Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
File: cpsz3mBR0E119rsfflOx79ZkYhE.mft (raw, json)
Hash identifier: ig/POfDi+NFMQbkjPbxXdv3mcAiMjI68UQ2RUO/miRU=
Subject key identifier: FB:15:87:06:2E:14:C1:D3:1C:6D:EC:34:26:68:D1:D2:69:DB:38:51
Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
Certificate issuer: /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Certificate serial: 01974779BB1DC1EDB9E9660FB73A63C63DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 23:00:49 +0000
Manifest this update: Fri 06 Jun 2025 23:00:49 +0000
Manifest next update: Sat 07 Jun 2025 23:00:49 +0000
Files and hashes: 1: RZxjFWlo2i2aJOHKRic4Fv-bX9o.roa (hash: gz7c2rZX9EEeMlQK8oZvhSguZMORv69xoCYnqP22C6w=)
2: cpsz3mBR0E119rsfflOx79ZkYhE.crl (hash: BHLCuZHluV2JX7EQ6oab3rq2/4VSX3bK0mvWTS7Vr/M=)
3: ecPozDTBiwtPhHsED0tZv93AzPY.roa (hash: VAqfrUatc4XqZvYROBfJJkH7/EgI7JEtqS/gigZEo5A=)
4: yMHEf0ETrnhPf3W6Sut08KAaQSE.roa (hash: hF6DDwZ+vuWyFWfGnEdqPAmnVJOOl0M0tPKA+XL7Y0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:bb:1d:c1:ed:b9:e9:66:0f:b7:3a:63:c6:3d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Validity
Not Before: Jun 6 23:00:49 2025 GMT
Not After : Jun 7 23:00:49 2025 GMT
Subject: CN=fb1587062e14c1d31c6dec342668d1d269db3851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e8:71:3e:6e:6f:84:a1:e5:57:52:a4:6c:11:
42:7d:97:bc:2c:07:ca:ed:9f:55:60:04:b4:55:d2:
57:73:89:dc:6a:e0:35:30:fc:c0:43:aa:5f:43:93:
0d:0f:6d:30:4f:cf:2a:db:76:75:f4:98:be:b3:43:
c1:65:c0:39:d1:73:f9:81:ab:3e:6f:1e:5c:c8:c9:
6a:89:9f:8b:cf:e5:f3:89:21:b3:49:e6:5e:19:9a:
97:00:ea:3b:6e:88:8b:85:43:2a:f1:20:29:2c:ee:
d2:ca:ad:4c:92:3d:63:06:e3:5d:ba:2e:26:c1:d2:
02:a4:c5:1e:77:5f:17:e1:24:ab:d4:51:91:be:9f:
b4:84:61:b5:48:e7:80:cc:92:61:3b:e7:19:1c:6c:
ad:86:99:70:ab:af:6f:0d:1b:ab:03:c1:6d:e2:88:
99:2a:ce:a7:63:a0:a8:44:89:5b:08:24:bd:38:e0:
9b:3c:b0:5a:f8:a3:8b:50:46:fc:42:3b:30:cb:b2:
b8:f5:77:3b:a3:7a:16:30:db:d6:5d:ce:b3:e9:7b:
0a:2d:c9:17:bd:3e:01:e7:e4:9c:b8:fe:3e:a5:2f:
e7:6f:92:ff:f3:a6:98:a4:ae:43:a8:f9:15:69:b5:
f2:8a:5b:7f:aa:b5:53:80:6d:41:7b:f1:37:d4:6b:
6f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:15:87:06:2E:14:C1:D3:1C:6D:EC:34:26:68:D1:D2:69:DB:38:51
X509v3 Authority Key Identifier:
keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:bd:44:4e:0d:3b:3a:14:d2:77:44:f9:02:4c:7f:d8:94:e1:
