Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
File: cpsz3mBR0E119rsfflOx79ZkYhE.mft (raw, json)
Hash identifier: lpdeKG+/yauBd0QkZmGaI1TFKur5mv36mgL4vpvKyME=
Subject key identifier: D8:FB:0E:4C:D2:8C:F3:29:99:10:C5:A6:32:09:75:D5:A4:E5:7C:8C
Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
Certificate issuer: /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Certificate serial: 0198D583CEB6518E0C2E2DD2DFB72A162391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 06:00:41 +0000
Manifest this update: Sat 23 Aug 2025 06:00:41 +0000
Manifest next update: Sun 24 Aug 2025 06:00:41 +0000
Files and hashes: 1: RZxjFWlo2i2aJOHKRic4Fv-bX9o.roa (hash: gz7c2rZX9EEeMlQK8oZvhSguZMORv69xoCYnqP22C6w=)
2: cpsz3mBR0E119rsfflOx79ZkYhE.crl (hash: ApGnju3WoCOlmEE7odTwxcDiKfF4Er3INGlRjDnbQy4=)
3: ecPozDTBiwtPhHsED0tZv93AzPY.roa (hash: VAqfrUatc4XqZvYROBfJJkH7/EgI7JEtqS/gigZEo5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ce:b6:51:8e:0c:2e:2d:d2:df:b7:2a:16:23:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Validity
Not Before: Aug 23 06:00:41 2025 GMT
Not After : Aug 24 06:00:41 2025 GMT
Subject: CN=d8fb0e4cd28cf3299910c5a6320975d5a4e57c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:22:d2:b2:4e:68:52:40:12:df:20:c0:ea:ae:
40:34:85:b9:6e:24:15:d0:da:71:ab:c4:b5:74:4b:
a3:c2:97:38:e5:59:74:03:4b:71:dc:88:12:8d:fc:
e9:74:61:35:eb:4d:a1:b4:18:9a:24:35:dc:c7:6f:
c4:24:ad:ef:99:84:46:fa:eb:de:a2:df:8f:8a:c1:
bb:e0:d4:60:bb:7d:ea:f8:26:4a:4c:95:e4:92:b9:
e3:2e:7c:67:86:dc:89:92:af:cc:89:29:6f:88:e7:
24:8b:0f:95:f5:bb:80:45:97:5a:b1:b3:dc:5f:d3:
ac:2c:6e:59:9c:18:d1:ff:51:7d:f7:86:ae:bb:41:
21:b0:03:9f:da:70:49:b7:df:02:74:d7:68:39:6f:
ba:75:71:69:75:70:59:28:37:44:73:41:08:c9:eb:
a4:83:2e:57:2a:11:42:6a:3d:f7:3e:e7:6a:83:cc:
3e:6e:a6:19:e0:ea:6f:65:12:5e:4a:05:ea:46:3c:
a7:3a:ce:08:c4:a5:0e:da:55:21:d6:fd:52:b2:90:
34:c4:c2:ea:d1:3c:a9:f2:cf:16:6a:d2:7a:8b:0a:
49:3b:80:5b:e4:cf:f3:fb:67:52:68:5c:0d:f9:ac:
fd:61:58:40:12:df:b7:c4:61:cb:f8:2a:a3:3e:4e:
e6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FB:0E:4C:D2:8C:F3:29:99:10:C5:A6:32:09:75:D5:A4:E5:7C:8C
X509v3 Authority Key Identifier:
keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b1:d5:36:19:e4:87:ef:3b:81:19:c5:30:90:da:49:d0:b7:
4b:2a:e0:62:33:9f:43:cd:6d:ba:61:a9:0c:10:0a:78:2f:ad:
2d:06:f6:3a:80:0d:e9:9b:b1:19:fa:b2:da:73:93:cc:94:a9:
2e:cb:2a:0a:b5:d3:12:39:d2:02:1c:56:6e:5a:74:bc:50:68:
a8:06:66:27:50:f9:dc:aa:58:fb:d6:19:1b:67:ee:62:51:9d:
89:76:89:7f:d5:46:f1:d3:b5:cc:c5:10:43:05:6c:32:b3:09:
5a:81:69:de:5c:60:34:42:0d:7c:39:b3:8d:25:da:61:af:0c:
c8:ff:86:82:4d:ed:0b:1c:89:fd:29:16:8e:bc:06:fa:ae:34:
3c:10:d5:7e:dd:29:14:3e:b7:9f:17:27:c2:08:95:b3:b7:cd:
76:e6:56:bc:9c:80:99:d8:63:10:df:97:4a:37:ba:61:d6:5c:
15:6b:d6:50:13:f1:be:53:f8:11:53:79:2d:2a:35:ef:e9:8d:
4d:f9:b1:74:44:78:77:59:73:75:d4:cb:37:e8:84:63:b4:dc:
38:cd:25:34:3f:14:82:f8:e9:6b:36:ae:d6:db:9d:b8:c9:7d:
43:94:7c:24:94:e4:58:05:46:1d:a5:9b:c8:cd:b9:48:a2:dd:
88:e4:0f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:16 2025 by rpki-client