Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
File: csZGC0-x70a8dFf_DPRjvcTgP6k.mft (raw, json)
Hash identifier: eSWW5NxvlLWhbFzh56/mY/w5yT5+A1sBvbCknOvso/o=
Subject key identifier: FA:1F:1D:C7:8F:F7:14:64:A2:0D:DB:5B:A3:65:4F:30:2A:DB:BB:6F
Authority key identifier: 72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
Certificate issuer: /CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Certificate serial: 0197B6A0F909BB113C794F798825492419DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
Manifest number: 0922
Signing time: Sat 28 Jun 2025 13:01:32 +0000
Manifest this update: Sat 28 Jun 2025 13:01:32 +0000
Manifest next update: Sun 29 Jun 2025 13:01:32 +0000
Files and hashes: 1: 8FajeVqA6rp1U8VNJu9yQBP6r54.roa (hash: UxuQ4k50fW+4+o9lGY7FVNHYu3QDBc/d+VkzXgLQ8PU=)
2: HHgODZNYaWmnAzu5Y5NNc-vPrnI.roa (hash: 7yz6aWHri/zQdagup6M2sNC0XfiDvGTcFvrpM1dBPtk=)
3: LTAgEPcIg7XQBzK3Cj9I5PVLMk0.roa (hash: eGy7JgSFjwLiCaGzQfjzKTQz7d3s5HQiA3TVI/81xK0=)
4: csZGC0-x70a8dFf_DPRjvcTgP6k.crl (hash: 4g5D49KtqHNLBmMX3AJSN99qyFYt/QYq+0hxBntdkpQ=)
5: ho0kqJfEMlf2sbVibqdADBrNulw.roa (hash: 5FbaBKa2Ni/RgBsUj459P0dwR0J+n0l8NmhVw0Fcivw=)
6: knF6nEQYYWVpL3rBGNBc8_KXbEw.roa (hash: mTLWLsXkA+rHwy07iVSYRIKt6HL9jKzw2c+wO1sgCtg=)
7: spZ3gq52Rs1Brqgro5g4rfptHLc.roa (hash: JmluqSt/yaPZfKeNSsXMXym5ysVFHQT+kOW0mDU1DxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f9:09:bb:11:3c:79:4f:79:88:25:49:24:19:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Validity
Not Before: Jun 28 13:01:32 2025 GMT
Not After : Jun 29 13:01:32 2025 GMT
Subject: CN=fa1f1dc78ff71464a20ddb5ba3654f302adbbb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:14:c5:90:0b:af:a2:69:92:0e:73:76:c1:
2a:2e:79:d4:c0:ee:a0:05:bd:bb:28:9b:6d:d5:40:
e0:6e:60:6f:d0:1c:96:3d:20:84:46:39:ad:b4:7e:
42:8b:cd:c9:f0:1c:cd:f0:4f:82:98:22:8c:c2:f9:
b1:c9:d6:6a:26:4d:f0:3b:94:5c:90:9d:2b:15:04:
72:f0:7e:25:e8:af:ba:46:ba:b9:f8:9d:1f:1d:b5:
80:19:52:a8:56:a1:d4:bf:4c:09:d2:de:86:1c:71:
cb:38:88:5b:0b:88:bb:0b:8a:b8:a4:c9:b7:64:2e:
32:e0:b9:13:f7:cb:b3:6b:4c:29:2b:5a:54:98:63:
62:cf:e1:8b:cc:88:69:67:c9:2d:5f:e9:72:b8:18:
f4:a5:6e:5a:0f:1e:14:e4:05:a2:b6:66:e5:fd:fd:
ce:57:5a:f3:59:67:4e:5d:c6:bf:3e:74:d3:5d:d2:
cc:7d:dd:1b:cc:c0:59:98:9a:3c:c8:15:d3:1d:2c:
a1:9b:80:27:cf:31:6b:79:b5:cb:d1:b4:9f:29:d2:
85:3e:3e:a0:7e:f4:ff:7e:84:dc:ec:c3:fb:31:cb:
53:40:17:51:41:dd:62:03:b8:b1:f9:91:1e:3b:c8:
9b:6d:98:b7:ca:46:cc:2f:d4:88:ff:0c:b7:4c:e8:
61:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1F:1D:C7:8F:F7:14:64:A2:0D:DB:5B:A3:65:4F:30:2A:DB:BB:6F
X509v3 Authority Key Identifier:
keyid:72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5c:62:c7:b5:75:27:3e:bc:d4:47:f7:fe:20:4b:55:95:4b:
a3:a6:ed:34:b8:56:64:55:29:5d:ae:2b:72:b0:6b:35:81:f1:
26:66:ca:f2:ba:fc:f3:85:3b:17:9c:8b:64:0e:a4:d9:f3:e0:
be:7e:f1:6b:bf:bf:b1:af:72:5d:16:a6:3d:50:bb:35:4d:c9:
44:17:9e:d0:d6:73:44:e1:c5:f4:8c:51:8d:14:1d:9a:18:fd:
47:80:5e:e4:31:f2:ce:51:c5:a4:86:14:17:b3:56:b7:f5:7f:
8e:c8:23:c3:ad:e6:2a:8a:75:34:50:4a:dd:bf:85:9e:51:20:
c9:ab:f9:65:3b:1d:75:6c:d5:8f:d4:d9:13:29:91:76:1a:e5:
fc:8d:6c:0f:b1:85:18:31:ce:e7:33:1c:8b:3e:ab:e7:9a:19:
9c:49:5b:92:27:f3:cd:74:10:71:ae:d1:5b:05:4b:c2:d7:72:
44:69:c2:8f:fe:03:e3:8e:e8:de:67:bc:86:b6:fc:c5:18:ae:
44:88:72:7f:0a:74:73:6a:3f:06:ef:1b:b4:e8:33:6f:63:f0:
b6:38:40:d4:26:92:b2:4b:80:24:7d:14:01:49:34:a5:9e:eb:
16:81:69:a6:c8:ff:f3:42:8e:72:6c:fd:90:35:dd:74:7c:fe:
5b:7a:a3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:30 2025 by rpki-client