c5:4a:c9:fc:d6:cb:9a:71:67:d2:2e:25:1d:ef:ab:d4:7e:47:
11:73:d0:53:d9:b4:0b:0e:b9:eb:f5:6f:48:17:35:80:5d:90:
69:84:77:b6:59:0e:d9:a1:2c:e5:02:0b:f9:f3:35:c1:0e:20:
dd:de:d5:19:80:d4:ab:5c:81:d1:63:76:06:eb:9c:9e:b5:58:
f5:02:7d:70:a5:4f:f4:cf:f5:66:63:f7:42:02:cc:47:17:9c:
8f:43:11:04:63:08:11:89:c3:3b:d1:bf:3d:65:11:bc:34:47:
11:71:27:97:e2:a3:bf:30:f3:e7:a1:d2:a1:b0:72:e4:ae:a6:
83:07:9a:1e:e9:fd:59:3d:10:72:c0:84:a2:98:3d:21:bf:53:
a0:93:43:2b:5c:e9:cf:10:18:ee:e5:cd:27:56:d4:23:63:9d:
d4:80:e5:4a:3a:c4:48:5e:4b:45:8e:c5:f3:13:7a:ce:45:d2:
de:43:a4:54:ad:32:af:26:ed:2a:ac:b9:bd:07:26:2a:3f:2e:
78:38:a4:25:ad:1d:d3:e5:db:e5:eb:ef:ea:e6:34:7a:18:03:
fd:26:1f:2c:23:21:ac:ff:5f:07:c3:40:9f:5c:d0:87:8f:d4:
8d:94:48:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHebsdwe256WYPtzpjxj38MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyOWIzM2RlNjA1MWQwNGQ3NWY2YmIxZjdlNTNiMWVmZDY2
NDYyMTEwHhcNMjUwNjA2MjMwMDQ5WhcNMjUwNjA3MjMwMDQ5WjAzMTEwLwYDVQQD
EyhmYjE1ODcwNjJlMTRjMWQzMWM2ZGVjMzQyNjY4ZDFkMjY5ZGIzODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ehxPm5vhKHlV1KkbBFCfZe8LAfK
7Z9VYAS0VdJXc4ncauA1MPzAQ6pfQ5MND20wT88q23Z19Ji+s0PBZcA50XP5gas+
bx5cyMlqiZ+Lz+XziSGzSeZeGZqXAOo7boiLhUMq8SApLO7Syq1Mkj1jBuNdui4m
wdICpMUed18X4SSr1FGRvp+0hGG1SOeAzJJhO+cZHGythplwq69vDRurA8Ft4oiZ
Ks6nY6CoRIlbCCS9OOCbPLBa+KOLUEb8Qjswy7K49Xc7o3oWMNvWXc6z6XsKLckX
vT4B5+ScuP4+pS/nb5L/86aYpK5DqPkVabXyilt/qrVTgG1Be/E31GtvbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsVhwYuFMHTHG3sNCZo0dJp2zhRMB8GA1UdIwQY
MBaAFHKbM95gUdBNdfa7H35Tse/WZGIRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3BzejNtQlIwRTExOXJzZmZsT3g3OVprWWhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yZDk1NDEtZWI3ZS00YTFhLWI4NGIt
NmVhMjc5YTJlNmNiLzEvY3BzejNtQlIwRTExOXJzZmZsT3g3OVprWWhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8yZDk1NDEtZWI3ZS00YTFhLWI4NGItNmVhMjc5YTJlNmNi
LzEvY3BzejNtQlIwRTExOXJzZmZsT3g3OVprWWhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKr1ETg07
OhTSd0T5Akx/2JThxUrJ/NbLmnFn0i4lHe+r1H5HEXPQU9m0Cw656/VvSBc1gF2Q
aYR3tlkO2aEs5QIL+fM1wQ4g3d7VGYDUq1yB0WN2BuucnrVY9QJ9cKVP9M/1ZmP3
QgLMRxecj0MRBGMIEYnDO9G/PWURvDRHEXEnl+KjvzDz56HSobBy5K6mgweaHun9
WT0QcsCEopg9Ib9ToJNDK1zpzxAY7uXNJ1bUI2Od1IDlSjrESF5LRY7F8xN6zkXS
3kOkVK0yrybtKqy5vQcmKj8ueDikJa0d0+Xb5evv6uY0ehgD/SYfLCMhrP9fB8NA
n1zQh4/UjZRIrw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 06:03:00 2025 by rpki-client