: CN=cd695934bf541cd3c97b13b795e24cfaebcd395a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1c:04:38:50:7a:3a:bd:f2:26:d3:3b:59:ce:
47:9a:3c:8b:c9:a0:54:66:7d:c2:3b:60:74:3a:d2:
44:64:4e:57:06:d4:5c:8f:8a:62:f9:26:1b:59:2a:
35:cd:7d:8a:36:4e:9b:2b:9a:15:45:b3:0c:65:58:
96:d9:08:a0:79:a7:eb:d6:8c:5a:c4:c1:70:7f:e0:
65:23:31:73:c9:d0:b0:4f:14:a0:d0:ce:76:90:e2:
c7:c8:33:c5:b4:ad:a3:43:ab:86:a4:c5:58:11:ed:
2e:7d:cf:a3:b3:08:ac:65:23:2a:20:65:fe:de:96:
c3:d3:9e:1e:81:ca:15:ae:f3:b0:d8:41:13:82:9a:
40:26:fa:9c:6f:67:dc:11:98:30:83:b9:a2:1f:4f:
28:35:a9:58:3a:a1:b8:d6:c7:a6:b6:d3:1b:33:33:
8c:b4:f0:ee:bc:9e:71:3c:86:9e:98:72:de:1b:d6:
bb:0b:85:64:99:ea:d4:5b:99:76:6b:7f:45:e2:e8:
9a:af:31:83:c6:23:49:91:26:33:f7:30:60:b7:de:
03:c1:9e:15:81:d2:fc:be:99:a4:6d:56:21:5b:12:
28:71:42:92:17:b7:db:6e:4f:72:13:34:ae:3c:c6:
19:7a:76:c0:f5:6d:49:ba:32:2f:3e:62:3b:6d:65:
d2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:69:59:34:BF:54:1C:D3:C9:7B:13:B7:95:E2:4C:FA:EB:CD:39:5A
X509v3 Authority Key Identifier:
keyid:72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:56:02:b8:78:48:a0:bc:59:2b:f4:c4:0d:86:11:e9:f2:9c:
e6:ce:80:70:dd:0d:6d:1f:0d:3b:12:8c:9e:94:3a:5a:dc:03:
3a:61:db:52:94:d0:d3:ef:8c:88:d8:4e:4d:53:f8:ff:f1:bf:
1c:36:d2:8c:57:68:4c:19:77:69:73:15:27:3e:61:44:40:01:
30:59:e6:a7:b5:21:25:57:ad:8a:b2:be:8f:22:e2:88:a5:5f:
ab:34:d1:bf:75:a4:c0:22:98:b4:5e:f9:56:ad:13:39:15:33:
20:d8:19:02:40:ab:06:50:3a:cf:27:e2:8c:4e:ee:bc:e3:26:
fe:6a:80:cb:3e:02:3b:b1:d4:e6:69:3e:46:dd:e7:10:40:da:
68:aa:44:1d:e7:cc:d0:43:25:5d:96:29:19:0c:c4:72:58:ee:
91:12:1f:dd:da:3a:cf:0c:49:07:20:ec:35:02:c1:32:01:f0:
66:07:b1:29:28:18:9d:0a:fa:87:9c:13:e6:fe:23:49:09:d4:
98:fb:4d:b6:44:0f:ec:20:d6:8f:c2:f5:1e:c6:9d:7f:50:1a:
e8:12:f6:c3:a7:72:4e:89:f3:19:35:d3:df:26:8f:68:42:2d:
23:52:1e:e5:20:b4:58:4c:37:a9:98:d0:56:5f:3e:9a:b3:13:
a7:b0:1c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:27:24 2025 by rpki-client