Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
File: csoaXP9S6-LyK2adzCyQJ86guBw.mft (raw, json)
Hash identifier: imWVZ6aDdLRsNj9nEN8iMNrBwpUWpbcC1NgPeiEINPw=
Subject key identifier: 5D:D6:59:38:41:07:CF:2F:75:E3:10:4B:72:EE:CF:28:0E:23:9B:27
Authority key identifier: 72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
Certificate issuer: /CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Certificate serial: 01984708A88C48CE3F6A1D85AA14F4580EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
Manifest number: 1567
Signing time: Sat 26 Jul 2025 14:00:06 +0000
Manifest this update: Sat 26 Jul 2025 14:00:06 +0000
Manifest next update: Sun 27 Jul 2025 14:00:06 +0000
Files and hashes: 1: I_-FRfZa9GeQgym8xYKEVr-rfgA.roa (hash: AmRbI2XP8GOvp3frMOHSnlH48LSP6GLhPNS9PY26J8Y=)
2: Uex3x3CWB9WPAXdRNKBIFJzJsn0.roa (hash: 2qFFx/ZZv0i+OiRQdPCciM9T0PW45kAKmFf1AT14lvA=)
3: csoaXP9S6-LyK2adzCyQJ86guBw.crl (hash: ebt2RZ2LZfdtsuNuMQ+fq8Lq1A8Dd6gZnoLZ/NNeuAw=)
4: rH_6QZmVa4_yNlZ_JVuN0_Vk3Xs.roa (hash: Z/fYNuFHcmnLVDSA1WLLI385MQXDkqW9Tw7vDgNOnAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:a8:8c:48:ce:3f:6a:1d:85:aa:14:f4:58:0e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Validity
Not Before: Jul 26 14:00:06 2025 GMT
Not After : Jul 27 14:00:06 2025 GMT
Subject: CN=5dd659384107cf2f75e3104b72eecf280e239b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:aa:f7:a7:a1:c8:13:7c:55:71:d6:3c:ef:07:
36:cb:2a:8b:dc:44:c6:df:74:88:0f:63:90:79:60:
5f:af:87:90:63:24:02:b8:3c:53:13:29:77:02:2b:
de:e9:7f:5d:68:43:d5:a4:f4:5f:bf:62:f3:41:4a:
a1:e9:b5:0f:dd:00:8f:39:20:8f:b2:22:9a:d0:b0:
01:8c:34:03:2c:05:88:45:d8:b4:76:39:fa:ca:47:
4d:f2:8c:69:ab:16:b8:06:db:f3:8d:bb:b8:c9:26:
68:27:be:16:e7:fb:b9:e2:e1:1f:dc:59:39:58:41:
62:d2:19:89:66:c9:8f:31:4e:11:3b:82:8c:03:60:
f3:46:15:88:84:30:e9:5e:be:94:36:03:d1:26:ef:
81:36:a3:90:db:99:aa:c2:d3:9a:06:9e:7a:02:39:
c8:b0:da:2f:5d:94:d6:c7:eb:ae:08:20:e4:02:e6:
87:40:27:9f:35:4b:42:2c:73:cf:a4:06:a8:d3:4f:
ea:3a:28:52:fb:74:52:bd:2b:4a:a8:ad:dd:f4:6b:
f3:a9:14:dd:a1:b5:ae:6a:41:95:ea:ba:d5:a2:9c:
56:66:f9:e8:44:44:95:69:6d:02:55:84:1a:2a:44:
2a:98:92:cc:ac:4a:90:d3:41:41:f1:c4:1e:0f:3b:
25:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D6:59:38:41:07:CF:2F:75:E3:10:4B:72:EE:CF:28:0E:23:9B:27
X509v3 Authority Key Identifier:
keyid:72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3f:a3:81:7c:a1:d3:80:5c:d7:7e:0e:21:37:9a:e9:43:3a:
d1:7f:9a:80:7e:b7:d5:5c:d6:a5:ab:ca:05:9a:47:0a:9f:47:
6f:00:d7:03:c3:77:16:45:56:50:0f:48:d3:70:7e:b5:e8:2e:
4a:fc:7a:8e:c4:90:04:2d:da:78:5a:f8:3d:e0:f0:dd:ad:2b:
42:18:d8:34:dd:e4:b1:5f:6d:81:28:8b:15:9b:0d:80:f5:f2:
a1:8a:56:a0:a4:84:62:77:3e:1e:a5:91:ac:f7:94:f9:95:b7:
3e:ea:a9:25:f1:5a:57:d6:28:74:e2:e1:72:f5:57:a8:65:20:
a4:35:a4:dc:05:16:ab:7f:54:28:94:d8:69:bf:e7:05:89:39:
8f:5a:a2:c7:54:31:19:94:8a:cc:ab:5e:6b:d1:33:c8:66:b4:
c8:08:71:b8:c4:61:82:36:1e:3c:be:18:ca:52:9c:99:3f:05:
e1:7f:cf:fc:e9:21:c2:67:6d:f2:49:52:89:2a:78:ba:cb:64:
d1:b4:7a:a9:75:d3:b7:ff:6d:4b:2a:d6:ea:f3:81:14:19:dc:
9f:c7:8a:ea:3b:17:3b:a6:ca:47:75:ae:1b:72:4c:60:08:a0:
05:ee:81:5e:47:ad:f8:d1:31:c6:52:71:b6:42:ff:c7:11:8c:
c8:eb:9d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:05:09 2025 by rpki-client