Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
File: cSyZzDOPaS2o-Btxa6150cnXyCA.mft (raw, json)
Hash identifier: KE6oOyty2EOTURGfwHe4JlE+DyKB74iBXlsOZ/K65W8=
Subject key identifier: 7F:EF:A3:9B:19:77:29:77:BB:D0:F3:3C:F8:4F:D4:F7:70:ED:2A:03
Authority key identifier: 71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
Certificate issuer: /CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Certificate serial: 019856454E815CE5BE1AAF6B1A51378814E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 13:00:39 +0000
Manifest this update: Tue 29 Jul 2025 13:00:39 +0000
Manifest next update: Wed 30 Jul 2025 13:00:39 +0000
Files and hashes: 1: cSyZzDOPaS2o-Btxa6150cnXyCA.crl (hash: Gde+2ogK5x76fTO48mPKeIGyVs0ZrVIfq+xwc13EzRQ=)
2: lRz2gnfLm7nHaNSGeuPC7z_h668.roa (hash: 8k0N7eTmOOHH9ozZI5M8UWNCcA5B8u1B/kuz2VrrXfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:45:4e:81:5c:e5:be:1a:af:6b:1a:51:37:88:14:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Validity
Not Before: Jul 29 13:00:39 2025 GMT
Not After : Jul 30 13:00:39 2025 GMT
Subject: CN=7fefa39b19772977bbd0f33cf84fd4f770ed2a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:57:fd:d3:18:84:92:bf:99:92:49:7b:6e:cc:
23:b2:6e:dc:5f:c1:8c:48:cc:88:8b:d9:3b:2f:02:
da:4f:3d:9b:0c:fb:05:19:71:63:44:19:90:7e:45:
11:ac:8b:fc:d2:a8:a0:ef:f0:45:2b:d0:d5:fb:67:
8f:4c:91:2a:61:bb:b7:57:a1:62:ec:dd:34:82:95:
67:cd:0c:99:18:c4:37:f5:60:39:eb:fc:a5:d2:09:
28:f8:4e:00:21:55:2c:14:b4:6f:a5:fc:90:c3:f2:
b5:27:c8:a3:84:3e:e9:f3:de:2b:a0:ff:54:5e:1c:
c9:95:01:60:7c:17:c3:f5:08:00:17:62:ef:94:08:
e2:60:2a:12:31:99:21:58:a4:7f:ef:b9:98:d4:e1:
0a:66:6d:13:73:11:0c:32:ac:08:1c:0f:e0:3c:f7:
7b:55:fe:89:b7:f4:cc:99:dd:a5:2d:0c:7c:2e:87:
75:b6:44:5c:ec:82:56:df:97:39:54:21:a0:dc:8e:
c5:9a:9a:d3:38:45:26:2c:4b:e9:40:de:f6:0a:61:
91:a1:9c:0a:96:b6:ae:51:10:e6:de:b0:c8:18:5d:
5c:32:0a:70:ee:fd:58:f2:09:d1:cc:ef:0c:f1:f4:
4f:0d:5f:9a:61:8e:2b:c3:fd:79:b0:b0:e3:1d:17:
8a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EF:A3:9B:19:77:29:77:BB:D0:F3:3C:F8:4F:D4:F7:70:ED:2A:03
X509v3 Authority Key Identifier:
keyid:71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:82:d5:e6:d8:16:83:86:dc:51:23:a6:d4:b4:ae:85:35:6b:
9e:02:0c:1a:ad:33:9c:2e:3e:46:84:31:d3:48:9e:e3:44:66:
e7:54:a4:79:14:33:fc:e1:80:27:13:6a:e4:0f:e8:a6:cb:1c:
