Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
File: cpIiZWfact2GiDyt1fPeb_1bNXM.mft (raw, json)
Hash identifier: pMD5BLbGRvItBoiHcvcva7Crz4DESJxrPnyzAXIdktI=
Subject key identifier: 31:16:03:D1:AC:0C:A6:6C:CA:C4:25:7F:AB:32:CD:59:79:08:AE:90
Authority key identifier: 72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
Certificate issuer: /CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Certificate serial: 019933499FDEF7FA534C931352B04BB63F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 11:01:27 +0000
Manifest this update: Wed 10 Sep 2025 11:01:27 +0000
Manifest next update: Thu 11 Sep 2025 11:01:27 +0000
Files and hashes: 1: A2a55CFuU3rmZKWMjbnP0QRTKbw.roa (hash: h7ObFO2cHNspjyZ0BOSzsO0dobQTCK4BjzPiMYTX+dk=)
2: cpIiZWfact2GiDyt1fPeb_1bNXM.crl (hash: gE5n/DtHLWSSvK3VS+cS3ssSELgy9dziMuDqzaVNxh4=)
3: hOIlW-rpHRc2nOKpMGO_mfzaetg.roa (hash: VUIEi5LXdhfGKiMndwB/BQwcKviQdKt6bC3rAVXouZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:49:9f:de:f7:fa:53:4c:93:13:52:b0:4b:b6:3f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Validity
Not Before: Sep 10 11:01:27 2025 GMT
Not After : Sep 11 11:01:27 2025 GMT
Subject: CN=311603d1ac0ca66ccac4257fab32cd597908ae90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:96:02:59:7c:3a:6a:5b:f5:67:2e:e5:a3:
f0:51:03:56:fe:fa:bd:dd:58:a4:64:21:4e:1c:d8:
1c:1d:62:22:fb:3e:3b:83:d7:8b:a6:d7:88:76:75:
fa:c5:70:06:66:bd:8a:fd:6a:36:28:65:98:ab:d4:
42:32:53:92:4f:81:7d:c6:24:cc:da:4f:ed:eb:ce:
78:55:a5:c4:35:77:cf:c0:72:42:ea:87:e7:e3:ad:
64:af:d5:4b:8b:a8:0f:8a:2a:00:00:49:6e:a6:ed:
ed:7f:52:ba:9b:f5:3b:a1:52:83:a1:fb:02:88:00:
04:7e:29:0a:29:7b:f3:49:fc:cf:bb:da:41:9d:e2:
aa:46:2d:76:bd:11:50:fa:9a:91:80:41:1d:b2:e5:
f4:92:06:54:00:27:a1:90:6e:94:9d:e6:80:d1:2f:
12:b8:9c:c4:af:cf:be:49:93:9e:52:90:1b:93:20:
c2:7e:49:92:8f:43:af:bd:9d:b6:c2:6b:0f:81:70:
7f:e6:5a:cb:9e:5f:20:8b:f1:77:fe:7c:5e:52:ed:
81:c0:52:6b:80:7c:0e:28:b7:8d:15:51:65:7b:49:
4e:11:bc:53:be:b9:e4:7b:b8:a9:f8:5e:69:23:93:
af:3b:cb:f3:ed:65:bb:51:39:81:ad:82:f2:b0:3a:
90:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:16:03:D1:AC:0C:A6:6C:CA:C4:25:7F:AB:32:CD:59:79:08:AE:90
X509v3 Authority Key Identifier:
keyid:72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:3b:2d:94:5f:f3:9f:8a:42:da:2f:fd:c7:5c:46:1d:66:0e:
16:48:f5:c8:5d:eb:79:93:e0:56:ec:fe:2d:9e:07:3e:09:12:
d3:9d:01:3b:cd:4b:62:01:50:73:02:b2:32:df:92:61:22:62:
ed:56:70:88:70:f5:4d:f9:95:08:8d:b6:02:6e:7c:cd:9e:d0:
7b:ce:83:6a:f9:c9:6b:2f:bb:39:aa:d4:5d:42:bd:8d:ce:64:
d7:26:94:b1:cb:3b:6f:74:7e:85:04:76:18:94:bd:aa:7b:01:
c3:6d:f2:bb:32:02:ab:27:c8:29:b2:94:ae:a8:69:61:2a:9f:
ab:7c:ff:91:32:52:d8:78:97:d8:5a:d0:fe:75:7d:a3:e8:6c:
e1:6e:9f:73:f6:9e:4a:11:5c:cc:db:72:98:5c:de:4f:1e:52:
1e:be:58:f8:4a:df:c7:b4:f1:76:02:47:5f:f8:61:3c:6d:68:
0e:45:68:b6:6e:07:cd:64:32:5b:ec:77:12:dc:6f:c1:18:9b:
b8:c4:15:f2:f0:9f:d0:ae:1e:77:72:f8:f5:ab:da:a7:1b:b1:
4d:87:c4:15:1f:89:e6:d7:0c:e1:bd:84:89:e2:f5:53:47:8b:
a3:61:8e:12:25:b5:e1:55:1e:de:44:b1:51:ba:78:95:de:bb:
67:25:5b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:07:27 2025 by rpki-client