
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
File: CASs5pRvtwG7LEXjCsr-pm2sL3o.mft (raw, json)
Hash identifier: ZcT/2xRnlZSDhfC9BL9p5KofvcioS3ZTkqlQX9aB/ig=
Subject key identifier: 47:07:2C:16:A5:36:8B:98:E9:B3:6A:DA:C0:F2:A5:AD:5F:38:D3:5C
Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
Certificate issuer: /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Certificate serial: 0198447661D5CE6D8F076183BE6DC16C7737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
Manifest number: 06FA
Signing time: Sat 26 Jul 2025 02:01:05 +0000
Manifest this update: Sat 26 Jul 2025 02:01:05 +0000
Manifest next update: Sun 27 Jul 2025 02:01:05 +0000
Files and hashes: 1: CASs5pRvtwG7LEXjCsr-pm2sL3o.crl (hash: vlLeceSbK1QPKpl9x2tW9iQRwPCqJ3yz+KJY67SCQGQ=)
2: CepTD_sRHzQKM1km_XqGFUiFw_A.roa (hash: 6VmSpRvYGLL0kNu4j1w0e4FEukjB/A4DJqf8FlG66dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:76:61:d5:ce:6d:8f:07:61:83:be:6d:c1:6c:77:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Validity
Not Before: Jul 26 02:01:05 2025 GMT
Not After : Jul 27 02:01:05 2025 GMT
Subject: CN=47072c16a5368b98e9b36adac0f2a5ad5f38d35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c5:cd:4a:c5:5d:c6:2c:47:5d:41:1a:b7:14:
dc:b8:5f:e3:a9:36:bb:7d:3f:2a:e8:34:bc:c6:b6:
ac:b0:0a:69:6f:96:25:31:de:0f:12:fb:86:84:54:
9d:c6:97:9b:c8:df:14:e4:f9:b3:10:44:b2:35:10:
4a:38:d2:5a:a8:42:ed:cb:d9:35:7d:d0:f5:38:ae:
c4:75:4d:19:b6:01:54:f8:f7:ee:87:6b:db:e7:fb:
55:24:d0:62:1c:18:8f:b9:83:cc:3a:d6:ad:93:8d:
85:0c:72:10:38:85:d7:22:34:44:d2:35:05:70:6e:
fc:9d:61:dc:0e:10:3f:ca:4c:e2:9c:49:52:96:a0:
1a:e9:7b:1d:77:3e:8b:c7:fd:67:45:b3:1c:83:01:
8d:d4:aa:3f:b0:b4:70:26:04:e0:9e:26:bb:1e:72:
62:e3:12:39:60:bb:87:b0:31:90:a0:fe:2e:f1:96:
d6:f2:86:5f:9a:fa:9c:1e:3c:85:54:e8:bf:e4:d2:
aa:4c:06:47:86:f3:df:78:ee:0b:d8:42:fb:0d:99:
9a:d8:12:91:c9:69:82:ad:24:82:4d:ef:e7:42:75:
3b:b8:92:7c:70:2d:da:bb:1f:b2:dc:ad:88:04:42:
0d:89:4f:20:7c:24:7c:5d:87:b9:a1:cd:e5:d8:83:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:07:2C:16:A5:36:8B:98:E9:B3:6A:DA:C0:F2:A5:AD:5F:38:D3:5C
X509v3 Authority Key Identifier:
keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8d:0e:c7:81:d5:5a:f0:49:1f:53:de:93:2f:ff:9f:f2:03:
a4:ca:dd:15:15:15:df:2f:9b:aa:c6:9f:4e:25:e1:ba:d7:b5:
ca:ae:61:72:a6:b2:24:aa:79:3d:0d:b6:0f:3c:ad:70:3e:6d:
2b:ac:e0:91:e2:29:6e:8b:20:a4:83:54:f9:ec:4d:ab:58:55:
6b:92:45:9e:1e:ba:35:29:cc:a4:eb:65:e4:8d:2b:6e:b9:99:
fe:58:67:3a:a1:39:be:a2:ce:24:92:e8:a9:d6:19:ab:9a:31:
71:ba:93:c5:bb:f8:61:0a:ba:f7:23:bd:7b:52:f2:19:54:33:
5a:53:70:cb:40:11:89:0d:bd:4c:80:55:05:ba:c3:74:b6:26:
cc:90:e4:ec:ed:bc:6b:6d:80:10:ca:8e:3b:dc:4f:64:59:6b:
5f:e9:35:dd:a3:b0:da:46:b3:48:c5:a7:b9:f1:80:5f:ac:5e:
56:ab:eb:e0:5d:17:a2:2b:64:0b:63:0e:5a:c1:fa:68:e6:fd:
79:e4:ed:67:ca:58:ac:f9:95:8d:49:b5:9b:33:14:5c:8b:9e:
1c:ef:96:fb:32:56:f5:6d:99:69:d0:73:2c:0a:c6:92:88:e8:
52:e7:06:d9:63:fb:33:5c:3c:c7:39:af:6d:4e:a7:98:29:fc:
22:c6:e6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 08:15:14 2025 by rpki-client