Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
File: cpsz3mBR0E119rsfflOx79ZkYhE.mft (raw, json)
Hash identifier: 3WmMkx65UgOy9LRjEkcCc0EYRqJXZekiOo/4l4l2dXI=
Subject key identifier: 30:F2:DB:B3:0C:DB:6F:8D:49:E0:0A:29:BA:7D:46:38:02:7D:4F:ED
Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
Certificate issuer: /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Certificate serial: 01984A41A3A7E705BBECACE20A9690CD154E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 05:01:12 +0000
Manifest this update: Sun 27 Jul 2025 05:01:12 +0000
Manifest next update: Mon 28 Jul 2025 05:01:12 +0000
Files and hashes: 1: RZxjFWlo2i2aJOHKRic4Fv-bX9o.roa (hash: gz7c2rZX9EEeMlQK8oZvhSguZMORv69xoCYnqP22C6w=)
2: cpsz3mBR0E119rsfflOx79ZkYhE.crl (hash: /NPTv4+sND4/WjmmALFs/L3tFKkNTnTb9AJoitPhoDw=)
3: ecPozDTBiwtPhHsED0tZv93AzPY.roa (hash: VAqfrUatc4XqZvYROBfJJkH7/EgI7JEtqS/gigZEo5A=)
4: yMHEf0ETrnhPf3W6Sut08KAaQSE.roa (hash: hF6DDwZ+vuWyFWfGnEdqPAmnVJOOl0M0tPKA+XL7Y0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:a3:a7:e7:05:bb:ec:ac:e2:0a:96:90:cd:15:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Validity
Not Before: Jul 27 05:01:12 2025 GMT
Not After : Jul 28 05:01:12 2025 GMT
Subject: CN=30f2dbb30cdb6f8d49e00a29ba7d4638027d4fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:84:7c:d3:05:29:0b:72:fa:bf:e3:08:71:36:
8f:8d:98:3f:fc:bd:ed:ac:50:a3:02:ae:5c:04:8c:
3a:5f:53:1b:1d:24:5c:47:7c:05:95:0f:80:76:1c:
40:48:7b:3a:e9:6f:b0:d9:ba:9f:81:90:4c:7f:e4:
05:ec:91:e6:f1:00:08:6b:55:f1:0c:d0:c9:77:4b:
dc:e0:4a:53:64:3f:0e:90:d4:aa:36:8b:8c:d1:60:
9c:dc:69:4e:e7:8e:b7:72:54:eb:a7:5b:e1:bb:10:
a5:64:59:ad:b3:eb:91:36:0a:26:ab:52:ff:ef:43:
6d:5f:62:b4:78:c6:71:67:7f:b2:92:db:33:f1:c1:
84:a9:e0:da:ac:14:27:a6:3d:70:43:d9:16:6b:86:
b6:0e:12:b6:9e:19:51:b5:09:f1:1f:2b:e8:e7:8b:
be:5e:1a:13:79:f2:e8:71:7d:e3:df:67:b4:b1:4c:
f3:0b:a3:08:45:d5:69:6c:c1:2e:b7:fb:e6:6c:1c:
69:f6:9e:fa:7f:2c:62:4a:28:15:ed:76:e7:ae:71:
11:99:3d:23:f1:4c:b7:1e:ec:92:f1:92:47:b1:69:
e3:ca:02:ad:c7:e0:25:2a:a8:c0:91:e9:0b:61:d7:
9b:5f:c4:7b:94:8b:af:9a:20:e1:10:0d:91:c1:79:
2c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F2:DB:B3:0C:DB:6F:8D:49:E0:0A:29:BA:7D:46:38:02:7D:4F:ED
X509v3 Authority Key Identifier:
keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:be:f0:b4:14:52:94:6f:22:bc:1b:d1:d6:3d:d8:f0:a6:9a:
