Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
File: cSyZzDOPaS2o-Btxa6150cnXyCA.mft (raw, json)
Hash identifier: kiO63nI6LPtYKNEBgtbLsBgiTj/tbpakOuLFqYRkkGc=
Subject key identifier: CA:59:99:B2:C0:66:CD:CA:C4:B9:F3:EE:C4:2F:4B:1B:38:0D:FA:D7
Authority key identifier: 71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
Certificate issuer: /CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Certificate serial: 0197782ECA41C3305FB2747B554B7F505118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
Manifest number: 1594
Signing time: Mon 16 Jun 2025 10:00:21 +0000
Manifest this update: Mon 16 Jun 2025 10:00:21 +0000
Manifest next update: Tue 17 Jun 2025 10:00:21 +0000
Files and hashes: 1: cSyZzDOPaS2o-Btxa6150cnXyCA.crl (hash: N5I7ccDmjMEAKUb0w7vjHgD1Uh8rx5dqd6iHCJ02S2I=)
2: lRz2gnfLm7nHaNSGeuPC7z_h668.roa (hash: 8k0N7eTmOOHH9ozZI5M8UWNCcA5B8u1B/kuz2VrrXfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2e:ca:41:c3:30:5f:b2:74:7b:55:4b:7f:50:51:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Validity
Not Before: Jun 16 10:00:21 2025 GMT
Not After : Jun 17 10:00:21 2025 GMT
Subject: CN=ca5999b2c066cdcac4b9f3eec42f4b1b380dfad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:31:ab:f4:e9:a5:eb:b3:de:9d:b8:36:69:
d8:9c:08:25:e6:24:ea:ea:c4:55:e9:f2:a3:7e:3d:
48:51:29:4d:b9:75:4e:75:42:39:28:10:77:6f:15:
98:6c:0a:da:18:20:9b:76:9b:fa:52:18:db:b0:23:
dc:68:ee:dd:66:09:71:a6:b3:33:dd:51:41:17:ae:
4f:3e:98:ed:79:91:c4:05:b0:f1:f8:df:fd:0b:de:
e2:94:f9:95:f2:23:78:9c:65:0d:ae:1c:c9:21:92:
63:77:77:59:e8:13:52:42:1c:64:fd:eb:18:38:42:
ce:35:62:51:2b:08:ae:32:83:7c:8f:b3:68:d9:fc:
25:c1:8d:4c:fc:36:83:4d:b3:b6:4d:18:1b:3e:18:
ee:35:1d:bd:af:f7:34:bd:5d:14:67:37:71:c1:17:
c6:3d:db:d0:f4:6c:a0:9f:4d:bb:32:7d:7b:3a:a7:
45:8a:49:98:da:da:27:b4:68:fa:2f:ec:37:c8:57:
77:83:0d:09:f2:74:e8:d0:b7:0b:ca:78:54:e9:74:
6b:9d:82:73:01:97:8e:80:a8:e7:19:22:20:96:4d:
5f:43:5d:d1:ab:0f:bf:b5:fc:bb:6f:95:38:4a:c2:
37:09:34:f3:0f:eb:99:af:52:d5:8f:1b:c7:5a:36:
d7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:59:99:B2:C0:66:CD:CA:C4:B9:F3:EE:C4:2F:4B:1B:38:0D:FA:D7
X509v3 Authority Key Identifier:
keyid:71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:fb:93:1c:a5:5c:1b:3f:33:f7:21:ec:1c:d1:bf:54:eb:ab:
98:19:f3:3e:84:b0:bd:50:4c:69:73:82:bb:0b:bf:c5:bf:e3:
b4:2b:a2:bc:10:1e:94:01:e9:15:f0:fa:48:1a:c9:00:60:bc:
45:bd:0b:e2:db:68:28:cc:e0:92:08:79:be:67:81:99:48:f4:
8e:6f:e0:d3:30:5c:f6:e8:37:97:0c:5c:09:8f:26:d5:0b:68:
26:bb:99:b6:04:e1:13:bf:33:cd:c7:32:72:20:77:09:c5:34:
3b:11:93:1f:b8:37:41:2c:c8:42:5f:b0:ed:54:78:45:74:61:
72:38:56:1e:0e:5b:e3:18:51:f6:03:bc:2b:66:e0:20:48:70:
4a:79:31:7c:12:08:d2:2d:c5:e5:ac:69:1a:8c:4d:04:bc:fb:
51:63:90:4b:ac:6d:07:a9:f5:65:7c:1a:a8:7b:ce:c8:05:13:
71:c3:6b:8f:cc:fc:04:79:b9:45:ab:6b:35:a3:1d:42:12:0e:
bb:40:1d:08:52:17:e2:8c:ae:ae:8a:b3:0c:33:3c:54:a0:e4:
08:fc:60:7a:c1:6b:88:f8:25:76:e9:8c:59:a7:2f:87:d0:b4:
0f:22:d0:c7:fa:73:78:ae:df:2f:3f:c5:04:b1:a8:43:0a:c3:
95:fc:59:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:20:47 2025 by rpki-client