Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
File: csoaXP9S6-LyK2adzCyQJ86guBw.mft (raw, json)
Hash identifier: hCj+HtV6NedPrdEbnuQ3sm+va6Srv60a4GZ1b30cJZE=
Subject key identifier: 6F:5C:30:55:C1:87:A9:43:41:8C:39:03:A6:08:61:FF:06:7F:CC:30
Authority key identifier: 72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
Certificate issuer: /CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Certificate serial: 0197B82104BCEA1E7D5058ED57A84FA1833F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
Manifest number: 151D
Signing time: Sat 28 Jun 2025 20:01:00 +0000
Manifest this update: Sat 28 Jun 2025 20:01:00 +0000
Manifest next update: Sun 29 Jun 2025 20:01:00 +0000
Files and hashes: 1: I_-FRfZa9GeQgym8xYKEVr-rfgA.roa (hash: AmRbI2XP8GOvp3frMOHSnlH48LSP6GLhPNS9PY26J8Y=)
2: Uex3x3CWB9WPAXdRNKBIFJzJsn0.roa (hash: 2qFFx/ZZv0i+OiRQdPCciM9T0PW45kAKmFf1AT14lvA=)
3: csoaXP9S6-LyK2adzCyQJ86guBw.crl (hash: X3oYfxDW5AJIuVRtjZPGjIOzFXtGjLRqgNVzH5F5HkE=)
4: rH_6QZmVa4_yNlZ_JVuN0_Vk3Xs.roa (hash: Z/fYNuFHcmnLVDSA1WLLI385MQXDkqW9Tw7vDgNOnAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:04:bc:ea:1e:7d:50:58:ed:57:a8:4f:a1:83:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Validity
Not Before: Jun 28 20:01:00 2025 GMT
Not After : Jun 29 20:01:00 2025 GMT
Subject: CN=6f5c3055c187a943418c3903a60861ff067fcc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a5:5c:38:45:3a:f3:f8:df:73:f5:ba:f6:cf:
26:6b:6a:3b:17:53:de:7a:ed:07:2a:64:77:ad:82:
19:27:a5:eb:69:aa:47:90:8c:b0:15:a5:21:1d:5a:
d0:0f:56:ed:1a:11:c7:c4:33:f5:ef:6c:a4:cf:6f:
52:ff:40:3e:83:b3:19:52:b9:a5:dc:15:a8:e4:02:
16:95:19:f5:e8:cb:02:93:44:63:70:22:8e:f5:74:
3d:db:0a:5a:73:fb:df:4f:66:e9:f1:85:a8:f2:e9:
4e:c1:29:a0:ce:ce:8a:45:85:d1:13:57:82:76:fa:
bc:f9:8e:94:74:b1:c4:5e:52:0c:94:c8:74:19:5e:
f4:75:83:73:73:3e:01:ec:ac:51:ad:2d:f1:a2:27:
82:18:b4:50:c2:3d:f0:2e:a8:85:11:35:8f:77:c2:
4f:72:a8:54:fb:33:99:22:a6:1d:fb:42:d9:d4:83:
98:9a:fa:63:d0:2e:06:cf:4b:a1:c1:a9:a0:20:04:
02:a3:ae:1c:cc:11:02:c7:ab:0f:39:5c:b3:06:14:
20:a9:ea:f4:89:99:cf:0c:15:fe:d3:6b:88:a8:68:
98:43:cb:66:17:7b:65:6b:11:10:bf:cf:59:d1:72:
e5:e5:79:07:14:57:03:e2:57:16:d0:c7:b4:cf:59:
e9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5C:30:55:C1:87:A9:43:41:8C:39:03:A6:08:61:FF:06:7F:CC:30
X509v3 Authority Key Identifier:
keyid:72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:01:0a:5f:ee:b0:41:2e:98:75:11:49:36:5d:f5:46:fa:d4:
b3:c3:a4:95:b5:87:41:4b:b6:7c:dc:65:7f:98:23:77:15:80:
7b:48:88:8e:7c:b5:43:ea:a6:ec:2f:54:81:56:40:08:f0:95:
60:ef:60:80:dd:21:1b:c4:db:1e:a3:3c:f2:60:2a:6c:d7:08:
a1:26:2a:d0:3b:fa:03:ab:58:78:f2:c0:9d:d2:41:65:40:6b:
67:61:4b:ad:8f:1d:7d:ad:a1:de:62:ad:31:fc:2f:e6:a1:c4:
a0:88:b5:61:a6:7f:44:56:80:a6:6c:84:dc:f0:4f:d0:c5:1f:
c1:21:1f:db:c2:60:8a:e6:39:2e:70:60:ac:62:6a:e2:5a:d8:
86:9c:16:e7:c7:c9:16:ee:f5:06:7b:10:c2:66:e2:ae:83:b5:
72:82:53:e5:5b:06:99:7e:37:a1:8e:b1:8d:24:0b:09:c0:2f:
b7:66:99:5a:fe:29:99:eb:43:1e:44:fc:48:23:a0:c2:a9:66:
a7:9d:dc:31:a9:36:41:da:23:d2:0d:9c:ae:da:fe:7e:d6:27:
10:0d:e5:19:eb:50:a7:a7:71:51:b2:cc:48:da:d4:a6:fe:03:
cb:1c:68:1c:2a:b7:53:d0:fb:d5:f5:39:65:6b:8f:a3:1a:38:
79:36:8e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:01:50 2025 by rpki-client