Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
File: csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json)
Hash identifier: rpsMPW6v6XgWunCTc9yZNqVOK8ZOonBtUPChbrZ+B94=
Subject key identifier: 0C:3E:DB:72:07:A2:A4:4D:73:F8:E5:E3:EB:31:2C:14:29:92:A3:A1
Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
Certificate issuer: /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Certificate serial: 019879AF306D55CF7231078EA49EB5F4D92C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
Manifest number: 049B
Signing time: Tue 05 Aug 2025 10:03:00 +0000
Manifest this update: Tue 05 Aug 2025 10:03:00 +0000
Manifest next update: Wed 06 Aug 2025 10:03:00 +0000
Files and hashes: 1: AIqZOuJk6FdX-ARR52-tZ3pV5L8.roa (hash: UtG/CvZxoKdSqsgWu/Ntn0zvOecwyIkuE2hEquBOnL4=)
2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: hAvGmVCoNJZMCQJCJKMpT4RWyb+4GbeKtPrGUXA5bYw=)
3: xytDSya4p2EgaXuzXHLS_THUKdo.roa (hash: ZRTiRpSuhaqocQiQr7gHeK4/PUG2E2ZO09HQMf9siGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:af:30:6d:55:cf:72:31:07:8e:a4:9e:b5:f4:d9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Validity
Not Before: Aug 5 10:03:00 2025 GMT
Not After : Aug 6 10:03:00 2025 GMT
Subject: CN=0c3edb7207a2a44d73f8e5e3eb312c142992a3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2e:46:a8:f6:49:66:51:2c:6b:3d:ff:8f:53:
ee:7e:d1:4c:79:f2:a8:ec:ef:e8:80:78:bf:a3:c5:
5f:7e:61:bd:9c:07:67:f9:a4:54:ea:c7:8f:0c:11:
db:53:e7:fb:13:a1:bd:4c:d4:e8:f9:65:a3:57:6c:
16:1b:4a:d4:56:c5:c5:e9:12:16:58:1f:57:0d:f8:
23:d3:ba:ec:81:6f:d9:6b:2e:32:28:a8:f9:d7:85:
fd:77:ae:49:0e:93:f4:06:69:fc:5e:a4:2b:e1:f4:
9f:d2:62:39:e1:0c:41:97:29:b7:64:40:89:60:cc:
12:a9:73:04:9b:58:67:7a:24:0c:64:87:c7:63:6f:
c0:e9:c9:c1:c6:65:f2:0d:1c:45:16:8c:bb:66:c0:
2a:a2:f4:7f:ce:a5:4b:4b:77:aa:e1:2c:c1:bb:d6:
b1:dd:c2:f5:b9:f3:e7:0d:7b:49:8a:86:ed:d2:05:
a9:c9:f3:93:18:45:f3:f6:f8:b4:6b:12:56:c6:ec:
6a:59:e9:3d:39:af:b5:44:2a:5b:e6:a9:58:b4:e2:
b9:ba:ff:da:ca:dd:f5:5f:e7:8c:98:26:c0:28:86:
e9:2e:71:82:e8:00:9f:eb:15:7c:79:9a:86:e8:3c:
e0:df:00:d4:c9:94:bc:9a:25:7f:71:58:62:e3:75:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3E:DB:72:07:A2:A4:4D:73:F8:E5:E3:EB:31:2C:14:29:92:A3:A1
X509v3 Authority Key Identifier:
keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c9:f7:8f:f0:9f:29:aa:41:c9:b2:c1:bc:3f:8f:b2:f8:47:
0c:95:fd:aa:e9:f2:57:b6:ea:f2:71:37:42:a2:69:b2:da:95:
1b:9f:6c:19:f8:92:19:87:b5:67:50:f4:fe:b2:39:51:fd:14:
77:b7:44:79:3b:06:ce:f8:d7:6c:d2:78:d9:41:26:7f:38:91:
67:0d:4f:fc:d8:a8:e5:88:04:15:90:ea:fe:26:9d:41:ba:86:
68:1c:0c:77:e6:56:13:c1:c5:20:86:a7:da:97:67:0d:c3:7a:
d7:bc:ee:ec:3f:ce:24:cf:47:70:15:06:28:df:f2:24:29:6f:
1d:fb:d3:16:bb:d4:64:e1:c4:e5:d5:34:59:a8:d6:fd:10:c6:
3b:43:23:c7:cf:89:b7:b1:5c:de:5f:05:ad:46:f3:4f:5e:ab:
7d:a2:1b:8f:38:0f:b0:77:7c:3b:31:ae:79:da:9d:ac:2d:8b:
24:a6:e0:6b:cc:e1:9e:f0:45:e2:30:f6:40:ed:1d:4d:07:64:
50:07:c3:39:d9:f1:c9:5b:ab:c7:df:e1:5d:1b:22:92:4d:4f:
1c:3e:70:f5:6b:b7:23:7b:20:1e:a0:7a:c3:21:95:d2:16:80:
07:1d:6a:f1:77:04:ba:c3:51:7b:22:d5:23:ff:93:ab:27:f2:
f1:81:23:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:41:19 2025 by rpki-client