
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
File: cpymPm0rUERJIX3AeIydN0ibTEU.mft (raw, json)
Hash identifier: nycD+IIuMZ831NscBe/VvXAinEfnOZi/UCAeBSEL+zc=
Subject key identifier: 0D:9A:2E:A2:7E:BD:D7:AA:13:20:B4:43:4D:7F:9E:24:C4:30:1B:35
Authority key identifier: 72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
Certificate issuer: /CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Certificate serial: 019873E3A981923AB589BDA32273912C1974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
Manifest number: 14
Signing time: Mon 04 Aug 2025 07:02:36 +0000
Manifest this update: Mon 04 Aug 2025 07:02:36 +0000
Manifest next update: Tue 05 Aug 2025 07:02:36 +0000
Files and hashes: 1: _h3FGAhO3fVXS5xwWldFCoCGTk8.roa (hash: csfcVsaCewEHGOnoGemFfnFrqe3f8adfupDygaqxPac=)
2: cpymPm0rUERJIX3AeIydN0ibTEU.crl (hash: Cdx94nkH+1M3kh4kRn3RIaaLH1U7T+7xYIzpSfy2H0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:a9:81:92:3a:b5:89:bd:a3:22:73:91:2c:19:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729ca63e6d2b504449217dc0788c9d37489b4c45
Validity
Not Before: Aug 4 07:02:36 2025 GMT
Not After : Aug 5 07:02:36 2025 GMT
Subject: CN=0d9a2ea27ebdd7aa1320b4434d7f9e24c4301b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3b:61:21:18:c5:82:9d:fc:76:c7:89:d3:4f:
27:d2:15:c0:36:e2:db:14:1b:36:d7:74:b6:55:01:
2c:32:94:3d:c5:ab:9e:a0:ac:78:43:a4:97:7a:ff:
50:3e:ce:74:e0:56:63:fe:10:0b:26:db:ef:ff:72:
c1:77:03:61:ae:4f:79:c1:1d:88:f8:86:a0:e4:d5:
07:c2:7e:16:e4:7a:42:d5:1d:22:34:b2:eb:1b:d5:
f8:78:f2:15:ff:3b:2c:57:0d:2a:5c:39:81:21:df:
35:9a:8b:8d:e2:29:0b:77:da:4e:fa:86:58:0c:f2:
d6:8e:31:86:2a:82:d5:fb:ae:e4:84:65:5f:91:94:
38:86:e8:d1:50:a4:ff:54:bd:f3:c2:6f:55:6d:15:
3b:7a:c6:2b:1a:fd:ed:2e:fd:04:90:18:87:a9:c4:
6c:f1:9f:44:16:0b:00:54:39:24:19:ec:9f:9b:e1:
0d:cb:01:31:f7:ef:c6:d5:c7:24:ab:6e:82:10:01:
f6:82:62:13:b1:48:ae:70:92:94:b7:f5:2b:79:e0:
9d:86:01:36:9f:b6:85:65:6a:f6:75:28:d5:04:ad:
af:a5:0b:96:a2:0e:d5:70:a3:1b:be:73:b4:06:1f:
78:af:88:b2:ae:08:6f:1d:4c:9a:cc:38:b3:61:7b:
0b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9A:2E:A2:7E:BD:D7:AA:13:20:B4:43:4D:7F:9E:24:C4:30:1B:35
X509v3 Authority Key Identifier:
keyid:72:9C:A6:3E:6D:2B:50:44:49:21:7D:C0:78:8C:9D:37:48:9B:4C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpymPm0rUERJIX3AeIydN0ibTEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/59ea29-f288-468e-a33e-559e3d76c5b6/1/cpymPm0rUERJIX3AeIydN0ibTEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f4:38:8e:07:a0:11:34:02:46:13:20:8b:f0:4a:58:c5:f5:
87:cb:67:0e:32:a3:91:d9:b6:8d:70:ff:ca:99:50:72:23:1e:
2e:75:88:a8:30:84:9d:67:e6:77:38:5a:de:c7:b1:c2:82:0a:
44:bc:a4:c1:cf:83:86:e8:89:da:bf:07:e7:2f:9b:35:23:da:
51:39:4c:a2:a3:ef:51:da:93:c3:e4:a5:9a:87:f0:8d:71:24:
de:08:f4:ef:08:65:a6:d9:e7:4f:1b:d5:e1:ef:55:a8:f6:d0:
e5:fe:5a:c9:3d:d7:7b:e9:64:4c:20:d8:d2:5d:9c:cb:b0:b0:
6a:09:7b:72:71:89:98:75:5d:f9:4e:10:1c:fa:b7:ed:a6:b2:
44:52:30:39:2b:f2:a9:66:19:fc:a9:62:79:3e:c2:76:05:24:
55:cb:08:f6:98:20:6a:6a:e5:ce:3c:a7:3e:11:c1:1a:a2:52:
83:d4:ff:62:8e:fb:d5:b9:e7:fe:d1:68:07:7e:b9:22:8b:1c:
3c:ec:ab:6d:5b:55:70:de:05:75:48:48:16:6b:c2:1c:23:7e:
57:0c:16:65:69:2d:20:87:0f:74:84:9d:37:f4:bd:ff:cc:8c:
8d:8b:c0:9d:24:d8:39:71:22:81:fb:4b:e2:de:2b:1b:bb:df:
13:88:05:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:40 2025 by rpki-client