Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
File: cspFbK0jiDCzjs1NJnys-lzV8fE.mft (raw, json)
Hash identifier: jOuoVoLlCw14G61FlgXNRSRhmbWWuTVEiRF6I29aDHo=
Subject key identifier: 42:C2:6C:D3:E9:A6:AB:E0:A9:34:BE:95:07:07:69:DD:09:68:D9:13
Authority key identifier: 72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
Certificate issuer: /CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Certificate serial: 01988357316A0F19CC3FF098BD1D88D278BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
Manifest number: 161E
Signing time: Thu 07 Aug 2025 07:03:06 +0000
Manifest this update: Thu 07 Aug 2025 07:03:06 +0000
Manifest next update: Fri 08 Aug 2025 07:03:06 +0000
Files and hashes: 1: 9qsPYE67U8LKJS5RPyzpaJjKAjw.roa (hash: ate2+ga4mYDOeR+5DaCdTzRa6tHIKsrgVcrNBTn+5LQ=)
2: cspFbK0jiDCzjs1NJnys-lzV8fE.crl (hash: AMQeyfa6Gj2xs5ANhCvDkiZ3gtLgE9oRjPoFGwZGajQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:57:31:6a:0f:19:cc:3f:f0:98:bd:1d:88:d2:78:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Validity
Not Before: Aug 7 07:03:06 2025 GMT
Not After : Aug 8 07:03:06 2025 GMT
Subject: CN=42c26cd3e9a6abe0a934be95070769dd0968d913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:97:f7:de:ea:5c:96:35:99:ba:f4:f1:9a:0a:
b6:23:57:81:dd:e7:1a:60:87:65:b0:b0:07:cc:4c:
91:a6:15:26:70:ee:72:42:df:05:c9:46:32:c3:c6:
a8:35:fb:71:d7:dc:97:6f:68:0c:1d:38:a8:9d:ae:
f3:14:d6:18:61:b9:86:2b:32:5e:61:8b:89:00:6b:
c4:48:8b:d0:13:fe:b9:7f:6d:d1:40:ae:ea:97:90:
1c:4b:1e:26:d5:9a:99:85:3f:7c:20:e3:9c:47:66:
82:c6:f8:24:b0:f7:14:b0:d4:71:5a:b4:56:1c:30:
29:69:56:5d:99:a5:db:a4:97:a9:80:50:63:39:7d:
a1:bd:28:28:33:8c:8c:4b:01:1b:5a:05:4c:28:8f:
5c:36:00:00:d2:c9:7f:ff:2c:0a:17:1b:6f:50:a3:
f9:f2:3d:42:23:72:ac:2b:ac:59:3c:f9:9d:eb:c6:
db:2a:09:f6:92:10:95:be:f3:d6:0b:36:9a:56:b1:
87:50:40:e5:34:cb:aa:b2:8e:65:4e:83:43:8d:7e:
b3:9b:db:b0:70:f0:c2:f5:f1:7a:23:69:ee:dc:25:
d1:2b:fd:cc:5e:93:78:6f:61:76:41:c1:a9:53:f3:
fc:1e:90:e7:f5:6f:b2:0e:3c:fc:26:19:03:00:2d:
5f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C2:6C:D3:E9:A6:AB:E0:A9:34:BE:95:07:07:69:DD:09:68:D9:13
X509v3 Authority Key Identifier:
keyid:72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:17:2f:15:a3:15:d5:ee:72:61:78:f4:ba:cc:eb:d7:10:06:
6c:c3:c2:c3:56:69:b4:4d:47:f7:8d:22:17:85:0e:bd:9c:12:
93:6c:23:8f:2d:fb:52:a1:30:b9:cf:9b:e6:51:ad:a6:03:53:
81:8f:2a:b5:a3:a3:2f:fb:74:56:e3:0f:d6:fe:eb:0c:b6:b4:
39:60:bf:52:9c:13:63:ea:b9:98:f1:c5:89:9e:6d:bd:26:ef:
20:c4:c8:e4:e8:eb:58:f8:1d:6c:57:9a:71:d6:05:5e:8b:60:
cd:fd:2d:60:05:d1:6e:66:b6:10:73:0c:e9:60:16:80:b2:0f:
c9:17:9b:36:31:3c:05:8a:81:ac:54:ed:9d:65:ec:c6:4b:55:
b6:f2:cd:af:8b:e0:7d:9f:2b:69:8a:bc:a2:00:cd:cc:68:e3:
0b:6c:fe:c0:e1:41:71:d4:c2:65:35:7d:3f:8c:c0:12:b1:1b:
8b:52:98:d9:9f:a9:72:94:cc:49:ec:e3:92:51:d2:ed:db:a3:
26:05:87:e3:5a:fe:40:ab:38:a8:ce:2e:8e:a5:00:45:02:6c:
e0:b9:8f:ab:14:24:b3:f7:1b:af:f4:aa:f2:10:25:1e:86:22:
c9:56:29:4b:03:0f:de:12:6b:73:94:cc:92:d6:f6:51:a6:d6:
d4:11:1c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:34:01 2025 by rpki-client