Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
File: cpsz3mBR0E119rsfflOx79ZkYhE.mft (raw, json)
Hash identifier: P5SN6r+PVKWXLJEiYO4gegw6TDZtoUO95pWVxhneo6Q=
Subject key identifier: FF:9F:E6:7D:EA:0C:33:74:B7:23:93:AB:6D:25:5D:E8:70:44:26:AE
Authority key identifier: 72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
Certificate issuer: /CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Certificate serial: 01993612AE027385B0641746921DA457FDAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
Manifest number: 167D
Signing time: Thu 11 Sep 2025 00:00:17 +0000
Manifest this update: Thu 11 Sep 2025 00:00:17 +0000
Manifest next update: Fri 12 Sep 2025 00:00:17 +0000
Files and hashes: 1: RZxjFWlo2i2aJOHKRic4Fv-bX9o.roa (hash: gz7c2rZX9EEeMlQK8oZvhSguZMORv69xoCYnqP22C6w=)
2: cpsz3mBR0E119rsfflOx79ZkYhE.crl (hash: konA4y6SCeo8WmJDW1eSbh91cgTWXTM8C81a66fXoNw=)
3: ecPozDTBiwtPhHsED0tZv93AzPY.roa (hash: VAqfrUatc4XqZvYROBfJJkH7/EgI7JEtqS/gigZEo5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:12:ae:02:73:85:b0:64:17:46:92:1d:a4:57:fd:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729b33de6051d04d75f6bb1f7e53b1efd6646211
Validity
Not Before: Sep 11 00:00:17 2025 GMT
Not After : Sep 12 00:00:17 2025 GMT
Subject: CN=ff9fe67dea0c3374b72393ab6d255de8704426ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:c9:e5:f4:a3:4c:ad:5c:8e:86:f5:9f:85:
d9:f0:44:39:9c:3c:6f:95:04:99:00:71:42:2f:d1:
39:ee:ff:a1:b1:a3:b5:ae:de:c5:0c:9d:38:e2:f9:
59:a6:f7:a3:fb:bd:04:29:d8:7c:2b:81:b6:c5:f1:
33:26:c1:fb:41:ad:6c:89:5c:fc:ed:4b:ac:0b:b9:
cc:25:64:86:6d:06:8a:18:23:c7:60:6b:b1:30:d7:
18:b8:16:5a:1a:78:42:af:64:3d:52:fc:4c:5c:ad:
c3:53:9b:93:9a:9c:a3:9a:30:91:26:eb:d4:17:26:
91:4a:8a:56:db:2f:45:eb:61:be:54:6e:e5:da:d8:
40:76:8c:7c:b0:45:e2:fe:3a:a0:5f:aa:1c:ea:d8:
04:fe:c6:53:bb:9b:74:d2:ff:6e:e5:d6:27:9e:52:
59:b5:e5:be:29:1e:c8:f1:f0:53:e0:7e:01:1a:5e:
fa:b2:a5:78:bf:6e:21:87:6f:5b:ef:03:e8:5e:db:
59:0e:ad:a4:30:65:6e:97:63:e6:9f:5d:09:aa:36:
12:f6:74:d5:4f:1b:1c:33:62:46:db:75:ab:dc:22:
fd:45:1c:00:40:cf:9a:9c:c4:17:9d:ad:eb:b4:d3:
c0:2b:39:49:bf:5e:b6:43:f0:7b:ef:ac:ec:16:6f:
90:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9F:E6:7D:EA:0C:33:74:B7:23:93:AB:6D:25:5D:E8:70:44:26:AE
X509v3 Authority Key Identifier:
keyid:72:9B:33:DE:60:51:D0:4D:75:F6:BB:1F:7E:53:B1:EF:D6:64:62:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpsz3mBR0E119rsfflOx79ZkYhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d9541-eb7e-4a1a-b84b-6ea279a2e6cb/1/cpsz3mBR0E119rsfflOx79ZkYhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:43:52:3b:c6:c4:fd:f2:d9:fb:6f:0c:09:07:c1:0f:2e:33:
7c:63:80:17:e8:c3:b5:7f:81:2b:d7:3f:8b:3b:b6:b4:2f:fc:
63:07:f9:1d:82:03:57:c1:79:a0:b6:7b:2e:9d:a3:fe:db:9a:
0d:a4:80:2e:15:57:04:05:3c:24:c6:7c:6a:1e:77:22:de:ec:
0d:15:29:56:33:cd:cd:75:9e:da:9f:a1:d4:bf:b6:a0:fb:7a:
9c:a1:02:58:81:17:e2:37:f9:7a:23:01:74:48:ba:10:a4:3c:
49:e1:40:aa:f8:0f:de:7c:13:5d:71:38:96:53:2a:fe:31:85:
87:84:11:2b:8f:82:0e:ba:e0:4f:45:5c:02:03:0e:d9:be:a2:
29:48:ae:59:87:71:e9:e8:e3:35:0b:e8:59:f6:c2:46:7b:5e:
2d:b4:03:1b:2c:fe:28:5e:d2:5e:2f:98:a1:08:55:32:ce:2c:
7c:bd:86:ac:f0:39:3b:50:00:0e:a5:70:91:d4:87:75:61:31:
38:18:9a:1b:89:08:5b:cd:0d:56:8c:cc:c2:17:8b:19:50:45:
d0:42:86:91:a9:4d:6e:c0:04:fc:c3:eb:dc:f9:46:72:c7:74:
0c:d5:e5:f8:6e:28:bd:74:a8:cc:4a:a7:25:9f:24:4c:9c:c0:
69:3b:55:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 05:27:46 2025 by rpki-client