Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
File: cSyZzDOPaS2o-Btxa6150cnXyCA.mft (raw, json)
Hash identifier: 5xZXHi/nxvy1ev7kRRvuhcgMGON50BXD9h4ZLWA98NM=
Subject key identifier: AE:00:5B:74:05:9F:15:4C:D7:7B:1E:94:44:37:C6:2B:BE:A1:AB:5A
Authority key identifier: 71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
Certificate issuer: /CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Certificate serial: 019A503E3511DC808B350CEBA22473D39DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 19:00:45 +0000
Manifest this update: Tue 04 Nov 2025 19:00:45 +0000
Manifest next update: Wed 05 Nov 2025 19:00:45 +0000
Files and hashes: 1: cSyZzDOPaS2o-Btxa6150cnXyCA.crl (hash: GHTod983PLehj6GfoIr7yfUW63GE7SXpcSO/Gkgo+Pg=)
2: lRz2gnfLm7nHaNSGeuPC7z_h668.roa (hash: 8k0N7eTmOOHH9ozZI5M8UWNCcA5B8u1B/kuz2VrrXfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:35:11:dc:80:8b:35:0c:eb:a2:24:73:d3:9d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Validity
Not Before: Nov 4 19:00:45 2025 GMT
Not After : Nov 5 19:00:45 2025 GMT
Subject: CN=ae005b74059f154cd77b1e944437c62bbea1ab5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:43:57:4e:a7:99:70:e6:e7:17:73:40:2d:
82:59:21:af:1b:9d:20:93:e5:13:a7:82:c1:6d:57:
28:66:ee:75:fc:da:12:1d:e1:46:f9:3a:50:2a:9a:
34:63:2a:fe:11:c8:2c:44:6a:0a:57:3c:50:86:81:
f2:97:64:07:2c:02:47:0a:f4:46:16:cb:6a:e0:2c:
a5:28:6c:0c:08:19:a5:e2:26:f7:a1:46:dc:6d:ba:
17:92:b1:7d:b3:27:9b:4b:37:70:f3:3f:64:0e:9a:
17:94:c9:9d:41:7a:5f:b8:76:3d:f9:20:d7:9a:0c:
b2:6a:21:8f:da:6c:93:56:7f:eb:40:d2:ea:28:1d:
b8:55:f1:ca:2b:e1:78:05:22:94:59:52:48:b6:3a:
76:8e:91:e3:e7:0c:f8:d7:13:7c:0d:63:95:fe:20:
2c:b3:99:5c:b0:37:10:12:a1:bb:87:95:80:59:23:
83:bb:db:1c:ec:91:7b:12:c4:19:68:e6:4c:40:7c:
2f:cc:ce:90:44:2f:b2:4b:6c:12:bf:a0:6c:57:aa:
6b:00:95:f0:2e:d5:b0:33:0c:4a:76:5f:9f:ea:27:
c6:cd:f1:d0:68:a7:75:c2:11:45:7c:3c:bc:3c:84:
5e:b6:aa:a5:50:7d:5c:58:e9:96:07:5a:a6:3c:75:
0d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:00:5B:74:05:9F:15:4C:D7:7B:1E:94:44:37:C6:2B:BE:A1:AB:5A
X509v3 Authority Key Identifier:
keyid:71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4d:e4:ec:24:4f:e1:b6:0f:59:37:c5:d4:c5:9d:c1:fe:0a:
ec:11:27:15:a5:92:13:22:7d:00:dc:a3:19:76:0f:2a:9c:a8:
c7:77:49:bc:31:b7:61:cf:05:f9:89:60:f3:8a:f9:75:5e:ad:
56:53:19:ea:f0:ec:80:51:f1:d4:19:b0:58:b5:4a:44:dd:a5:
b1:fa:09:36:ed:5e:ab:1c:aa:0a:45:39:a5:6f:56:c6:bc:61:
81:4a:c0:27:47:f4:fe:72:77:e4:cf:cd:1b:04:1d:30:d3:c6:
c2:d5:d1:3f:98:26:56:9e:a2:36:f0:98:95:7e:69:84:67:ee:
68:af:7b:f5:de:83:16:d5:bb:ac:ad:4e:3d:16:37:f3:80:e0:
8d:d6:dc:cc:d6:21:07:ad:cb:98:d3:15:e5:f1:b1:fa:2e:66:
99:1d:04:cf:a9:c0:07:d5:12:38:3b:8e:45:11:49:64:e4:cc:
4f:56:e7:e7:a8:04:81:94:07:0b:ab:bd:f9:0c:5d:c5:c3:a3:
5f:05:56:f8:8f:08:0b:59:06:43:e1:75:be:b1:3f:e4:ab:2d:
e3:e8:48:37:bb:40:e7:ac:1c:aa:11:34:cf:fb:a3:72:5a:46:
59:0f:fb:86:25:e5:5d:97:f8:54:04:61:05:24:bf:c3:0b:b5:
bd:38:b8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:03:46 2025 by rpki-client