e8:32:7d:e7:3d:ca:d8:78:b2:1b:19:3f:27:f1:ec:1c:c5:45:
a8:3d:ac:fc:74:64:d5:3f:2c:a4:6d:75:60:cc:dc:ca:a8:76:
f9:04:26:b7:32:6d:84:4f:fb:3c:f1:23:f4:af:d0:5b:a1:dc:
95:0f:dc:74:1c:a6:fd:99:72:48:23:c7:c2:1b:dd:f2:a5:19:
10:cb:c9:67:fa:cc:ae:16:32:03:af:e3:e5:02:6d:02:1f:fe:
5e:5f:ad:5c:54:bb:75:b9:4c:90:8b:e7:82:69:18:0d:26:f1:
13:38:01:f1:d3:88:e8:94:21:3e:0d:be:d9:35:2b:fe:f3:8a:
38:64:8d:59:fd:63:d8:87:3c:fa:9f:aa:85:87:b8:8b:37:84:
ba:6a:5a:d8:e9:83:9f:78:93:d4:c4:4d:4b:d0:f2:a9:cf:c1:
7a:c7:bb:9e:f6:4f:23:2c:cf:35:c8:55:c5:70:f1:6c:da:1d:
48:41:92:ab:d9:a9:4f:91:89:dc:c5:c6:43:f6:ac:00:f6:33:
85:89:38:6a:81:3d:c4:85:97:06:e3:a0:7d:47:45:ce:ab:e1:
f3:87:f2:4b:5d:7a:95:e1:19:c7:02:bf:6a:01:56:c7:68:74:
18:77:42:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQaOn5wW77KziCpaQzRVOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyOWIzM2RlNjA1MWQwNGQ3NWY2YmIxZjdlNTNiMWVmZDY2
NDYyMTEwHhcNMjUwNzI3MDUwMTEyWhcNMjUwNzI4MDUwMTEyWjAzMTEwLwYDVQQD
EygzMGYyZGJiMzBjZGI2ZjhkNDllMDBhMjliYTdkNDYzODAyN2Q0ZmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoR80wUpC3L6v+MIcTaPjZg//L3t
rFCjAq5cBIw6X1MbHSRcR3wFlQ+AdhxASHs66W+w2bqfgZBMf+QF7JHm8QAIa1Xx
DNDJd0vc4EpTZD8OkNSqNouM0WCc3GlO5463clTrp1vhuxClZFmts+uRNgomq1L/
70NtX2K0eMZxZ3+yktsz8cGEqeDarBQnpj1wQ9kWa4a2DhK2nhlRtQnxHyvo54u+
XhoTefLocX3j32e0sUzzC6MIRdVpbMEut/vmbBxp9p76fyxiSigV7XbnrnERmT0j
8Uy3HuyS8ZJHsWnjygKtx+AlKqjAkekLYdebX8R7lIuvmiDhEA2RwXks5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDy27MM22+NSeAKKbp9RjgCfU/tMB8GA1UdIwQY
MBaAFHKbM95gUdBNdfa7H35Tse/WZGIRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3BzejNtQlIwRTExOXJzZmZsT3g3OVprWWhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yZDk1NDEtZWI3ZS00YTFhLWI4NGIt
NmVhMjc5YTJlNmNiLzEvY3BzejNtQlIwRTExOXJzZmZsT3g3OVprWWhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8yZDk1NDEtZWI3ZS00YTFhLWI4NGItNmVhMjc5YTJlNmNi
LzEvY3BzejNtQlIwRTExOXJzZmZsT3g3OVprWWhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApr7wtBRS
lG8ivBvR1j3Y8Kaa6DJ95z3K2HiyGxk/J/HsHMVFqD2s/HRk1T8spG11YMzcyqh2
+QQmtzJthE/7PPEj9K/QW6HclQ/cdBym/ZlySCPHwhvd8qUZEMvJZ/rMrhYyA6/j
5QJtAh/+Xl+tXFS7dblMkIvngmkYDSbxEzgB8dOI6JQhPg2+2TUr/vOKOGSNWf1j
2Ic8+p+qhYe4izeEumpa2OmDn3iT1MRNS9Dyqc/Bese7nvZPIyzPNchVxXDxbNod
SEGSq9mpT5GJ3MXGQ/asAPYzhYk4aoE9xIWXBuOgfUdFzqvh84fyS116leEZxwK/
agFWx2h0GHdCIQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:36:49 2025 by rpki-client