Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
File: cspFbK0jiDCzjs1NJnys-lzV8fE.mft (raw, json)
Hash identifier: lWzxUmcJXF8g5LPUxsZ/+wp8PZ6q/ARuyZcFC/qbdpo=
Subject key identifier: 41:F5:BA:64:A1:6B:F5:A2:15:81:27:F1:3F:1B:6F:96:15:1F:84:DB
Authority key identifier: 72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
Certificate issuer: /CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Certificate serial: 01974E2053CD752A008F32679E95120373E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 06:00:30 +0000
Manifest this update: Sun 08 Jun 2025 06:00:30 +0000
Manifest next update: Mon 09 Jun 2025 06:00:30 +0000
Files and hashes: 1: 9qsPYE67U8LKJS5RPyzpaJjKAjw.roa (hash: ate2+ga4mYDOeR+5DaCdTzRa6tHIKsrgVcrNBTn+5LQ=)
2: cspFbK0jiDCzjs1NJnys-lzV8fE.crl (hash: o+g5sajsDstVXYpOBJTZSruWCThkd4Yr9/rC+rfzdFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:53:cd:75:2a:00:8f:32:67:9e:95:12:03:73:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Validity
Not Before: Jun 8 06:00:30 2025 GMT
Not After : Jun 9 06:00:30 2025 GMT
Subject: CN=41f5ba64a16bf5a2158127f13f1b6f96151f84db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:be:23:34:fc:35:23:87:21:24:43:be:43:
0f:c7:57:1b:34:f4:a9:02:30:4a:fa:4c:c5:68:eb:
d6:e6:10:2c:cf:3f:ed:ae:9e:d2:39:97:b9:f7:be:
88:91:0b:66:d7:a2:49:d7:ee:13:ef:84:4c:cb:0d:
05:0d:c0:b9:51:cb:cb:db:9d:2b:df:2b:37:13:ff:
d7:b5:ff:6c:fd:df:ba:50:d3:1f:7d:ab:83:16:c6:
76:91:1f:e8:d7:3c:0d:bc:2c:5f:1c:23:6b:a1:c3:
45:34:2a:53:02:e4:02:f8:5f:47:f8:1c:04:fc:7f:
4c:6a:93:5a:b2:70:b7:a4:08:0d:47:c7:5e:da:91:
7f:40:0d:59:8a:08:63:20:ff:5a:4a:df:aa:10:a5:
48:8b:09:37:e1:79:48:fa:6d:9e:ff:9c:fb:00:c9:
e9:ee:8f:39:fd:05:35:ab:4a:ea:2b:4e:27:ae:fb:
7c:d9:62:64:19:6a:73:60:15:8f:a7:c0:f9:4d:a0:
66:12:7f:4e:e3:77:c8:77:5f:0d:f8:53:ac:98:7f:
2c:67:43:5e:8a:86:15:35:53:9c:16:d2:c8:7c:d7:
e4:d7:51:da:59:dd:12:39:08:8d:cd:05:6b:ee:b2:
a0:9a:ab:c5:dc:d2:29:25:5e:fa:2b:00:02:12:73:
d1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F5:BA:64:A1:6B:F5:A2:15:81:27:F1:3F:1B:6F:96:15:1F:84:DB
X509v3 Authority Key Identifier:
keyid:72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:60:5e:00:16:c4:bc:28:5f:da:37:e7:30:1f:7d:3f:dd:a1:
60:89:d5:30:cd:ff:34:69:0b:b0:31:d7:e2:fb:9a:0c:3f:64:
04:fb:1b:89:4d:53:d9:c2:26:5b:d3:3d:2a:a1:39:46:ee:bb:
4c:53:74:56:b2:f4:ca:0d:1a:a2:f3:3c:dd:87:4a:6f:a7:7c:
92:f5:83:9a:66:1e:f6:cc:65:c0:de:90:68:ff:89:07:2c:01:
01:c7:7c:a4:89:c7:8b:ff:5d:aa:67:4b:ea:0a:df:19:fe:ee:
2f:fc:4a:a8:24:14:5b:3f:c8:40:cd:63:d5:ae:71:c1:20:ef:
2f:5f:b6:e8:39:d3:63:b0:ac:52:47:ed:c4:c3:47:6f:85:b3:
b2:04:2f:83:33:0f:92:2e:1b:4c:b4:f3:3e:ab:e4:4e:6f:b2:
69:6f:35:98:ad:dd:85:9e:ad:f1:73:a9:56:2a:e9:4e:46:4a:
0b:0f:d3:51:03:cd:5a:c6:2f:99:a2:5d:e6:8c:b5:5f:b5:44:
33:4a:67:e1:f3:e3:03:79:f2:88:75:02:f9:40:bd:80:b2:be:
ed:9a:69:ca:32:9f:98:4d:10:c2:53:4b:16:22:d5:14:24:69:
71:4e:fa:7d:bc:99:2d:3f:8d:64:dc:88:e1:00:95:f6:d1:16:
fc:b4:45:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:10:54 2025 by rpki-client