Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
File: cIYS6HA6ZgiJyg9FfPG02KDVO00.mft (raw, json)
Hash identifier: O7X1iueR5RS7w8CQ5F7hoIGqgG4cE577qgMwEMxiaHo=
Subject key identifier: 75:3F:BA:AB:93:E2:FC:96:05:65:22:4F:F0:73:3F:7E:D3:8B:1D:31
Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Certificate serial: 019848C0751189609E9516A61116B63A0F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
Manifest number: 0CA5
Signing time: Sat 26 Jul 2025 22:00:29 +0000
Manifest this update: Sat 26 Jul 2025 22:00:29 +0000
Manifest next update: Sun 27 Jul 2025 22:00:29 +0000
Files and hashes: 1: DmXSHAWyzkOoxqiFMJESxxoNQRE.roa (hash: JS4gdknzcsCYuR0k7tQp82qH1Pua7AKi87dIAAaokTc=)
2: G1B5f1Zo9mXXkjO8qvbHOoggkQk.roa (hash: aEmK04Ia5XU5AnX1t6+4/7AVUK1sMbT5CaQWCjlA0q4=)
3: cIYS6HA6ZgiJyg9FfPG02KDVO00.crl (hash: WMTtwqgSDMVGDDLUu/txJV9YB0/nEW+AEhYHn92lVwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:75:11:89:60:9e:95:16:a6:11:16:b6:3a:0f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Validity
Not Before: Jul 26 22:00:29 2025 GMT
Not After : Jul 27 22:00:29 2025 GMT
Subject: CN=753fbaab93e2fc960565224ff0733f7ed38b1d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:1d:16:89:0f:62:46:d5:8b:2e:3e:4c:1a:
99:66:ed:75:67:8b:07:a2:3c:ad:b1:5c:0d:38:61:
03:04:2a:3b:a4:09:f4:2e:de:4a:44:c1:34:5e:bf:
0e:bb:16:dd:59:1c:7c:66:e6:2a:d2:13:69:a3:1f:
43:9f:a6:fd:d9:55:00:63:21:b8:2a:82:ea:b4:c2:
cf:9f:42:ea:3b:5a:36:61:83:46:e5:6f:65:f7:4f:
81:42:f5:1a:68:5e:b5:3f:6d:19:a5:c2:67:29:4a:
39:19:3b:5f:6f:74:a3:76:86:76:87:df:18:1f:fe:
84:57:11:d7:22:d4:dd:f1:c2:4a:c1:c2:bd:8e:c1:
7c:9d:f4:3b:8b:39:00:8c:39:7a:43:65:00:2c:90:
35:fb:92:e7:68:ec:1b:7c:6f:05:c5:40:da:05:8d:
f3:42:d8:c7:33:8a:55:dd:b8:ea:a7:74:32:61:8d:
02:5b:a0:e3:68:a2:30:e4:dd:37:6e:6e:0d:d7:5e:
a8:54:e2:44:f7:d8:9b:a1:8d:72:cb:9a:dc:59:52:
df:89:3d:73:1f:95:3a:35:ed:8f:e7:f9:77:ff:a2:
88:62:ea:92:c2:ff:22:a1:cf:f5:34:d8:41:80:01:
d0:61:27:5b:bf:8c:2a:fe:4c:87:bd:17:ca:a0:23:
75:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3F:BA:AB:93:E2:FC:96:05:65:22:4F:F0:73:3F:7E:D3:8B:1D:31
X509v3 Authority Key Identifier:
keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:dc:8d:0e:43:50:f5:76:9c:29:3a:be:cf:bc:b3:b8:56:c8:
09:d3:58:25:46:66:44:1c:af:0d:e3:47:f3:22:90:e4:a8:15:
32:f9:aa:67:c6:47:00:7c:d8:50:67:31:73:d0:09:c9:ce:7c:
ce:7e:8a:67:90:33:78:ba:3b:ef:ad:13:cb:cd:eb:b1:bb:eb:
c4:14:d6:fc:49:98:5b:70:95:cd:43:11:03:2d:78:64:29:f4:
82:d2:64:7c:04:e8:f4:a1:b6:28:27:b9:f4:84:e0:ca:75:d5:
5a:7c:a9:8e:c9:d6:98:36:78:31:8d:5e:8d:86:3c:0b:30:88:
4c:15:0d:77:87:41:12:7d:57:f0:b3:78:ce:f4:7f:56:bd:06:
fc:aa:ff:07:7b:58:9e:0a:02:ba:c0:98:2f:93:59:18:06:5f:
0a:b2:ae:0a:f2:0c:50:65:46:a8:d8:e9:2a:e1:ef:f6:52:fe:
27:0f:d5:85:31:69:1c:09:38:8a:79:53:66:4b:4c:6d:6b:e6:
d8:08:ec:07:49:10:41:c3:a0:ff:5c:f3:a5:e5:69:a3:24:3c:
fb:e0:72:f4:f9:88:fa:fb:59:5b:d7:9c:30:84:1c:24:91:bb:
40:6b:84:ad:87:1d:39:f8:f1:ee:50:f6:be:7e:42:46:39:21:
a3:5d:27:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:39:43 2025 by rpki-client