Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
File: cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json)
Hash identifier: oW5ysFKyuyk4jcoZdMhmQ7yUKxaVJrw1LynxuTSlCbw=
Subject key identifier: 51:32:A8:20:D9:57:21:CF:8F:A8:61:02:95:3A:9D:75:B7:B1:2D:DC
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 019848F76FAA9439ECBEBBD36A4E33D287DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
Manifest number: 1622
Signing time: Sat 26 Jul 2025 23:00:32 +0000
Manifest this update: Sat 26 Jul 2025 23:00:32 +0000
Manifest next update: Sun 27 Jul 2025 23:00:32 +0000
Files and hashes: 1: 1-jpvgOGBb4tSAAlC9WZiXCKoWAM.roa (hash: B3C32+APojLLpoq0P/3+v4OioF2SbZXBsRXy/mWXSxY=)
2: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: OGM2DxnBTq+JWealU3ZSFRXbAuh8kHHXhtZjOyZR+Xo=)
3: ecf817WnJwsGfmatFeQyUhb3Llc.roa (hash: OXDEPH7uN3GYyUlwskriOcVgXTD3tnLi2wfgN52n2YQ=)
4: fCzm3iDfGNLzSTbcoduj_jsEwe0.roa (hash: pBY7VkXWNq309M84LTxPPh1gnhuSALeJ8x7uuHmSmZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:6f:aa:94:39:ec:be:bb:d3:6a:4e:33:d2:87:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Jul 26 23:00:32 2025 GMT
Not After : Jul 27 23:00:32 2025 GMT
Subject: CN=5132a820d95721cf8fa86102953a9d75b7b12ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:60:1c:22:b8:2a:88:56:10:62:02:a7:9f:f5:
9a:65:3e:94:15:34:d3:aa:78:9c:87:9d:44:6d:a6:
b2:a5:51:aa:56:c9:de:3f:f3:0d:15:f7:71:7f:d3:
44:fc:82:f2:ed:a5:10:4c:6e:fd:c6:61:85:57:d7:
d8:fa:59:3f:63:a0:0e:d6:a4:89:c0:04:0d:27:68:
59:a8:d7:7c:d6:86:05:c7:25:83:9a:7a:d4:29:1b:
46:ee:12:f9:b3:a1:ff:35:51:23:b9:0b:30:a1:d1:
7c:9f:9f:f1:e3:d5:13:05:50:d7:15:1f:5e:ad:a0:
1f:38:6f:f4:a2:66:27:d5:69:bb:2b:5b:8c:5d:ce:
60:9a:34:f0:cc:4d:da:f8:7b:59:47:b3:81:a8:21:
71:00:0a:a8:f2:ac:9a:6a:fa:7d:46:62:93:fb:c9:
46:55:62:82:84:51:d7:83:2b:8d:fc:33:4f:21:6c:
14:85:43:1c:5d:ef:73:cf:12:10:44:7d:b6:1f:a6:
7f:90:d2:e3:ee:1a:44:1c:e4:72:07:49:54:3e:27:
50:72:3b:e9:7b:f6:77:03:24:47:14:b4:c6:a6:e4:
23:6e:aa:d8:2c:0d:1e:b7:32:b6:6a:51:59:df:71:
11:c4:16:07:67:08:0f:39:cd:aa:8e:06:03:af:f2:
7b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:32:A8:20:D9:57:21:CF:8F:A8:61:02:95:3A:9D:75:B7:B1:2D:DC
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ea:34:ec:7e:59:90:af:3f:42:a7:a8:0f:49:fe:17:54:ea:
d1:b7:c0:25:17:9f:55:60:7f:f7:24:32:94:1f:25:67:2d:cb:
a5:88:cc:5e:44:f1:17:54:47:40:64:52:75:69:15:ca:05:7d:
a1:94:ec:bd:d2:9f:e0:23:2b:64:59:0f:df:f8:70:11:c5:31:
f3:ec:b4:cb:25:5b:c9:98:5e:be:c7:b6:36:ff:90:1a:06:41:
48:e9:cd:ce:8d:1b:a1:48:39:ce:e1:55:d4:c9:b5:fe:45:3d:
d6:a3:b2:6c:17:1e:a7:00:90:f3:2c:a4:57:28:4b:30:9f:f8:
d5:f5:1c:9a:ba:6c:cb:a5:4e:da:8c:3f:af:64:6b:e8:04:4b:
a1:69:b3:f4:1c:f1:7b:40:6d:84:d2:d7:5a:6e:cf:9b:88:7d:
19:b9:1a:9e:bc:03:e5:2a:a1:10:5c:8d:42:16:8f:6c:36:e1:
95:b0:d9:41:bf:75:00:94:e4:76:46:8a:fe:ba:d4:97:1e:f1:
df:6d:35:15:de:07:c1:c3:75:19:cb:c2:10:da:0f:b0:5e:b1:
ce:20:51:fe:61:7c:31:35:84:7e:df:11:db:43:14:c0:20:9f:
15:00:60:6b:8d:d8:d5:c0:0a:eb:d7:1f:f4:15:90:7f:de:ea:
bc:f3:f9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:51:12 2025 by rpki-client