Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
File: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft (raw, json)
Hash identifier: ZtVCdIY3syK8PX1DeY2ZYGy6iRglRYWo96FzZp1ehL0=
Subject key identifier: 0D:80:61:96:AF:95:A9:69:63:8F:98:EA:D8:71:96:A4:7D:6F:86:81
Authority key identifier: 09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
Certificate issuer: /CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Certificate serial: 0198733D7A0D8B62FBBE828FAA45B97528A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
Manifest number: 71
Signing time: Mon 04 Aug 2025 04:01:05 +0000
Manifest this update: Mon 04 Aug 2025 04:01:05 +0000
Manifest next update: Tue 05 Aug 2025 04:01:05 +0000
Files and hashes: 1: 0En_rM3ItFKYLhaLLd8WBZOTlpA.roa (hash: 152maO322NYmeUI+2QBI3Muc080/yMuLJaeicPAME94=)
2: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl (hash: XNZ4krV2V7AT9eEflAstcP7sxbOgk1BT9dqt/6NEtAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:7a:0d:8b:62:fb:be:82:8f:aa:45:b9:75:28:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Validity
Not Before: Aug 4 04:01:05 2025 GMT
Not After : Aug 5 04:01:05 2025 GMT
Subject: CN=0d806196af95a969638f98ead87196a47d6f8681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:53:e9:37:b3:29:92:de:98:6e:0b:b7:22:
e0:fb:fd:04:49:70:48:ea:f8:ef:4e:ea:46:46:89:
c5:db:6e:6c:b4:50:10:b7:c9:2a:9e:6f:25:e7:38:
59:c0:cf:a5:06:f9:0d:1c:2e:80:4d:1f:a7:f9:34:
89:2e:ad:8c:90:b5:69:a2:a3:80:00:f6:5e:7c:4e:
70:34:ee:0a:a1:5a:f6:d6:fe:c1:59:5a:69:7a:de:
31:37:b2:bf:6f:1a:48:5e:77:57:a0:b2:6e:06:95:
e1:cb:44:e3:4b:65:5c:c6:78:f0:14:14:32:cb:6a:
1e:9e:de:4d:d0:bd:3c:70:24:2a:f0:55:69:c0:28:
5f:3a:04:8d:3e:a6:db:ab:da:d9:a6:89:18:c2:ae:
59:ef:04:94:16:67:5f:1f:ac:f7:5d:f2:82:79:16:
28:5d:2c:30:7c:3e:8b:05:bc:83:8f:d4:0b:22:da:
eb:86:8b:bd:c3:bf:5a:23:09:77:02:d6:0f:7a:04:
1e:d7:e1:f0:94:c0:77:36:f8:28:b9:84:a0:0e:18:
12:30:45:19:a6:a6:5b:76:e6:99:8c:5c:0e:cb:e9:
fb:36:56:8e:0a:93:61:8a:9f:c0:21:33:30:b5:13:
e8:89:4f:ce:cd:aa:92:b2:23:02:c3:2e:4d:6f:cf:
f3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:80:61:96:AF:95:A9:69:63:8F:98:EA:D8:71:96:A4:7D:6F:86:81
X509v3 Authority Key Identifier:
keyid:09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c4:50:68:96:2e:07:6f:ef:c8:bc:e7:59:ae:8f:ca:17:cc:
3f:de:0d:02:72:ee:62:61:e4:4d:1b:e3:a3:1d:69:93:a0:be:
9f:9d:9d:12:dd:3f:c4:d4:fa:4b:40:34:df:58:39:1c:ad:53:
a3:b6:14:5a:8c:d7:26:9d:4d:06:69:fe:48:12:c3:f5:70:b5:
a3:f6:fb:d7:d0:f9:09:55:52:ab:8b:1e:0a:9d:d6:a4:a1:c7:
c3:b8:71:b8:51:25:30:9b:cf:8b:d5:13:c1:a6:0c:4a:74:c2:
2b:1f:83:59:97:15:64:9b:c6:6e:f7:84:9a:c8:ca:96:15:dc:
6a:c4:45:7d:3c:fd:e0:3e:56:5e:37:65:70:e0:74:71:f8:ea:
a0:65:2a:0a:b4:2c:82:bb:a6:b8:65:f0:7a:18:b1:ed:f4:3d:
d8:01:20:19:75:84:88:dd:48:88:cc:f2:37:7b:5b:1a:f1:4d:
73:46:f6:2d:a7:32:8d:14:b5:7b:6d:60:79:17:bf:be:09:22:
18:13:cf:d4:b0:17:ff:c7:42:12:1e:ff:82:15:56:4c:72:62:
5c:07:ea:c1:73:a1:8e:66:23:bb:08:32:df:f4:33:50:e6:55:
65:16:0a:e3:a0:09:9f:d7:62:5d:94:88:2a:ed:8e:70:55:db:
d7:ff:90:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:46 2025 by rpki-client