Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
File: cSyZzDOPaS2o-Btxa6150cnXyCA.mft (raw, json)
Hash identifier: MT7eZOb7vUYREwaWBWhQnGyFn3KyNbdnZsQAeBBT6r0=
Subject key identifier: C4:5A:9E:BF:4C:FF:D2:42:BB:B0:91:ED:70:1C:60:FD:5C:F7:0F:6A
Authority key identifier: 71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
Certificate issuer: /CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Certificate serial: 0199FD341CBACF27CAF75DAC79227A87AFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 16:01:14 +0000
Manifest this update: Sun 19 Oct 2025 16:01:14 +0000
Manifest next update: Mon 20 Oct 2025 16:01:14 +0000
Files and hashes: 1: cSyZzDOPaS2o-Btxa6150cnXyCA.crl (hash: MrnKxXPtT6TM93OkOWyrsttupE05xJj76ane9MnThgM=)
2: lRz2gnfLm7nHaNSGeuPC7z_h668.roa (hash: 8k0N7eTmOOHH9ozZI5M8UWNCcA5B8u1B/kuz2VrrXfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:1c:ba:cf:27:ca:f7:5d:ac:79:22:7a:87:af:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Validity
Not Before: Oct 19 16:01:14 2025 GMT
Not After : Oct 20 16:01:14 2025 GMT
Subject: CN=c45a9ebf4cffd242bbb091ed701c60fd5cf70f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3e:f4:1b:41:3f:2c:a7:55:cd:94:24:ea:10:
c7:b7:d7:0f:34:e3:06:c3:e5:10:37:b0:15:a7:07:
57:f7:16:8c:cc:8d:39:a6:d1:29:3f:92:87:8e:8e:
53:a3:81:5e:2d:0d:c3:65:20:4a:e1:9c:35:ab:93:
7a:cf:bb:a3:df:fd:00:6d:21:99:1f:c9:fe:4e:5b:
0d:ee:42:cf:3c:85:5e:68:be:b6:74:96:91:37:58:
a3:bf:fa:a9:76:92:f0:1f:3d:1e:07:3a:f1:c7:5f:
f5:25:af:4f:f2:c7:de:f4:4b:06:8f:d4:e4:6c:42:
c3:f3:c8:c7:6a:4a:de:63:83:9d:f7:e6:42:fe:de:
d5:81:56:89:7a:aa:5c:98:da:79:79:07:4a:f5:fb:
e0:7c:cf:9c:65:18:48:f0:56:20:11:21:58:e5:55:
af:da:51:48:cf:ab:64:e0:0a:e9:3c:85:00:09:e5:
e1:b6:59:1e:20:aa:42:cd:f4:9e:7b:01:24:4d:85:
19:d4:66:66:9c:21:58:0e:de:50:8c:a6:f2:2c:e4:
7c:13:89:bc:24:cc:40:14:4c:0e:5f:12:2e:2e:6c:
d1:5c:40:45:66:82:7a:ac:33:69:1f:03:11:1f:84:
e2:45:9b:d9:ec:7d:d1:08:3b:0c:73:2d:46:52:4f:
ff:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5A:9E:BF:4C:FF:D2:42:BB:B0:91:ED:70:1C:60:FD:5C:F7:0F:6A
X509v3 Authority Key Identifier:
keyid:71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:42:6b:73:3c:d9:98:73:39:4a:ce:6c:02:80:90:5a:41:0d:
fe:30:9c:ce:f5:08:ae:b6:5c:1e:e2:54:39:f6:9f:73:60:11:
a7:43:1e:c9:3c:92:3d:84:c6:66:23:9f:03:12:af:38:39:5c:
d1:fb:ba:39:c5:14:0d:f3:2e:13:27:f5:69:5d:b1:b6:a2:a9:
10:ea:f4:03:b2:71:67:95:e7:b6:80:02:37:10:3e:02:b1:c6:
d4:62:a0:3b:d0:4c:49:09:ac:cd:07:45:22:19:15:19:f4:3b:
8a:5d:42:c9:31:92:2d:df:65:c2:d3:79:79:ef:1b:d1:c1:8d:
9a:39:f6:ee:11:67:37:52:1c:fd:e0:eb:d7:64:da:c2:74:e9:
56:9c:71:be:a3:1c:88:f3:6f:78:7a:43:29:86:13:72:48:1d:
db:32:e7:9f:7c:f4:65:c4:71:25:96:93:d0:6b:03:f3:ca:bd:
32:e5:75:b6:85:79:0f:8e:28:b4:07:43:24:f6:a5:fc:6d:d0:
1b:5f:9a:d0:c8:5e:fb:0a:91:28:9b:14:60:39:81:ad:ce:db:
d1:bf:eb:ea:22:d0:bf:42:98:9f:ce:07:2f:c7:32:cd:95:f0:
ef:6d:0d:ec:f3:6c:f6:ad:8b:94:bc:03:a6:68:2b:43:2b:cd:
71:43:a1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:08 2025 by rpki-client