Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json)
Hash identifier: Lcn/44375fvBybkP+Kbf6799H+ZzIfyaARx4DFbkpXg=
Subject key identifier: D4:C8:1E:91:F3:9E:07:14:D7:00:0F:CD:5B:81:44:23:D5:69:A2:D4
Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Certificate serial: 0198439A8E7AC06054361732F88812EF15EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
Manifest number: 047F
Signing time: Fri 25 Jul 2025 22:00:59 +0000
Manifest this update: Fri 25 Jul 2025 22:00:59 +0000
Manifest next update: Sat 26 Jul 2025 22:00:59 +0000
Files and hashes: 1: AIqZOuJk6FdX-ARR52-tZ3pV5L8.roa (hash: UtG/CvZxoKdSqsgWu/Ntn0zvOecwyIkuE2hEquBOnL4=)
2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: s5cbXXSNIiCSBAunNS33xknGwV2D/eodlsnnLhXbVPg=)
3: xytDSya4p2EgaXuzXHLS_THUKdo.roa (hash: ZRTiRpSuhaqocQiQr7gHeK4/PUG2E2ZO09HQMf9siGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:8e:7a:c0:60:54:36:17:32:f8:88:12:ef:15:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Validity
Not Before: Jul 25 22:00:59 2025 GMT
Not After : Jul 26 22:00:59 2025 GMT
Subject: CN=d4c81e91f39e0714d7000fcd5b814423d569a2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:97:cd:f7:42:c7:bf:a3:fe:7c:52:b8:ea:
e9:18:c9:cd:ed:14:03:2b:33:c9:6b:75:3d:07:d8:
20:92:6c:a8:3d:a8:5c:23:00:f6:42:11:c5:71:a2:
35:54:84:ce:11:ce:b5:c6:e4:5d:ea:58:81:8b:e8:
f0:04:a0:2b:7e:b2:d0:f4:79:28:e8:de:35:88:79:
52:1a:1c:ff:8b:80:c8:f6:b9:17:57:ed:0a:9b:99:
46:a9:6c:29:45:96:24:b6:e6:47:e2:5d:32:88:1a:
29:57:da:ba:18:55:f0:c6:38:97:46:8d:f1:59:eb:
e8:57:8f:6b:11:cb:d2:b6:da:7a:04:62:4b:23:c1:
20:29:aa:4a:f3:8b:a5:a4:08:78:67:11:a1:99:0b:
16:ee:38:fc:9d:2b:ed:e7:93:95:85:9e:2d:69:a1:
3d:e3:77:4e:6a:13:2c:9d:4c:43:4d:23:f4:c7:19:
73:3b:72:c2:9b:c2:a5:ef:26:14:88:4a:c7:32:15:
fc:70:61:9e:4a:61:5b:e2:90:9b:57:b4:01:f8:e8:
4a:dd:f3:8e:e2:3e:47:cf:b1:9a:2b:e6:88:6f:73:
67:a9:79:aa:62:27:bc:ba:6c:0e:8a:83:5b:a8:e2:
57:13:81:6f:b3:67:04:83:9a:20:08:11:cc:47:61:
05:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C8:1E:91:F3:9E:07:14:D7:00:0F:CD:5B:81:44:23:D5:69:A2:D4
X509v3 Authority Key Identifier:
keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5f:76:c1:a7:05:ac:b2:86:d5:d4:65:f1:9d:56:6a:ee:df:
e8:6e:a4:c6:3f:ab:c0:79:ae:2e:1a:ec:dc:7c:f1:7c:58:b3:
8e:58:c6:a6:66:e0:85:5d:52:8f:84:d7:35:7d:a9:75:68:b5:
a3:dd:b2:3d:51:ad:e0:a0:18:45:26:9d:44:b1:ee:32:e8:ee:
ff:1a:80:eb:55:80:b2:f7:d8:1a:7b:33:bd:8d:9c:fc:e9:26:
b6:a0:48:5d:a7:c9:ff:c9:60:e0:87:e1:fc:7c:6a:30:5e:7a:
45:3c:ab:9d:6f:8f:7d:6d:5a:3a:fe:57:ef:a0:64:b7:83:19:
b0:2f:ec:85:43:9f:67:29:e5:5d:2a:bc:b9:b4:11:f5:ca:7b:
6f:91:af:12:5d:f4:e0:63:05:51:a1:d1:08:45:b7:23:d9:50:
ef:de:b5:4a:fe:10:e3:e4:f5:05:95:da:60:a1:4f:07:f6:77:
9a:b8:33:11:6a:01:0f:1c:30:4c:d9:5c:98:27:13:a6:c8:cc:
c1:8b:a9:4d:d7:ff:72:69:92:fb:5a:f9:b8:ff:16:57:33:ad:
1a:85:73:d4:31:21:45:57:a7:47:15:30:c9:fe:b5:01:57:b5:
47:1c:68:ca:5d:d2:3c:b9:2e:1d:9a:09:ab:e7:e5:b7:6f:87:
9d:e9:bf:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:05:40 2025 by rpki-client