Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
File: cpIiZWfact2GiDyt1fPeb_1bNXM.mft (raw, json)
Hash identifier: 2zY7NlPETKwAdPtYDJ8cjdUA53YmPdi4/695LxVbpBA=
Subject key identifier: FC:13:DF:94:B7:FE:01:B1:BF:B7:F3:FA:06:44:C3:EF:04:81:E5:B7
Authority key identifier: 72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
Certificate issuer: /CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Certificate serial: 019845BFACE4EE63FA9AE55A434D422DF0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 08:00:46 +0000
Manifest this update: Sat 26 Jul 2025 08:00:46 +0000
Manifest next update: Sun 27 Jul 2025 08:00:46 +0000
Files and hashes: 1: A2a55CFuU3rmZKWMjbnP0QRTKbw.roa (hash: h7ObFO2cHNspjyZ0BOSzsO0dobQTCK4BjzPiMYTX+dk=)
2: cpIiZWfact2GiDyt1fPeb_1bNXM.crl (hash: kUqwCr5/hjGvh8fH/AVmzA57tfVmx1cy4gltM/vgOKY=)
3: hOIlW-rpHRc2nOKpMGO_mfzaetg.roa (hash: VUIEi5LXdhfGKiMndwB/BQwcKviQdKt6bC3rAVXouZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:ac:e4:ee:63:fa:9a:e5:5a:43:4d:42:2d:f0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Validity
Not Before: Jul 26 08:00:46 2025 GMT
Not After : Jul 27 08:00:46 2025 GMT
Subject: CN=fc13df94b7fe01b1bfb7f3fa0644c3ef0481e5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:03:99:03:de:47:0a:8d:8c:7a:e8:42:c7:6a:
4f:d9:d2:d3:fc:69:71:8e:aa:8e:73:e7:8f:03:9b:
35:b7:98:4e:5f:0f:c7:7f:a5:63:79:a6:d9:11:c1:
72:f1:1a:89:2d:73:be:53:b3:39:09:5d:c6:b5:42:
40:10:c4:ec:9b:17:b3:76:79:5e:5d:d3:71:8b:ca:
f1:03:a0:70:36:b0:1e:5e:9a:58:57:3f:7b:39:40:
fe:3c:f5:28:b8:ac:e5:b2:c9:03:59:9d:d4:98:7c:
82:a6:21:65:76:f9:82:2d:a7:7b:f3:22:a0:c7:c7:
c4:aa:9c:6d:fa:3f:4f:2d:36:32:25:e0:b3:28:54:
a2:8e:38:17:67:5d:69:17:61:4b:97:0a:c5:df:45:
7a:0f:34:4c:55:b7:8e:53:eb:f3:eb:b4:c9:17:91:
64:a1:e8:15:ef:7d:77:9c:fd:21:86:7e:0c:0c:97:
a9:bc:9b:eb:f8:0c:e9:42:3a:cb:b1:aa:4a:e9:26:
c8:8c:58:c8:1b:2b:b3:85:a5:19:69:59:bb:79:cd:
8f:e2:92:d8:a2:86:f3:44:6c:83:77:2a:f0:9e:bf:
18:3c:dd:bc:0c:a5:36:61:64:12:93:bd:fa:04:12:
72:a8:32:fb:07:34:f0:d1:d0:4b:f6:40:21:65:a8:
02:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:13:DF:94:B7:FE:01:B1:BF:B7:F3:FA:06:44:C3:EF:04:81:E5:B7
X509v3 Authority Key Identifier:
keyid:72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:7b:0c:f6:b6:e3:cd:a3:20:d8:c3:c7:4f:c2:c4:75:80:be:
91:91:06:84:63:95:a6:77:70:8b:b0:59:73:33:73:cc:79:0d:
94:2a:41:86:eb:e1:99:26:d6:47:4f:3b:1c:ba:66:df:96:0a:
93:0e:52:7e:eb:9b:f4:3e:42:7c:59:12:b9:d7:7c:f1:06:7e:
6c:66:5e:4c:ca:39:54:df:37:4e:73:3a:20:82:a6:16:ed:16:
20:c1:cc:2f:12:d8:85:2d:0a:5f:d1:72:4d:58:8f:d6:0d:5e:
68:49:f6:e4:53:8d:f8:59:8b:f0:05:a9:8c:fe:b2:34:19:ec:
49:f4:41:6a:e1:95:f0:dc:58:1e:07:21:4d:e5:fa:a8:84:08:
8f:54:ea:c0:dd:d5:ef:ff:ca:45:ef:a7:79:a0:c1:45:84:36:
52:4d:2f:45:bf:7c:fa:c8:ce:be:dc:29:cf:56:db:d3:ff:73:
e1:96:e0:44:52:e1:3e:60:de:70:cb:ab:50:88:0b:9f:79:4d:
9a:34:ac:ed:52:9f:1b:3d:04:e3:ea:98:a9:64:b5:78:dd:f4:
6b:51:53:ea:82:2e:6b:4b:71:04:f1:87:b0:9f:44:2a:cc:e8:
25:84:41:41:d7:61:3e:15:7a:e8:5d:e8:ee:96:b0:6b:12:c2:
b3:de:7c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:57:04 2025 by rpki-client