7d:91:e9:5a:f5:14:12:79:fa:47:aa:2e:82:06:2b:7a:cb:7d:
56:62:79:51:3f:2c:94:55:d8:a8:3d:1f:c2:0f:33:07:4a:52:
a0:21:4f:55:79:92:18:71:5b:ed:5b:6f:9d:56:b0:1e:91:81:
bf:67:c0:34:9f:3b:3f:6a:c9:c6:64:87:26:62:85:8f:e6:c5:
15:0e:ad:b5:75:23:0f:31:15:24:ee:1b:b2:bf:ef:be:19:b6:
a1:99:37:0f:ec:7f:92:b2:2d:d8:b9:89:6b:6d:c9:35:7d:15:
0e:f4:7a:3d:c6:ce:96:ab:f2:76:fe:86:26:f3:b7:66:c0:98:
c8:9a:af:b1:f0:54:9e:1a:3c:eb:fc:3e:8a:3d:6b:5d:66:27:
88:6d:20:ee:d1:f9:8a:05:78:7d:46:5d:2b:48:07:2d:a7:77:
e6:4c:06:96:dc:26:13:c7:4e:ea:f8:9b:81:86:49:29:c9:18:
dc:34:66:2a:72:66:f7:f1:43:3c:92:8b:6c:8b:c4:d6:ab:0d:
67:d3:3d:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhWRU6BXOW+Gq9rGlE3iBTjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMmM5OWNjMzM4ZjY5MmRhOGY4MWI3MTZiYWQ3OWQxYzlk
N2M4MjAwHhcNMjUwNzI5MTMwMDM5WhcNMjUwNzMwMTMwMDM5WjAzMTEwLwYDVQQD
Eyg3ZmVmYTM5YjE5NzcyOTc3YmJkMGYzM2NmODRmZDRmNzcwZWQyYTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFf90xiEkr+Zkkl7bswjsm7cX8GM
SMyIi9k7LwLaTz2bDPsFGXFjRBmQfkURrIv80qig7/BFK9DV+2ePTJEqYbu3V6Fi
7N00gpVnzQyZGMQ39WA56/yl0gko+E4AIVUsFLRvpfyQw/K1J8ijhD7p894roP9U
XhzJlQFgfBfD9QgAF2LvlAjiYCoSMZkhWKR/77mY1OEKZm0TcxEMMqwIHA/gPPd7
Vf6Jt/TMmd2lLQx8Lod1tkRc7IJW35c5VCGg3I7FmprTOEUmLEvpQN72CmGRoZwK
lrauURDm3rDIGF1cMgpw7v1Y8gnRzO8M8fRPDV+aYY4rw/15sLDjHReKsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/vo5sZdyl3u9DzPPhP1Pdw7SoDMB8GA1UdIwQY
MBaAFHEsmcwzj2ktqPgbcWutedHJ18ggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1N5WnpET1BhUzJvLUJ0eGE2MTUwY25YeUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kOTVmMzItODIyYS00Y2ZlLTk4NTMt
NGViZWY4ODg0Mzk2LzEvY1N5WnpET1BhUzJvLUJ0eGE2MTUwY25YeUNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9kOTVmMzItODIyYS00Y2ZlLTk4NTMtNGViZWY4ODg0Mzk2
LzEvY1N5WnpET1BhUzJvLUJ0eGE2MTUwY25YeUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYLV5tgW
g4bcUSOm1LSuhTVrngIMGq0znC4+RoQx00ie40Rm51SkeRQz/OGAJxNq5A/opssc
fZHpWvUUEnn6R6ouggYrest9VmJ5UT8slFXYqD0fwg8zB0pSoCFPVXmSGHFb7Vtv
nVawHpGBv2fANJ87P2rJxmSHJmKFj+bFFQ6ttXUjDzEVJO4bsr/vvhm2oZk3D+x/
krIt2LmJa23JNX0VDvR6PcbOlqvydv6GJvO3ZsCYyJqvsfBUnho86/w+ij1rXWYn
iG0g7tH5igV4fUZdK0gHLad35kwGltwmE8dO6vibgYZJKckY3DRmKnJm9/FDPJKL
bIvE1qsNZ9M9Bg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 18:35:27 2025 by rpki-client