Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
File: cpIiZWfact2GiDyt1fPeb_1bNXM.mft (raw, json)
Hash identifier: 3+/rSbJ2NsuklUbnoajNXhLpNZNUNBJdFTRD5Hs3gXI=
Subject key identifier: AF:01:6D:78:20:F8:6F:25:B3:B7:F2:88:D4:70:A9:96:DD:07:95:D9
Authority key identifier: 72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
Certificate issuer: /CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Certificate serial: 0198819E4DFEFB1B261D3A4A8D7E3DC2F464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 23:01:32 +0000
Manifest this update: Wed 06 Aug 2025 23:01:32 +0000
Manifest next update: Thu 07 Aug 2025 23:01:32 +0000
Files and hashes: 1: A2a55CFuU3rmZKWMjbnP0QRTKbw.roa (hash: h7ObFO2cHNspjyZ0BOSzsO0dobQTCK4BjzPiMYTX+dk=)
2: cpIiZWfact2GiDyt1fPeb_1bNXM.crl (hash: jNlYC8BLi4D0Ke4xAf6i0kEl+N1Jcdr4xcR9OOWJYZo=)
3: hOIlW-rpHRc2nOKpMGO_mfzaetg.roa (hash: VUIEi5LXdhfGKiMndwB/BQwcKviQdKt6bC3rAVXouZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:4d:fe:fb:1b:26:1d:3a:4a:8d:7e:3d:c2:f4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Validity
Not Before: Aug 6 23:01:32 2025 GMT
Not After : Aug 7 23:01:32 2025 GMT
Subject: CN=af016d7820f86f25b3b7f288d470a996dd0795d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:28:aa:96:8a:57:c1:86:ac:7b:95:38:39:
d6:d1:9e:6c:90:05:48:11:ce:c2:19:49:cd:c6:b7:
63:d9:15:e7:3a:1d:4d:54:2d:ec:bd:e7:54:63:41:
1b:fc:91:cf:d4:3a:46:e8:79:aa:89:06:e8:5d:bf:
79:64:16:b7:21:26:b1:1e:0d:7a:20:23:a3:10:85:
dd:26:27:05:6a:7c:a9:6e:2a:bf:20:ac:05:de:3d:
62:22:0d:53:a2:8a:3e:2c:5b:30:b4:88:1c:2e:42:
d5:4e:0c:32:44:52:49:6e:03:3c:e4:83:97:b1:a7:
f5:47:de:bb:45:4e:bc:29:0e:01:4b:b7:8f:ad:ff:
e6:c9:32:37:24:ab:e1:9e:86:d6:5e:37:34:71:3d:
5c:a9:63:5f:bb:70:d9:1e:a6:ac:99:91:7d:e7:85:
1d:5e:85:79:a8:8f:f3:5f:6b:e4:b1:e8:51:a8:de:
f0:d5:26:a9:0f:e6:4f:69:5a:d9:da:96:ca:0b:6a:
9a:6e:3c:87:a9:d0:f2:21:63:c5:52:c4:d8:54:96:
14:85:d5:5e:48:4a:ed:0a:c1:e9:8a:16:15:a1:e0:
85:7e:84:ec:d6:a8:f7:a7:39:65:4a:ae:1d:e1:ac:
44:b0:1b:9e:64:64:da:10:f9:a6:16:a3:7a:e9:b9:
48:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:01:6D:78:20:F8:6F:25:B3:B7:F2:88:D4:70:A9:96:DD:07:95:D9
X509v3 Authority Key Identifier:
keyid:72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:92:d4:50:75:4f:0a:94:44:73:9c:7f:79:82:28:d2:0a:a0:
61:0f:0e:50:24:a9:c8:37:44:4d:42:f9:ba:30:ed:d2:c9:61:
0f:d8:0e:3c:9e:71:df:23:95:7b:11:16:7e:a4:22:6d:b2:68:
5c:e2:06:90:40:16:30:79:f4:98:ae:b2:24:ff:fe:88:6a:80:
ae:e0:c1:9a:5c:b3:2f:39:10:b2:f5:42:34:62:70:bb:68:8e:
42:d0:12:02:a4:9e:1e:5b:d6:f6:e9:56:96:dd:11:06:d5:c0:
01:85:6c:43:e1:22:e2:cf:43:11:02:f6:8e:71:87:cd:c2:00:
26:56:62:59:7a:27:8a:3d:0a:2a:c1:54:db:46:11:cf:47:1c:
35:e2:93:0d:34:f5:84:7a:e6:0b:ea:bd:8e:a5:78:85:1b:7b:
55:5e:fc:0e:31:1d:a1:f9:aa:2b:65:6c:b5:d6:a3:78:fe:b6:
8b:bd:1b:20:55:8a:19:71:f4:b9:6f:52:7d:00:e6:68:42:6f:
65:c1:6e:07:28:33:b8:13:d1:d2:ba:06:f7:54:14:25:e0:22:
e9:b2:e1:c8:40:62:8d:5f:6d:1f:a5:d7:bd:0c:7c:cf:0e:27:
05:25:21:f5:7d:d7:85:35:5b:28:9d:07:16:6f:01:61:2d:ef:
a8:d8:df:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:22:13 2025 by rpki-client