Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
File: csoaXP9S6-LyK2adzCyQJ86guBw.mft (raw, json)
Hash identifier: vBOqphKzvFyItqekLX3ykz7KLS3k4MGoa1iQCWhHIlw=
Subject key identifier: 3D:16:87:0F:45:79:1B:49:B9:FD:1D:1A:81:B1:FE:FA:8E:13:54:CB
Authority key identifier: 72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
Certificate issuer: /CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Certificate serial: 01974FD7EF7BBE1FE2FBAF181AC8F6FAB9A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
Manifest number: 14E7
Signing time: Sun 08 Jun 2025 14:00:40 +0000
Manifest this update: Sun 08 Jun 2025 14:00:40 +0000
Manifest next update: Mon 09 Jun 2025 14:00:40 +0000
Files and hashes: 1: I_-FRfZa9GeQgym8xYKEVr-rfgA.roa (hash: AmRbI2XP8GOvp3frMOHSnlH48LSP6GLhPNS9PY26J8Y=)
2: Uex3x3CWB9WPAXdRNKBIFJzJsn0.roa (hash: 2qFFx/ZZv0i+OiRQdPCciM9T0PW45kAKmFf1AT14lvA=)
3: csoaXP9S6-LyK2adzCyQJ86guBw.crl (hash: lKoKCCI+R1LBtphLZoGd69g4klIaqpehY5x105+rjqU=)
4: rH_6QZmVa4_yNlZ_JVuN0_Vk3Xs.roa (hash: Z/fYNuFHcmnLVDSA1WLLI385MQXDkqW9Tw7vDgNOnAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:ef:7b:be:1f:e2:fb:af:18:1a:c8:f6:fa:b9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Validity
Not Before: Jun 8 14:00:40 2025 GMT
Not After : Jun 9 14:00:40 2025 GMT
Subject: CN=3d16870f45791b49b9fd1d1a81b1fefa8e1354cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:de:46:75:35:8a:66:87:e2:79:ba:45:1b:
a2:0c:25:0f:f0:10:eb:89:bc:39:20:2d:e6:be:1f:
5b:d5:0d:02:b4:93:a2:d9:c1:96:e1:03:54:8a:b6:
cd:bc:29:83:4e:d8:e3:62:4f:16:21:68:74:b1:f3:
24:0b:2e:2f:3e:9c:8f:26:5f:1f:9a:75:58:27:f3:
cd:b8:96:56:ec:3b:13:74:c6:3d:d3:a7:87:1a:9e:
35:bc:9e:3c:7f:a8:76:96:1b:fa:ea:97:68:a1:17:
9b:00:d6:33:40:83:9f:6f:20:65:6c:da:e2:36:9d:
04:3f:c6:57:bc:15:73:a2:3e:be:36:7d:99:ab:de:
86:ef:42:66:56:88:50:1f:5e:ff:69:2c:a8:2e:28:
99:56:f7:38:90:c3:ae:21:22:37:a0:11:26:60:6d:
aa:13:5b:ee:86:47:9c:f5:80:2a:12:a2:6e:e7:ad:
2b:0d:8c:c8:91:14:e1:e4:18:2d:d5:5a:5f:b9:e7:
a6:9f:2f:49:09:ca:74:9f:57:58:2c:76:a7:42:b8:
9f:4f:2f:b5:cf:35:84:dd:d0:47:1f:a4:72:b4:bd:
7a:5c:b4:74:c1:d6:05:f1:e0:7b:2a:3d:ac:2c:bf:
51:ca:e6:3d:52:1a:b2:da:99:ee:8b:3a:a1:22:4c:
77:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:16:87:0F:45:79:1B:49:B9:FD:1D:1A:81:B1:FE:FA:8E:13:54:CB
X509v3 Authority Key Identifier:
keyid:72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:bd:b9:05:82:60:ee:0f:44:41:45:d0:aa:1b:a7:d7:a1:eb:
b3:a0:8f:be:0b:5c:26:06:c5:3b:5a:a0:2c:76:8a:a5:7c:a4:
c7:ce:eb:38:19:33:fe:4c:3f:7b:5b:2b:44:0f:5f:a8:75:23:
94:fe:ff:ed:4b:f6:ab:20:51:72:2e:1c:ce:4d:6f:e3:c2:2f:
c6:04:98:2a:cf:d9:39:6a:b5:4d:de:5b:9f:79:e6:af:df:fd:
04:35:3b:0f:15:78:45:d8:4e:35:4b:ae:a7:77:fb:e1:38:fe:
c8:19:d5:30:5f:44:6f:39:95:ba:da:55:d1:e8:0f:fe:2c:32:
0d:f6:88:d7:39:c4:11:07:4d:de:e8:ea:0e:b6:86:96:0e:70:
bd:f3:fe:11:a7:cf:29:fb:a2:00:17:23:a4:d3:78:06:f8:17:
07:a1:4a:5d:35:c5:aa:80:74:0c:1b:91:66:6b:98:a5:c3:9c:
96:e6:bf:31:31:1d:00:67:9b:f1:de:4e:cd:de:9d:17:90:95:
f2:af:ea:3d:9f:d4:6a:a1:e1:b5:3e:bd:e0:96:87:32:07:9d:
b7:4a:40:b9:1e:1b:e6:28:d4:b5:68:fe:ab:7f:7b:03:28:41:
0d:f1:23:19:f4:bd:bc:be:91:29:5a:5b:86:91:aa:ef:5c:1e:
57:0b:f9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:23:15 2025 by rpki-client