Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json)
Hash identifier: HMHEzCE4YiZUToZQxiXyjQ8JmhBowNKh29tKt53+DN8=
Subject key identifier: A6:C5:C8:4E:0A:20:FF:C9:D1:8F:ED:64:4F:BC:23:A1:5C:50:39:AD
Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Certificate serial: 01976F2C4FA2449B3AA58478BCCEDBA28B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
Manifest number: 0411
Signing time: Sat 14 Jun 2025 16:01:04 +0000
Manifest this update: Sat 14 Jun 2025 16:01:04 +0000
Manifest next update: Sun 15 Jun 2025 16:01:04 +0000
Files and hashes: 1: AIqZOuJk6FdX-ARR52-tZ3pV5L8.roa (hash: UtG/CvZxoKdSqsgWu/Ntn0zvOecwyIkuE2hEquBOnL4=)
2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: 4jdCDuPumo9baeQw1g/w3cRQOA22IVP38ocWADZDogc=)
3: xytDSya4p2EgaXuzXHLS_THUKdo.roa (hash: ZRTiRpSuhaqocQiQr7gHeK4/PUG2E2ZO09HQMf9siGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:4f:a2:44:9b:3a:a5:84:78:bc:ce:db:a2:8b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Validity
Not Before: Jun 14 16:01:04 2025 GMT
Not After : Jun 15 16:01:04 2025 GMT
Subject: CN=a6c5c84e0a20ffc9d18fed644fbc23a15c5039ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3a:e2:c4:53:d2:8c:98:7b:37:25:f9:ae:3f:
08:45:36:bf:ae:3e:70:24:40:2b:85:74:21:6d:93:
86:02:b6:cb:af:a7:70:d9:c2:53:fa:89:e0:b8:b9:
3d:34:f7:fc:a8:9b:f2:d0:18:66:d5:d9:87:21:63:
0f:1f:90:4e:9e:e0:02:6c:f9:6a:9f:eb:d0:66:8c:
6b:0b:e0:16:a9:fb:f7:1f:ff:9e:6a:bf:9c:91:33:
b3:67:88:46:50:38:96:33:ee:c6:7f:b1:82:19:6d:
da:1d:65:2a:e0:1f:d2:ec:66:a8:37:f4:6a:38:84:
42:6a:8c:4c:06:17:1a:10:d6:0e:dc:7a:36:0f:b4:
d3:ff:ad:ce:de:89:3f:25:3b:6e:ce:ba:0e:1d:e6:
27:36:6c:d2:ac:fa:37:1d:5f:2b:e1:71:86:ac:ba:
68:24:5b:1c:3d:45:34:11:fc:c7:41:fe:c0:dd:43:
32:f4:d1:02:9f:60:b3:65:b6:36:b0:f9:26:ec:5a:
0a:23:14:1e:31:98:8d:27:9c:b0:3d:79:7c:6c:3d:
59:16:10:fc:6a:7f:5a:10:0c:b1:d3:02:bb:37:75:
16:25:55:67:3c:06:b1:1b:60:d0:61:95:7f:ce:2d:
a0:c0:e8:7c:1a:bc:51:85:86:b7:29:73:55:9a:9c:
9e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C5:C8:4E:0A:20:FF:C9:D1:8F:ED:64:4F:BC:23:A1:5C:50:39:AD
X509v3 Authority Key Identifier:
keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:67:b7:7e:13:ae:67:89:88:48:76:e3:1d:1f:7c:c9:94:34:
86:14:10:5e:e7:84:a4:cd:5c:8e:fa:34:70:53:02:19:a6:72:
fb:06:39:b0:0b:1c:7a:5f:f1:8a:db:06:f0:4b:e4:2e:1d:fd:
c5:d1:e2:16:53:70:0f:54:9b:4c:a8:06:ce:3b:d9:91:e7:ad:
d4:b8:1f:9a:fc:d0:79:f4:b6:80:a4:ab:b1:2e:73:69:73:b5:
93:9a:08:f0:f4:c6:86:21:ab:e1:bc:46:ee:33:e6:5c:74:18:
f6:97:4a:53:24:99:dc:45:54:08:bb:83:e5:c9:df:b4:48:48:
19:6c:dd:8f:32:bd:75:6f:38:fc:20:7a:76:1a:79:52:df:21:
07:49:1d:bd:51:ed:22:57:e2:8d:c0:1f:4e:80:94:d7:1e:23:
17:d0:09:9c:d3:74:51:e2:92:96:31:ae:9c:22:85:13:e9:9e:
6f:93:77:01:e2:e4:37:2a:4c:f5:7a:6b:c5:cc:a2:ab:84:51:
cf:cb:dd:6e:be:66:9e:93:70:2f:9b:12:ee:91:f5:d0:09:0e:
ae:5d:21:2c:58:e9:c1:22:66:c7:f6:9a:92:dc:c3:2b:07:bd:
43:b1:0e:ea:f3:fe:e6:2b:f3:ed:0d:f3:87:05:51:5e:49:5a:
b2:3a:2b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:22:20 2025 by rpki-client