Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
File: cpsz3mBR0E119rsfflOx79ZkYhE.mft (raw, json)
Hash identifier: Dea7+/THAv+NrpKnPtY1YGch4pnrTgcuko/7CsXupyU=
Subject key identifier: 3D:C4:F5:B7:22:6F:49:4A:75:F9:A8:EF:57:C8:CB:17:D0:08:CF:33
Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
Certificate issuer: /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Certificate serial: 0197C6EF94A775012D6C3C0281EE6FEF0E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
Manifest number: 15BE
Signing time: Tue 01 Jul 2025 17:01:19 +0000
Manifest this update: Tue 01 Jul 2025 17:01:19 +0000
Manifest next update: Wed 02 Jul 2025 17:01:19 +0000
Files and hashes: 1: RZxjFWlo2i2aJOHKRic4Fv-bX9o.roa (hash: gz7c2rZX9EEeMlQK8oZvhSguZMORv69xoCYnqP22C6w=)
2: cpsz3mBR0E119rsfflOx79ZkYhE.crl (hash: NEzeGB/cBlT+zNwvzVtP185ejjqC3THlO544U+W5tqI=)
3: ecPozDTBiwtPhHsED0tZv93AzPY.roa (hash: VAqfrUatc4XqZvYROBfJJkH7/EgI7JEtqS/gigZEo5A=)
4: yMHEf0ETrnhPf3W6Sut08KAaQSE.roa (hash: hF6DDwZ+vuWyFWfGnEdqPAmnVJOOl0M0tPKA+XL7Y0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:ef:94:a7:75:01:2d:6c:3c:02:81:ee:6f:ef:0e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Validity
Not Before: Jul 1 17:01:19 2025 GMT
Not After : Jul 2 17:01:19 2025 GMT
Subject: CN=3dc4f5b7226f494a75f9a8ef57c8cb17d008cf33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:48:be:34:48:68:3b:9b:27:a0:b5:02:7f:74:
c9:47:07:ef:fd:42:2b:3b:4b:6a:a0:d8:db:7b:1c:
63:38:57:6d:c3:6f:47:fe:5c:4d:9b:7c:6e:af:ad:
d2:e5:6d:a4:c0:07:46:8f:6f:c1:43:53:fc:5b:5a:
01:ce:ee:4e:20:3a:5a:e0:b7:54:fc:31:13:55:21:
f1:64:be:45:73:83:dc:fb:a2:ed:17:cb:fb:04:00:
22:f2:bf:22:a0:61:6a:a4:30:09:d9:a5:fa:5a:e8:
6a:35:f7:00:b0:f7:6b:38:84:3b:af:ed:35:3d:02:
69:bf:a5:6c:cb:b3:01:af:85:02:b0:59:35:c8:fa:
c7:5f:04:b1:c1:20:c8:71:b0:dc:33:07:f0:a7:af:
f6:50:8f:32:e3:41:c9:9e:23:3f:34:9b:66:0f:e6:
87:7b:c4:a1:ae:65:a4:73:46:51:b7:44:fa:e3:de:
a9:3f:83:25:51:a4:d4:52:a2:7f:02:b2:63:e6:db:
0d:22:ae:11:96:3d:b3:fa:ad:aa:e1:01:42:e6:dc:
de:b0:a6:62:b5:ce:0b:6a:51:97:7a:aa:15:d8:b2:
f7:52:99:05:cf:5c:84:c9:44:8d:99:7c:4e:dc:db:
40:87:1f:94:cb:16:20:6d:31:57:7d:c1:75:71:c7:
1c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C4:F5:B7:22:6F:49:4A:75:F9:A8:EF:57:C8:CB:17:D0:08:CF:33
X509v3 Authority Key Identifier:
keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ba:70:97:0a:cc:12:85:05:b6:0a:22:0f:fc:47:3e:1f:b7:
3d:14:1f:95:d6:33:ad:f6:e0:e6:5e:2a:cf:4a:2b:99:44:85:
64:ff:36:aa:37:32:fd:6b:6b:57:21:c9:8d:0b:5e:71:e8:b7:
94:49:01:4e:c8:c9:af:f1:fc:39:cb:84:ba:0c:94:b1:38:3a:
53:7f:38:7d:f7:45:95:12:35:75:0f:dd:91:f9:20:a8:0b:dd:
6a:8b:86:5a:a3:63:c7:6a:04:58:d1:72:4e:3e:52:10:21:3b:
bd:99:19:97:a4:79:6c:25:db:09:37:5f:aa:80:5f:c0:6c:4e:
dc:d2:cc:07:02:24:5c:04:f1:43:8a:e6:a7:38:34:23:9a:72:
cd:33:67:51:05:69:7e:29:04:bd:fa:ea:d8:7d:08:d8:2c:0f:
08:b4:9a:4d:be:6b:fa:a0:e4:47:8d:4a:c6:36:dc:88:4b:6c:
b8:09:f4:f4:ec:33:01:14:a7:a0:38:67:51:9d:d5:a7:d8:4d:
ec:cb:df:c1:dd:4d:3d:79:78:5a:8c:78:f6:3e:41:67:9d:82:
a1:c6:b7:5f:aa:58:26:52:98:2e:2e:eb:9d:f1:57:ae:78:eb:
85:ff:bb:a4:70:80:f8:fa:e7:90:ba:0c:d2:00:36:53:75:11:
a3:4f:d9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:40:31 2025 by rpki-client