Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
File: cSyZzDOPaS2o-Btxa6150cnXyCA.mft (raw, json)
Hash identifier: apJZ+rrXci9MV6AhI4p7GOByWIBOansWI0N1QOwB10I=
Subject key identifier: F6:05:6D:41:09:23:7E:81:32:86:0E:BD:07:21:73:20:29:4F:0B:DD
Authority key identifier: 71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
Certificate issuer: /CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Certificate serial: 01994F650C7DBD940723E5F6CCCA4168ABB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
Manifest number: 1688
Signing time: Mon 15 Sep 2025 22:00:46 +0000
Manifest this update: Mon 15 Sep 2025 22:00:46 +0000
Manifest next update: Tue 16 Sep 2025 22:00:46 +0000
Files and hashes: 1: cSyZzDOPaS2o-Btxa6150cnXyCA.crl (hash: jJzK40RCiyUYHPuynSoJKqppis7VfmCazVgXJJUMI4I=)
2: lRz2gnfLm7nHaNSGeuPC7z_h668.roa (hash: 8k0N7eTmOOHH9ozZI5M8UWNCcA5B8u1B/kuz2VrrXfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 17:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4f:65:0c:7d:bd:94:07:23:e5:f6:cc:ca:41:68:ab:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Validity
Not Before: Sep 15 22:00:46 2025 GMT
Not After : Sep 16 22:00:46 2025 GMT
Subject: CN=f6056d4109237e8132860ebd07217320294f0bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e0:90:a9:79:a9:7a:46:77:bf:54:85:b4:56:
78:64:63:b0:2d:22:c2:cc:e4:93:ab:0b:a5:8f:59:
18:f7:db:35:ca:8b:2b:68:6a:4d:c8:13:f5:ef:99:
02:39:3e:15:6f:0e:01:ce:35:36:a6:b1:30:d7:03:
22:b2:7d:f7:69:c9:49:82:ae:3f:a0:8a:18:59:19:
4c:47:5d:32:dd:40:6e:25:dd:77:5d:33:88:18:b5:
a8:69:01:a6:fc:f4:4e:3d:eb:52:39:5c:ce:fd:2e:
55:33:be:d6:d2:64:ac:34:79:d9:29:21:53:1b:74:
29:95:b5:c1:a1:45:a7:38:63:90:f8:03:fc:29:ea:
cd:df:e7:42:a1:55:8c:64:59:ef:52:e2:fd:cb:18:
7e:cf:ab:bd:76:1a:87:32:40:02:f2:bd:0f:f6:e6:
c2:4a:d1:e8:83:8a:a2:6c:b4:c4:a9:ed:a7:4c:4c:
bd:df:9b:b7:66:df:95:6d:c2:d3:1f:24:12:d1:11:
bf:e3:85:2f:35:29:7c:4f:63:ec:2a:9d:5b:01:2d:
a2:5d:9b:e9:0b:3b:68:87:2d:02:57:d8:db:73:c2:
67:0d:a6:05:e8:2e:66:90:9e:ec:82:b4:88:00:f5:
b6:18:97:91:b4:ec:c3:38:df:ba:78:06:0c:44:25:
aa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:05:6D:41:09:23:7E:81:32:86:0E:BD:07:21:73:20:29:4F:0B:DD
X509v3 Authority Key Identifier:
keyid:71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e3:ee:64:aa:f1:e0:26:fc:2c:95:b3:76:9b:23:a0:78:64:
15:a1:ce:67:5c:ea:36:23:60:7f:2f:ae:83:98:19:f1:a8:db:
bf:9f:b2:e2:d2:29:7b:7e:bf:eb:f3:56:8e:1e:3f:6d:83:ab:
d2:b5:99:5d:ce:4c:0d:62:9c:59:87:e9:fa:c0:28:9d:77:d4:
2a:49:55:7e:80:76:d7:41:bc:05:8e:10:e0:7e:1b:c4:a1:4e:
1a:6c:0c:08:bf:03:ca:b0:80:41:84:61:69:de:e4:9e:43:23:
e5:c3:cb:2a:a4:e6:17:62:c1:b8:3e:9e:ac:d5:68:d1:57:4a:
6b:bd:2c:88:74:8e:a4:e3:f2:4e:83:02:6c:dc:5d:f6:46:95:
bf:03:01:a2:db:1f:5c:6d:6d:8c:ea:a0:0d:eb:2f:ed:a7:16:
4f:03:87:de:bf:ed:b4:67:68:f0:b7:0d:b0:5e:15:da:da:df:
ef:ea:2e:e9:94:8f:15:18:ca:06:39:0e:bd:71:63:ed:97:8c:
74:c6:44:cb:36:2c:24:1a:42:11:14:d1:21:0f:dc:4c:4e:83:
e1:55:9a:4b:cb:05:6d:c6:ff:a6:6a:28:42:f0:64:b9:68:50:
19:17:e3:ce:ce:c5:d9:37:21:15:de:8e:2c:85:4b:c5:13:39:
f5:54:df:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 02:19:16 2025 by rpki-client