Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
File: cSyZzDOPaS2o-Btxa6150cnXyCA.mft (raw, json)
Hash identifier: ivkHxY54K1FNcdyLm1KTPuNabKQJIU8Q3nYv57lAD/Y=
Subject key identifier: 3A:B7:5C:D4:D5:F1:08:D1:3A:DB:13:FF:B3:7B:3F:69:DD:6A:08:60
Authority key identifier: 71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
Certificate issuer: /CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Certificate serial: 0198752B76770E80C57FD193A482C29EF7AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 13:00:39 +0000
Manifest this update: Mon 04 Aug 2025 13:00:39 +0000
Manifest next update: Tue 05 Aug 2025 13:00:39 +0000
Files and hashes: 1: cSyZzDOPaS2o-Btxa6150cnXyCA.crl (hash: XHjSU1iSdX0zz3ON3BH24Vm6RKaIMUAUrhq3Pz/zDko=)
2: lRz2gnfLm7nHaNSGeuPC7z_h668.roa (hash: 8k0N7eTmOOHH9ozZI5M8UWNCcA5B8u1B/kuz2VrrXfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:76:77:0e:80:c5:7f:d1:93:a4:82:c2:9e:f7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Validity
Not Before: Aug 4 13:00:39 2025 GMT
Not After : Aug 5 13:00:39 2025 GMT
Subject: CN=3ab75cd4d5f108d13adb13ffb37b3f69dd6a0860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3c:f7:9e:0f:2b:cb:28:28:4d:75:f1:ec:f0:
72:c4:19:1e:74:81:29:6c:1e:f8:a8:e0:de:ab:88:
b4:6b:5c:4d:0b:29:ce:08:19:48:75:a7:cd:50:44:
55:5a:c8:d1:90:b0:d3:17:1a:ea:49:17:e0:44:ce:
63:5f:0d:26:47:cb:0a:ae:54:89:12:31:c9:9f:df:
5a:86:c6:e9:64:5e:72:17:ac:52:bf:df:af:52:f9:
e4:ca:fa:95:a5:01:c5:93:c9:c9:a1:f2:b0:2b:c6:
4e:b7:6e:45:04:b3:0f:27:3a:3f:a1:83:2d:4f:77:
d6:89:61:d3:14:47:79:52:5e:cb:12:9b:1c:a3:0c:
75:5c:22:65:36:28:2e:0b:36:ec:2c:ce:d4:65:03:
c7:6b:41:0d:da:6d:20:5b:95:e2:7f:c5:54:fe:48:
df:f7:4a:46:46:b0:a3:8c:fb:73:0e:2d:03:58:a7:
3e:48:fe:cf:30:6e:ee:06:36:9f:08:26:0f:56:e9:
99:c9:35:d7:17:99:a8:5e:52:03:0b:47:a2:b3:c6:
cb:7b:a9:fa:93:d6:a1:b4:b9:7d:c5:d7:7b:9e:0c:
e2:b2:b8:63:bc:6a:31:72:9d:c0:3e:65:30:b5:5b:
dc:5b:21:1b:1b:a8:b0:34:86:60:15:22:d5:5a:41:
f3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B7:5C:D4:D5:F1:08:D1:3A:DB:13:FF:B3:7B:3F:69:DD:6A:08:60
X509v3 Authority Key Identifier:
keyid:71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:03:16:f7:f9:fe:8d:94:95:52:b6:f2:f1:9f:e3:10:72:24:
9c:39:b3:e8:73:13:a3:d2:13:37:69:07:1c:3b:5c:67:87:bc:
28:75:9f:76:05:f8:2a:18:e0:05:e2:5b:9c:15:bf:6e:d4:9e:
15:08:71:0d:c9:a5:45:90:22:cb:8b:26:61:f9:82:18:91:5a:
3f:33:ce:38:c3:d7:c8:f1:80:df:e5:1e:60:4b:f2:78:c8:eb:
22:5b:d5:d7:c6:2b:f7:ed:88:cb:3e:6d:69:f8:47:2e:2b:60:
78:5a:a0:37:af:09:ec:14:ad:8d:4d:b9:31:55:62:ef:c2:63:
72:7d:30:1a:ae:97:8a:5f:63:f0:c1:a5:ed:b7:ac:a6:e9:8e:
08:84:62:2f:50:e9:e7:d1:0d:51:cb:f0:05:15:b3:01:b3:fd:
63:9d:64:aa:88:84:80:66:2f:c5:63:d4:f6:bc:e7:8d:d9:58:
6a:b2:db:24:dc:89:a9:f0:70:b3:4e:a9:67:70:8a:4e:d1:37:
ba:2f:5f:36:d4:ab:24:2a:19:be:3d:25:44:e9:27:76:35:bc:
74:07:53:16:6d:af:4e:c9:5b:47:b9:d3:10:a5:9b:ab:e0:88:
0c:11:ab:98:19:b9:a3:6e:1b:16:9a:a1:73:c1:c9:76:42:61:
76:e6:6e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:50:00 2025 by rpki-client