Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
File: csoaXP9S6-LyK2adzCyQJ86guBw.mft (raw, json)
Hash identifier: mlMmUyX2P1+PIjQtKi1ur9sJN0Fya1ol6SLksrD5Tf0=
Subject key identifier: 37:CF:B0:3A:C9:ED:02:E6:1F:FF:2D:3F:48:CA:A3:B3:37:79:DE:1E
Authority key identifier: 72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
Certificate issuer: /CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Certificate serial: 01976EBDCD5FE4F2914F993F867398E8E86A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
Manifest number: 14F7
Signing time: Sat 14 Jun 2025 14:00:21 +0000
Manifest this update: Sat 14 Jun 2025 14:00:21 +0000
Manifest next update: Sun 15 Jun 2025 14:00:21 +0000
Files and hashes: 1: I_-FRfZa9GeQgym8xYKEVr-rfgA.roa (hash: AmRbI2XP8GOvp3frMOHSnlH48LSP6GLhPNS9PY26J8Y=)
2: Uex3x3CWB9WPAXdRNKBIFJzJsn0.roa (hash: 2qFFx/ZZv0i+OiRQdPCciM9T0PW45kAKmFf1AT14lvA=)
3: csoaXP9S6-LyK2adzCyQJ86guBw.crl (hash: wJWnjo6FuIiF1wJcr5F6G4wZALYalq7GUyoijXv1Z0c=)
4: rH_6QZmVa4_yNlZ_JVuN0_Vk3Xs.roa (hash: Z/fYNuFHcmnLVDSA1WLLI385MQXDkqW9Tw7vDgNOnAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:cd:5f:e4:f2:91:4f:99:3f:86:73:98:e8:e8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Validity
Not Before: Jun 14 14:00:21 2025 GMT
Not After : Jun 15 14:00:21 2025 GMT
Subject: CN=37cfb03ac9ed02e61fff2d3f48caa3b33779de1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:09:43:98:18:65:19:31:c4:b0:b7:70:da:4a:
33:48:4b:c0:ad:5a:27:2f:73:26:9d:d1:60:c8:96:
98:b3:89:7c:f6:b8:3e:85:63:10:8f:2d:e6:57:4a:
ea:3e:32:65:05:5e:2f:7f:c2:20:11:b8:ad:b5:6d:
7c:b2:c2:09:3a:0f:06:52:ce:81:d5:fc:db:70:e8:
e7:7e:a0:c7:21:e9:fb:01:9a:62:6c:4c:d0:03:ee:
23:5e:a0:11:49:18:62:33:43:22:6b:6c:e0:de:3a:
72:7e:fd:87:af:7b:09:27:3a:5e:63:2c:42:b1:f9:
49:a0:85:98:4e:92:a5:be:2d:ee:0e:9f:cd:17:36:
8c:94:0e:ee:b5:8a:b7:21:68:ed:f5:da:dc:57:a6:
21:30:2a:6e:00:7d:fe:72:7a:03:e0:46:15:a1:d4:
9a:47:97:6c:ed:df:7a:63:65:a4:4c:01:00:90:8e:
4b:9c:20:38:45:67:12:f4:72:e3:40:d4:d7:6b:3e:
fd:64:13:f2:c2:f3:97:48:43:cf:f7:14:5b:d3:a3:
a7:4e:ef:ad:d4:6f:a8:0e:53:f3:15:b4:d7:38:07:
8c:7e:f2:e3:27:0b:a1:ef:d1:fa:e4:23:62:0d:94:
40:4a:86:de:87:13:79:48:3c:f1:44:39:63:fa:c7:
53:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CF:B0:3A:C9:ED:02:E6:1F:FF:2D:3F:48:CA:A3:B3:37:79:DE:1E
X509v3 Authority Key Identifier:
keyid:72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:18:09:3a:5e:a7:48:06:16:47:16:1d:d1:0c:20:e3:b6:63:
8c:d6:0f:6b:e3:fd:97:fd:87:db:cf:9c:34:6d:ba:4b:91:3f:
31:9f:ce:ff:8c:b7:ba:5a:e1:ec:0c:1b:94:2a:0f:bf:0e:67:
cc:f8:1b:ab:02:71:77:85:3a:37:40:c3:9c:72:b1:bf:0b:f8:
ba:4b:17:dd:84:4b:eb:fb:50:2a:b7:c8:b3:3e:c2:d4:a8:17:
77:d2:43:79:91:7b:75:61:77:bf:96:30:bd:97:1a:4e:bd:a6:
d4:51:2e:10:62:67:d9:d8:9b:c6:32:46:ce:9e:40:63:6d:b4:
ea:66:9e:05:09:71:f3:0a:d6:08:07:d4:39:db:2d:74:f5:d9:
64:b6:b9:97:e8:72:1c:93:26:a9:03:7f:40:12:f0:2a:cf:a2:
2a:3f:af:6e:b9:03:a4:2b:e2:6d:29:68:7b:6e:aa:d5:ea:e6:
f1:fa:29:a8:33:3e:63:07:2b:13:74:a8:d5:52:4a:c3:44:30:
84:c5:21:b2:9d:74:ac:5c:7f:8b:72:6a:4a:7c:52:6a:ad:15:
40:dd:dc:1c:c2:72:9b:47:c4:f6:dc:d2:4d:bf:3e:8a:d8:e8:
a1:1b:4a:a1:d3:1f:b0:6f:f6:87:2a:bb:f2:cd:9e:2b:db:52:
f9:62:26:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:14:55 2025 by rpki-client